Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File:                     EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier:          gPIPGLlSkVILPfDIVo8NYzMCH2PMc4AW7MsfK8bzWbg=
Subject key identifier:   40:C3:2D:27:41:C4:CD:3B:EB:99:CD:62:7A:18:6C:EB:B4:F6:95:60
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer:       /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial:       0196BFDCD4497BFC34D3433199471D6775DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number:          1270
Signing time:             Sun 11 May 2025 15:00:42 +0000
Manifest this update:     Sun 11 May 2025 15:00:42 +0000
Manifest next update:     Mon 12 May 2025 15:00:42 +0000
Files and hashes:         1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: Z8YoVs3SKl8n3Il9A47eLAalDALkZdrg3Ko0j0RHwhk=)
                          2: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (hash: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:dc:d4:49:7b:fc:34:d3:43:31:99:47:1d:67:75:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
        Validity
            Not Before: May 11 15:00:42 2025 GMT
            Not After : May 12 15:00:42 2025 GMT
        Subject: CN=40c32d2741c4cd3beb99cd627a186cebb4f69560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:10:11:c5:d0:61:4f:97:da:19:ef:0c:09:
                    37:58:b3:d4:3b:19:48:0c:92:d2:df:2f:e9:1c:97:
                    63:18:c9:f0:6e:74:b0:6f:f4:0c:1d:91:22:e4:86:
                    98:cb:c1:c1:9c:94:ef:5b:2a:e0:4f:c3:f9:f6:10:
                    f1:9a:15:fb:1e:ef:33:98:22:8c:2c:4e:0b:d4:9e:
                    fe:6e:ba:22:3b:4a:78:a3:35:86:54:ce:e4:3e:82:
                    90:c0:77:61:10:73:4c:dc:20:12:8c:27:ee:86:20:
                    22:10:21:1f:11:a9:a4:2e:98:04:eb:09:29:1c:f0:
                    2a:b3:5c:d0:6d:4d:97:d6:64:d6:e5:43:de:08:38:
                    0e:02:54:27:5e:6c:96:16:c7:8b:2e:c1:37:83:7c:
                    7d:9f:cf:f6:2d:53:71:82:26:a1:2a:90:32:17:d2:
                    4f:d2:56:18:15:87:0c:ac:12:e5:e4:6c:10:13:f7:
                    49:ee:8e:8e:15:67:75:2e:70:d9:99:2c:45:37:27:
                    4a:ae:34:40:24:ac:85:42:e0:d9:34:0e:8a:46:f5:
                    5f:d9:46:72:bd:e3:b0:20:17:e9:35:03:6f:0c:85:
                    49:54:46:1a:98:cd:73:45:02:f6:47:b7:50:07:b8:
                    00:73:79:7d:a8:2e:d1:6e:97:d1:21:90:dd:d1:9c:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C3:2D:27:41:C4:CD:3B:EB:99:CD:62:7A:18:6C:EB:B4:F6:95:60
            X509v3 Authority Key Identifier:
                keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0e:74:b1:f6:d3:81:ed:80:d5:6d:19:e8:06:c1:67:08:73:
         16:b3:3c:67:e9:a2:6e:35:df:89:a1:10:97:ef:21:b9:68:d5:
         66:94:6c:37:0d:d3:ee:4a:dd:6a:1e:6c:2c:6a:1c:73:56:a4:
         33:2d:5a:36:50:22:89:d9:64:eb:04:1d:ab:8a:01:56:80:1c:
         26:69:7c:b0:12:f7:f4:70:39:50:5a:32:89:a0:29:a0:ef:29:
         13:05:96:bb:fc:cb:8b:8e:aa:55:81:f6:e0:41:98:ae:b6:62:
         b8:a5:8d:58:55:3a:91:f9:64:2d:7e:1f:68:ed:3f:e9:77:fe:
         61:bb:4a:ed:e8:33:1a:01:b0:6e:ab:e9:ac:09:f9:0d:bd:6e:
         42:3f:bc:0b:dc:56:8e:46:6d:25:3d:12:5d:a2:14:9e:a6:50:
         6d:3d:6c:3c:72:95:af:9e:1e:22:e4:1d:9e:ff:17:48:db:a3:
         2d:77:6d:c6:f5:35:42:83:ae:8e:02:9a:db:99:7e:a2:3d:38:
         8a:62:37:e5:d6:92:8d:a0:07:7b:6a:fb:ba:08:96:5f:5b:98:
         ab:2c:3f:52:89:af:59:a3:ca:60:96:97:d0:37:d9:6c:7e:46:
         15:2f:ca:1b:ab:fe:80:be:0e:b6:ed:55:22:8f:ed:41:e9:d4:
         a3:fe:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:59:50 2025 by rpki-client