Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File:                     EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier:          B2aYJkppXjnXLacyByKGUErcWKFWD8WHb1xlMrzTHHo=
Subject key identifier:   9F:18:4E:EB:FF:96:0B:7D:A4:58:DD:6C:DA:C2:A1:42:9A:89:3E:12
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer:       /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial:       01969D50A2F77D6D67F05AE72F84E5DF2DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number:          10B9
Signing time:             Sun 04 May 2025 22:00:29 +0000
Manifest this update:     Sun 04 May 2025 22:00:29 +0000
Manifest next update:     Mon 05 May 2025 22:00:29 +0000
Files and hashes:         1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: TPNbWlZHjaQePGvVNSG1ahuVN7DkU/GNMlPI9FYOCU8=)
                          2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:50:a2:f7:7d:6d:67:f0:5a:e7:2f:84:e5:df:2d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
        Validity
            Not Before: May  4 22:00:29 2025 GMT
            Not After : May  5 22:00:29 2025 GMT
        Subject: CN=9f184eebff960b7da458dd6cdac2a1429a893e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:7c:52:0a:1a:b0:37:7e:15:6d:0a:ad:d5:
                    05:c5:b4:c4:49:a1:89:71:16:7a:9c:7d:94:08:85:
                    05:98:0e:89:2c:12:05:a1:70:d6:29:97:e2:44:63:
                    94:a9:45:d9:3d:46:d1:c9:da:a8:97:d9:7a:38:a9:
                    f4:40:ce:cd:7b:75:fe:86:e5:53:29:99:a1:40:c4:
                    d0:5a:f2:b6:13:21:d0:19:e3:97:9f:95:ef:bd:30:
                    e4:d6:4d:04:e2:db:58:77:b3:18:cb:d4:5c:6a:6e:
                    f8:66:35:ae:50:0e:e9:b0:38:66:06:1b:9d:34:07:
                    70:ec:69:9e:59:95:e1:87:1b:2b:a9:53:79:fe:83:
                    b1:e1:f2:76:2d:00:e9:f5:3a:50:a5:be:dc:fa:b3:
                    45:65:7f:a7:01:7f:ce:88:ad:37:5e:f4:fa:19:23:
                    e7:23:d9:b6:22:41:bf:1e:bc:cf:5b:3e:45:ab:10:
                    ed:b8:21:c4:a6:f6:1b:56:d4:b9:9c:06:ed:ad:fd:
                    8f:26:b4:f1:34:12:10:b8:ed:8b:fb:ad:1f:d1:f7:
                    f9:ef:ae:99:04:c7:55:55:47:6e:13:1b:8d:96:2d:
                    96:a9:e6:0f:9a:9e:d8:03:f5:2c:33:fd:81:d1:5d:
                    95:bf:cd:68:86:8a:74:95:30:f7:8a:66:69:f2:6a:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:18:4E:EB:FF:96:0B:7D:A4:58:DD:6C:DA:C2:A1:42:9A:89:3E:12
            X509v3 Authority Key Identifier:
                keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:13:8a:30:f3:33:5b:a7:31:71:27:9c:4d:26:4a:dd:68:77:
         1f:d7:97:7d:89:96:13:55:73:db:d8:27:4c:b7:be:5c:48:63:
         10:90:10:c4:5b:35:b5:4c:3a:5d:53:40:0d:4f:2c:d3:d8:43:
         61:52:7c:95:10:01:fb:83:12:6e:d2:bf:f9:98:8b:57:c3:a6:
         9d:fd:06:74:66:60:12:f5:43:06:62:4f:5f:de:3f:2c:8a:8b:
         4c:38:7f:64:97:4f:ea:4a:e9:94:0e:ce:b9:dd:5d:6f:47:52:
         d0:fb:57:b1:e2:14:40:bb:9d:15:29:c5:60:c4:ac:2d:14:4c:
         db:33:03:ac:9e:35:15:b6:a0:91:cf:ab:7b:ea:03:ca:d5:d4:
         84:33:08:3d:54:f1:7a:e9:83:40:ce:95:97:b9:ba:99:e6:93:
         26:0c:a6:95:76:74:1a:6a:13:4d:61:05:fb:5a:93:43:08:60:
         58:94:39:3b:31:f4:d9:e4:8b:e7:f5:65:ad:85:51:f6:fd:78:
         cc:34:7f:a4:a1:1d:26:d6:a0:05:b5:71:a2:80:6d:77:71:40:
         23:60:12:99:91:65:c3:a5:d8:47:a9:ad:03:c4:c6:5c:82:05:
         6b:d0:e7:7f:d3:6f:f5:0f:a6:e0:31:e0:85:ac:98:64:ed:e3:
         95:27:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:38:37 2025 by rpki-client