Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
File:                     eEOlOB3OKHe7w1GmhO_OzdYT46o.mft (raw, json)
Hash identifier:          fByq959IWnPvkORwr1rYLsWd5iuHaMrcVjtKdQlvfK4=
Subject key identifier:   F4:C3:D3:49:76:2A:52:92:B3:8A:3E:01:86:9D:05:64:F9:CA:69:0A
Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
Certificate issuer:       /CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Certificate serial:       0196CF4FEBDC2D440B3F31360F295A902CB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
Manifest number:          10AD
Signing time:             Wed 14 May 2025 15:00:43 +0000
Manifest this update:     Wed 14 May 2025 15:00:43 +0000
Manifest next update:     Thu 15 May 2025 15:00:43 +0000
Files and hashes:         1: bb6nncvAhni078ZU5RtarugpVvQ.roa (hash: 6TYoEFu0AnfEraFXjdNI1tT+tX9iNJhtz1VPH2GMI28=)
                          2: eEOlOB3OKHe7w1GmhO_OzdYT46o.crl (hash: z5ZROF21+ady0GpZr94OaxpJscAQdq9B1vjRVygYInU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:4f:eb:dc:2d:44:0b:3f:31:36:0f:29:5a:90:2c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa
        Validity
            Not Before: May 14 15:00:43 2025 GMT
            Not After : May 15 15:00:43 2025 GMT
        Subject: CN=f4c3d349762a5292b38a3e01869d0564f9ca690a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:3d:7e:93:73:fe:ff:a4:f7:d3:29:1f:c1:
                    23:32:fd:2b:06:ba:80:37:4e:77:66:14:8a:54:51:
                    66:3c:33:72:cf:d5:37:9f:0c:c0:43:fb:f6:76:32:
                    fd:00:a1:fd:44:bf:11:bd:bf:92:8a:f9:11:7e:94:
                    e7:9f:10:e3:6f:1f:3f:b1:0c:c2:ea:56:b1:74:9c:
                    57:5d:54:f5:8c:21:b3:24:83:cb:29:f2:eb:8a:2f:
                    d1:01:43:f5:81:d9:83:7f:2a:d0:e0:02:20:43:7c:
                    91:72:bd:e0:9c:59:da:18:2a:16:1d:43:e1:b9:4f:
                    8d:3d:db:48:23:2d:11:88:99:b0:bd:9b:ea:7c:fc:
                    49:3a:c7:00:27:1f:28:a0:99:75:6b:87:58:53:2c:
                    c8:4f:08:97:0f:e3:60:05:1e:b8:29:c2:2a:ec:c3:
                    e2:e8:8d:cb:0f:2c:0f:20:a1:27:46:df:13:da:b1:
                    9d:e7:a2:32:47:78:c5:ef:21:89:bc:32:d5:b5:60:
                    c4:f8:07:e3:06:0f:2b:e7:54:6c:0c:13:40:3e:04:
                    20:ca:61:70:31:47:3c:35:dd:36:39:c3:ba:bc:62:
                    0a:d7:03:ff:17:bf:c5:b0:41:a5:60:9a:f8:50:85:
                    a9:14:de:54:34:fc:c5:95:4a:80:70:ac:7a:2c:c0:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C3:D3:49:76:2A:52:92:B3:8A:3E:01:86:9D:05:64:F9:CA:69:0A
            X509v3 Authority Key Identifier:
                keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:5d:3a:b9:9b:17:89:53:84:91:34:a2:e3:1c:df:7e:46:
         37:73:ce:b6:97:09:0d:33:34:db:e2:70:3f:5b:64:2a:01:32:
         2e:d4:82:8b:99:7e:24:8f:f6:fa:81:14:7b:ff:44:02:56:f0:
         16:8a:aa:fc:b4:7f:f3:fc:d5:7d:62:21:5a:fd:cb:ec:91:93:
         17:c9:47:d5:d6:72:70:93:97:8d:54:b6:17:8e:c9:4b:55:6a:
         4c:b5:89:64:2b:be:3e:df:ce:90:00:62:a4:5c:39:ee:be:8a:
         2a:33:cd:9f:96:33:7e:09:ae:fa:8c:58:a6:c7:20:11:3a:44:
         1d:9b:8c:9f:5c:7b:35:41:ed:c9:71:20:b8:cb:04:73:2c:b0:
         dd:2a:c5:f5:b7:f7:48:ec:f0:86:f8:af:ce:90:d9:2a:9c:c9:
         1f:d0:28:e0:52:b9:a7:67:cb:b0:d0:c0:68:94:b7:2a:47:1c:
         78:4c:cc:1f:58:1b:bd:1e:dd:83:64:75:31:4c:d7:ac:7a:f8:
         5d:c7:3e:12:11:62:78:91:d9:61:d9:9f:3d:87:eb:10:03:c7:
         63:11:dc:3e:64:e5:78:35:7d:a3:72:13:ca:19:e9:7d:18:f3:
         d0:6e:59:13:d6:88:2a:3a:a2:da:22:a2:f3:1b:94:b7:ae:4a:
         63:5d:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:11:09 2025 by rpki-client