Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
File:                     eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft (raw, json)
Hash identifier:          N1svL4AaFah1lIocQkNmnk2Dk12eHOFG51tyZuVwzDc=
Subject key identifier:   73:E8:3F:86:2C:1B:59:B0:7A:F1:4A:D3:0B:C7:D5:7F:D7:BA:99:FA
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Certificate issuer:       /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial:       0196CB05F1CF6D6873DCA7EC491AA7840402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
Manifest number:          13BD
Signing time:             Tue 13 May 2025 19:01:26 +0000
Manifest this update:     Tue 13 May 2025 19:01:26 +0000
Manifest next update:     Wed 14 May 2025 19:01:26 +0000
Files and hashes:         1: eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl (hash: eCC++g5Zq0MgAke0mRUIZaCIm9Vsq9yxCJSpOvAk6pA=)
                          2: rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa (hash: M8dZkYCwYNG6gph8xMmvBysHbD2sO8kxwfhDf7bdOCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:f1:cf:6d:68:73:dc:a7:ec:49:1a:a7:84:04:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
        Validity
            Not Before: May 13 19:01:26 2025 GMT
            Not After : May 14 19:01:26 2025 GMT
        Subject: CN=73e83f862c1b59b07af14ad30bc7d57fd7ba99fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:4a:80:64:a2:40:08:9e:d3:79:43:b4:d1:
                    d2:6c:2d:24:c7:89:cd:b9:f9:9e:a8:c9:bc:d7:e6:
                    1b:20:63:bb:0e:15:d1:45:83:f6:b2:95:70:c6:a7:
                    6b:18:72:d7:37:38:2a:23:ef:ca:b8:21:fe:8d:b6:
                    79:85:e4:c3:6c:ea:72:d9:61:7d:4c:70:79:57:38:
                    18:8f:9e:0c:9f:24:9d:ac:4e:3b:7a:e8:d5:1a:06:
                    81:84:45:3d:47:2f:0f:32:6d:2b:d3:27:8d:6b:77:
                    76:50:cd:b9:6d:8a:8c:09:cc:62:87:38:2c:e3:6f:
                    d5:1e:c7:66:8b:a5:78:cd:4c:25:e8:af:4a:7a:94:
                    1c:f6:45:49:1a:5d:fa:f4:d0:27:4f:09:2a:9d:3e:
                    61:0e:6b:ee:73:e3:ba:11:d7:22:ea:3c:5d:62:a0:
                    54:bb:fc:4d:7c:c1:20:9a:31:77:e6:67:ea:8e:37:
                    66:e3:7a:72:b0:40:42:52:af:7e:57:3c:bb:ef:46:
                    60:9a:9e:57:89:57:66:ca:86:20:5e:01:05:1b:4f:
                    44:35:28:bc:03:ff:5d:88:29:22:f1:b9:8a:d5:9b:
                    f4:e9:fb:fc:6a:b2:e0:fd:85:d2:88:2f:87:95:a4:
                    17:4b:37:23:ac:db:56:4b:73:22:36:59:5c:af:ba:
                    cf:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E8:3F:86:2C:1B:59:B0:7A:F1:4A:D3:0B:C7:D5:7F:D7:BA:99:FA
            X509v3 Authority Key Identifier:
                keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:94:1e:ef:03:5b:f6:7f:fd:fa:53:0a:4f:fd:9a:81:db:3b:
         d3:01:1a:69:2a:e2:04:3c:57:16:f5:b6:49:89:b3:fc:94:95:
         43:78:98:ff:f9:4e:00:12:08:ea:04:3e:7e:de:d1:6f:a1:81:
         95:3d:1c:6d:be:56:34:3d:27:88:8c:73:e7:4b:85:aa:ef:ca:
         fb:cd:f8:c3:93:ba:e3:a6:7b:45:07:d8:74:59:47:6d:bf:91:
         24:0b:80:59:94:59:5e:cd:75:99:d8:18:00:60:de:04:44:1f:
         9e:4d:bd:5a:80:7e:0c:94:b8:ee:28:d2:03:77:9d:61:c1:01:
         0e:46:8b:d7:d0:a2:81:1e:7b:d4:72:6c:5d:16:17:67:24:9b:
         f6:fa:b4:9f:93:85:e6:42:04:7c:e8:39:d5:e3:99:17:f5:ff:
         cb:21:6a:7d:d5:73:bc:23:93:84:2f:5c:20:68:ab:75:7d:a9:
         f8:48:38:1b:9f:ce:ff:ff:b7:06:c8:4c:9c:72:6c:33:89:55:
         24:ff:f1:3a:7d:d5:d1:28:77:5e:e8:bf:47:8b:5e:b0:61:73:
         01:40:e1:03:60:03:1c:fa:18:c1:d8:5c:dd:bb:e8:57:27:86:
         0c:21:2e:ae:8f:b7:ab:d8:87:6c:0f:3e:84:30:86:e5:e6:f9:
         81:53:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:40:59 2025 by rpki-client