Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          WuxOzy0+uXRQopF4vvn9IcmqReR94ZkzwJjwCU7HQ9w=
Subject key identifier:   6C:BF:3D:51:1D:C8:E2:9E:D8:68:E4:7D:ED:7F:85:26:FE:3B:79:D7
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       01974F330DDE57E20EB44643B6603BD7AAB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          0FDC
Signing time:             Sun 08 Jun 2025 11:00:35 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:35 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:35 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: BNGgGIB0KNNqDpl7pYSBhCnUnlzKJDXCyq/0592L00k=)
                          2: H9wALBVXz4YwYBX3cpmTiB3IeME.roa (hash: gBTMmmcoRwZuz+Iunak49khAmqfa7PJZOswCtQszyKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:0d:de:57:e2:0e:b4:46:43:b6:60:3b:d7:aa:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: Jun  8 11:00:35 2025 GMT
            Not After : Jun  9 11:00:35 2025 GMT
        Subject: CN=6cbf3d511dc8e29ed868e47ded7f8526fe3b79d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:59:25:3f:cb:1c:4b:13:f7:d5:58:8d:dd:e0:
                    f3:90:a2:6f:55:a7:ad:67:5c:75:05:23:c6:ee:d4:
                    03:59:a2:e3:8e:2b:4c:9a:7d:16:75:f0:79:3b:6d:
                    19:a7:aa:90:af:6b:bf:6e:dd:99:49:69:4d:26:fe:
                    69:e5:f8:ee:59:9c:51:13:d9:b4:b3:f9:e1:d2:88:
                    ec:04:9e:25:5f:88:75:61:64:64:d4:00:ac:0f:dc:
                    0b:b0:c3:58:88:cb:70:ed:66:6c:86:b5:95:21:46:
                    25:34:dd:13:d4:80:94:62:97:ff:36:25:0e:3e:94:
                    e0:9d:56:9d:54:18:3b:43:46:ab:36:58:ef:dd:94:
                    49:85:f3:ff:98:ce:3b:08:e4:95:cd:84:8c:f3:5b:
                    0a:4a:c1:81:52:6a:0c:4c:12:0d:1a:91:41:a9:80:
                    a6:4f:83:76:a3:d3:9d:24:67:da:54:99:37:b1:d0:
                    f5:f4:34:76:74:a4:85:c0:8a:fd:6b:db:07:01:69:
                    7f:f0:2b:1f:75:47:9f:b1:87:1b:2c:70:66:a3:0e:
                    1d:22:d3:cb:7a:53:67:24:71:fc:49:7d:e9:89:a4:
                    d6:2f:ed:51:94:e8:d8:9c:81:f4:cf:bd:02:e7:60:
                    2e:f4:1b:2d:d1:40:2e:3d:29:1f:6b:51:94:5d:b5:
                    97:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BF:3D:51:1D:C8:E2:9E:D8:68:E4:7D:ED:7F:85:26:FE:3B:79:D7
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:00:b4:b0:1d:c4:3d:33:57:31:e5:4a:4f:08:89:db:0f:
         7b:ad:77:27:96:ec:0f:ce:4b:b7:e0:01:59:5d:21:35:2e:8b:
         39:7c:06:01:6f:4b:1c:45:7f:cb:5d:eb:99:48:33:fd:7f:68:
         a0:c4:f0:1f:6b:46:b7:45:68:64:5b:02:87:5c:c0:66:46:24:
         e1:ad:47:7a:90:d6:41:d7:d1:e5:45:d8:ae:a0:0e:9d:87:bb:
         4f:36:a7:f7:af:2a:b9:d5:19:32:b8:4c:cc:87:c0:dc:46:65:
         5c:ca:e5:de:22:26:d0:4c:56:c2:bb:8d:be:76:f9:1c:73:98:
         30:10:0d:43:e5:0f:bb:97:83:f5:d2:87:92:a8:93:ed:57:4b:
         29:f0:ed:5b:a8:6c:a7:b0:ae:4c:a7:62:22:63:48:b8:29:69:
         68:dc:82:f6:44:59:84:8f:48:81:94:d2:bb:9b:79:61:34:db:
         92:89:5f:11:1b:f5:ff:7c:be:c0:4e:e4:13:ef:01:a4:4a:fa:
         02:4d:05:84:81:8e:88:e5:58:bf:53:94:e0:52:7d:f6:43:c9:
         28:43:a4:f4:fa:03:ab:f1:ed:4f:87:df:63:a2:48:7b:c8:c6:
         b9:de:6d:6f:3a:e5:dd:9d:27:18:40:25:70:59:a4:88:6f:eb:
         d5:72:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:39:11 2025 by rpki-client