Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          TU1jrC84EeweKT7VeL4oXJorXOSV1iW/9S61O32oob4=
Subject key identifier:   86:41:A5:16:D1:94:BB:08:CD:40:75:82:4A:A1:2D:41:28:18:FF:5B
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       0196B47DCAD516C9BF37DB0119D4B3450565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          0CEB
Signing time:             Fri 09 May 2025 10:01:04 +0000
Manifest this update:     Fri 09 May 2025 10:01:04 +0000
Manifest next update:     Sat 10 May 2025 10:01:04 +0000
Files and hashes:         1: 7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa (hash: +YzcMttJR4cOnsIWs0CBLy1v8W7l7gh7eA5Qk1ZfF+0=)
                          2: E-owwaRkGBOgTW0gbT6t0z8jYpA.roa (hash: MzJgxXYLXxOfkRd2uBOOGYCYN+rSmPW8si+rCfGvcKY=)
                          3: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: ayDqj8b6zaquCRKYE35vwBWN7zuqIoDLQZNBvdEcoL4=)
                          4: JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa (hash: Hw2s88epzhilOmADkh2atAnnbAnZEDzpVgH8yNCsz2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:7d:ca:d5:16:c9:bf:37:db:01:19:d4:b3:45:05:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: May  9 10:01:04 2025 GMT
            Not After : May 10 10:01:04 2025 GMT
        Subject: CN=8641a516d194bb08cd4075824aa12d412818ff5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:11:88:60:42:75:64:01:6e:68:7f:b7:f5:
                    dc:e3:1c:a2:c0:e2:06:b5:7a:d4:aa:7b:1c:44:26:
                    63:bf:51:44:26:a2:e7:b8:c3:2f:a5:ec:57:87:8d:
                    f8:0f:ee:af:d9:1d:fb:6b:98:c6:5f:c6:b5:0f:34:
                    fa:54:f3:5b:cd:e2:52:c9:43:63:a8:25:4c:14:cd:
                    ec:46:30:6b:fe:a8:d3:78:8e:a3:8d:31:e0:3d:10:
                    8d:e3:54:80:2c:0a:13:5b:e2:36:55:52:9d:6c:27:
                    ae:e9:a9:a3:17:7f:bc:77:7a:59:0f:9b:30:f8:45:
                    c6:f1:6e:f7:23:af:b4:f5:e2:91:55:3f:f1:05:8b:
                    06:9f:b1:1d:d3:06:a1:c7:27:be:a9:96:4f:94:1f:
                    8a:c6:e1:af:35:16:29:08:00:64:3c:d6:08:7e:05:
                    30:b1:98:6e:ac:48:91:b8:36:b1:a8:87:fa:83:18:
                    ff:39:87:09:3b:a3:c6:3c:57:a9:d5:5b:8c:ad:69:
                    41:cb:23:cf:c4:15:96:64:20:a9:9f:a8:9f:02:94:
                    c0:b1:d7:30:47:62:68:ac:d2:14:99:c8:96:73:d7:
                    cb:1d:68:65:52:d3:9e:bd:b4:8a:1c:91:14:79:c9:
                    02:b5:08:20:7a:6e:8f:f8:30:5b:b7:16:d1:c1:e8:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:41:A5:16:D1:94:BB:08:CD:40:75:82:4A:A1:2D:41:28:18:FF:5B
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:12:09:05:ad:02:b1:fa:14:60:05:25:ba:0e:6e:a8:af:6d:
         07:91:d6:67:0f:00:8f:d8:7a:b9:d8:69:75:eb:da:df:e5:d5:
         8c:52:00:9d:50:4e:3d:b7:00:4a:e6:25:84:be:a3:f3:d7:05:
         b2:1c:68:77:1c:af:9b:1e:d9:fb:72:37:7f:67:c2:45:93:c1:
         c6:26:1c:e9:f9:b7:2b:49:0b:e4:0f:46:4d:c8:67:c4:7e:bb:
         34:ee:92:fa:e5:89:84:0e:33:71:e7:d8:73:67:f3:92:14:d4:
         93:5d:23:ad:e4:2e:02:24:86:c0:e7:a4:3f:34:29:cf:ae:0f:
         63:b7:37:fd:74:ea:55:b3:3c:59:44:0b:fb:89:6c:2d:8d:62:
         f8:97:24:b1:42:e7:5d:7f:ab:a9:1a:c4:07:a5:d9:94:1e:57:
         8c:3a:cc:a8:a5:34:90:58:d6:a9:37:08:c2:7d:f4:2a:bc:d6:
         f3:03:6a:1c:23:7e:f7:3e:e3:98:b2:22:a0:ab:8c:2e:94:62:
         25:ad:9b:ef:77:a5:e6:57:65:a1:86:78:c8:fc:e4:05:f9:b5:
         e2:1c:52:0d:12:40:b2:79:40:a4:b7:9b:2c:83:75:7d:ad:e9:
         a6:1c:59:c6:9e:45:4f:34:44:bb:b5:84:e9:8f:e2:1a:3d:df:
         29:44:15:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:58:02 2025 by rpki-client