Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
File:                     EEwNyHsCIy5J3FTU_79Ele4DNlU.mft (raw, json)
Hash identifier:          TGFJnOfI8PVDw8gKBjs8gVv4GCx/yn41SGBOi6W5dUc=
Subject key identifier:   C9:7A:EA:05:B3:E2:64:20:A9:7D:28:84:B6:93:52:47:B8:97:DC:96
Authority key identifier: 10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55
Certificate issuer:       /CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
Certificate serial:       01963B09F001DD85BFAE1F43A63D288343BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
Manifest number:          09E5
Signing time:             Tue 15 Apr 2025 20:00:29 +0000
Manifest this update:     Tue 15 Apr 2025 20:00:29 +0000
Manifest next update:     Wed 16 Apr 2025 20:00:29 +0000
Files and hashes:         1: EEwNyHsCIy5J3FTU_79Ele4DNlU.crl (hash: 7GGN3XJ758QpDMoc8djeqHl+aTDPNr8i9Vr+p4H3oWU=)
                          2: gFd5tgCJMeij35zzi5bD-2NK_Kg.roa (hash: Z6aGas3PZ0QdIX51TPr1IW3EEbWOk5nQI3+RmZvvBLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 15:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:09:f0:01:dd:85:bf:ae:1f:43:a6:3d:28:83:43:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
        Validity
            Not Before: Apr 15 20:00:29 2025 GMT
            Not After : Apr 16 20:00:29 2025 GMT
        Subject: CN=c97aea05b3e26420a97d2884b6935247b897dc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:f3:02:6a:dd:5b:f3:b6:06:a3:0b:13:86:
                    d6:20:a2:35:80:92:8d:b1:8d:da:77:f0:88:2e:6c:
                    c8:df:8e:d3:a2:e6:39:18:e7:4c:1f:db:c6:e1:cb:
                    1f:e9:16:50:ec:b2:4b:03:11:e4:e5:ad:49:9d:72:
                    cb:a0:77:fa:07:1e:4e:69:7b:6a:70:10:02:3c:3d:
                    31:8b:f0:f8:d1:db:1c:0b:34:24:66:4a:54:2f:ff:
                    38:7b:1e:1a:16:65:4c:b9:66:5b:e0:c9:8c:d7:f2:
                    96:bb:13:73:cf:48:58:2c:a2:22:3d:dc:8e:af:48:
                    f1:3c:f3:7d:a3:28:d2:94:a0:01:09:96:b5:ca:3b:
                    9e:85:55:45:5c:5e:2a:0d:e0:bf:14:43:7f:c9:33:
                    77:c2:68:f3:84:99:35:4f:49:5a:b7:44:8c:ab:93:
                    bc:da:38:d8:58:52:29:b2:18:17:cf:94:ca:62:73:
                    9c:3c:21:74:71:5c:eb:4b:df:c1:61:68:5d:85:28:
                    cd:4c:a0:d7:9f:3e:0b:02:69:5b:be:05:ef:68:d4:
                    17:93:9e:d3:ec:f0:7f:d2:8d:fc:f8:80:b7:77:d4:
                    7f:33:93:ba:3e:18:0e:0b:61:fc:50:80:cb:5e:bc:
                    d4:50:aa:01:41:37:d7:ed:b5:8e:2a:57:d9:f9:20:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:EA:05:B3:E2:64:20:A9:7D:28:84:B6:93:52:47:B8:97:DC:96
            X509v3 Authority Key Identifier:
                keyid:10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:d7:5f:38:34:28:de:f7:77:d4:cb:40:32:1d:2e:7a:96:
         82:18:be:76:86:55:17:ac:6e:79:04:f1:9e:83:f6:ae:be:e5:
         33:69:90:89:65:86:76:d5:31:ae:1f:78:13:98:d6:ae:24:5c:
         51:16:b0:1f:25:ae:d2:2d:01:b0:61:3b:cf:c5:89:0a:3d:22:
         8d:8f:66:d8:f5:c8:f5:4e:a3:b1:25:3c:53:76:a4:5e:f4:30:
         8d:61:c0:46:34:d3:b5:9b:e3:6a:02:4b:d3:de:96:97:63:27:
         9a:6e:ed:8f:ed:c5:e7:29:5e:d0:99:d9:16:7a:f2:d9:54:43:
         e0:9d:8f:36:1e:cb:7b:5d:fa:0a:e3:c7:29:0d:b0:19:7a:8f:
         aa:18:58:78:a0:6c:93:47:3c:31:96:f6:33:bc:68:54:f7:c3:
         44:5a:38:a1:a3:68:bd:42:c9:5f:f8:92:bb:3d:93:73:c8:b8:
         ea:69:78:a0:d2:a3:ca:de:a4:e1:07:50:55:a4:6b:e0:32:30:
         21:b3:78:c5:c4:d2:00:ca:08:93:da:b7:0c:bd:93:29:1a:04:
         b7:cc:26:7b:83:12:32:1c:34:e7:35:63:c4:fd:dc:ab:f8:33:
         3d:7d:be:38:fb:f8:21:09:48:bc:ac:e1:61:34:9b:ea:d1:fa:
         ae:cb:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:17:46 2025 by rpki-client