Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
File:                     eoBXqNht0zDzh4AfED8-u2_byqo.mft (raw, json)
Hash identifier:          fQDmyTOo8+JzI0L2fYTMRtRI9+4V+/poOljO0ddi+BE=
Subject key identifier:   9E:AE:7D:69:3D:2F:9C:33:26:09:57:D2:2A:C1:96:99:15:D2:B4:3C
Authority key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Certificate issuer:       /CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Certificate serial:       0196D13E1447AACC6027CA7412CA621FAC27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
Manifest number:          08F0
Signing time:             Thu 15 May 2025 00:00:28 +0000
Manifest this update:     Thu 15 May 2025 00:00:28 +0000
Manifest next update:     Fri 16 May 2025 00:00:28 +0000
Files and hashes:         1: HcO5cdSF05y0wg63MJNFAdh4QAo.roa (hash: Mz3glj/KonDBgt2SiP6Zk96rLbwRRRt7COjMo5lu2/M=)
                          2: eoBXqNht0zDzh4AfED8-u2_byqo.crl (hash: FtdmTEiGBI+Au/4Tel0eEymdehf+laVlTLeCeUgudl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:3e:14:47:aa:cc:60:27:ca:74:12:ca:62:1f:ac:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
        Validity
            Not Before: May 15 00:00:28 2025 GMT
            Not After : May 16 00:00:28 2025 GMT
        Subject: CN=9eae7d693d2f9c33260957d22ac1969915d2b43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:96:d1:27:d0:8b:04:ea:3c:48:56:28:a1:
                    77:6e:5d:10:1e:fb:76:3b:b3:2b:cb:19:b0:0f:7e:
                    29:de:db:62:b7:67:6d:b5:05:52:08:7e:d0:d5:bb:
                    ad:66:5d:96:da:92:c2:1e:32:36:7b:6f:87:4e:49:
                    a3:b9:8a:aa:4d:45:e4:79:76:58:8e:1f:84:ef:64:
                    3a:cd:c5:ce:99:a3:c0:a2:3c:b3:1c:9f:a8:dd:9c:
                    5b:d1:12:e8:1f:ec:56:2a:ab:21:18:50:ec:af:bc:
                    bf:2a:36:8d:42:6b:e2:77:0e:e4:14:86:fb:48:c0:
                    81:1b:ec:a0:88:a9:4b:e7:08:fe:6e:a9:2e:00:dd:
                    09:71:c0:aa:31:83:0b:0c:ae:53:64:01:54:86:31:
                    35:c3:26:45:8b:87:75:a0:40:da:97:b0:cc:f3:d5:
                    f6:de:8c:be:fc:e3:a8:aa:90:29:47:71:34:d6:69:
                    96:a0:a4:c2:75:ed:94:c1:66:0d:4d:e7:e8:b3:86:
                    b5:c7:f7:b0:7d:e9:3d:88:47:f4:cb:64:c0:b4:c3:
                    b4:4b:e3:a1:8c:98:19:14:80:93:97:b9:17:78:0c:
                    fa:9a:35:4c:8a:21:8d:08:7a:12:54:32:11:01:c7:
                    1b:a0:94:d7:42:5a:c7:4e:87:db:ce:7d:26:ff:87:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AE:7D:69:3D:2F:9C:33:26:09:57:D2:2A:C1:96:99:15:D2:B4:3C
            X509v3 Authority Key Identifier:
                keyid:7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:89:a3:41:f0:83:7a:ca:49:fa:c8:03:78:fb:51:d0:c1:00:
         35:70:36:5f:e5:4d:8f:a4:07:62:88:1f:3d:b1:45:82:71:7f:
         70:c0:d1:57:14:10:9b:8e:58:db:54:fb:a9:fa:8a:ba:83:44:
         fc:d5:d8:32:6b:12:97:3a:73:64:a0:f4:5a:4a:18:51:21:4b:
         98:a0:82:c0:3e:bf:00:74:45:07:cb:b1:51:e7:c5:97:c8:de:
         d0:df:66:95:f9:c6:24:59:c7:48:ce:6c:06:b0:ec:3a:f9:c9:
         4d:5a:0d:f7:fa:05:22:4e:f8:b6:4f:03:ae:57:93:92:b9:a7:
         fa:b3:ed:8e:45:2e:b5:80:ad:ec:a7:de:40:07:3a:d5:ab:88:
         9d:67:10:5c:e4:e0:2a:e4:98:7a:5d:96:ff:e7:91:75:b1:75:
         ff:1a:17:41:7f:a4:1a:58:7e:1a:4d:49:9c:20:81:5d:06:53:
         d3:85:8d:f4:24:1e:1a:4b:ce:25:24:ad:b7:28:d3:02:1d:d1:
         c0:85:0e:62:70:93:e1:74:6f:17:a8:18:69:a5:7f:fb:41:a6:
         e0:e1:c4:6b:8f:59:70:3f:dd:10:54:72:3f:21:a9:05:d5:06:
         20:bb:34:dd:2f:f4:81:fc:9b:7d:af:a3:c3:7d:ec:9b:0f:88:
         c6:73:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:15:28 2025 by rpki-client