Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          aBQBvI1IkuY0oc08uumpkxJReni1mDxysoyVS8bZBsU=
Subject key identifier:   73:7D:0D:FE:4B:43:C1:BE:C1:41:18:5C:83:28:F6:03:D8:C3:C8:43
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       0196AB4383A994C2CF4359446C6E5EB72602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          0B51
Signing time:             Wed 07 May 2025 15:00:50 +0000
Manifest this update:     Wed 07 May 2025 15:00:50 +0000
Manifest next update:     Thu 08 May 2025 15:00:50 +0000
Files and hashes:         1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: dZof3kcj6yCzlTW/yZba9lpa202t+2hXH2tZEQyVKX8=)
                          2: rOwp4EEdXg6LDTSQ0vKwhdv6jlA.roa (hash: GRZCNLtPKsPA6POGMydW8xxkB4XDVI2vNMs1Ud2kuDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:43:83:a9:94:c2:cf:43:59:44:6c:6e:5e:b7:26:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: May  7 15:00:50 2025 GMT
            Not After : May  8 15:00:50 2025 GMT
        Subject: CN=737d0dfe4b43c1bec141185c8328f603d8c3c843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:c2:99:da:88:e7:ef:bd:a4:41:09:27:c6:
                    7e:bf:2e:fe:9f:8a:37:20:40:3f:da:bd:4b:c6:f4:
                    0b:20:44:66:0b:31:a4:ef:dc:d0:ed:1d:7a:6b:2b:
                    88:91:cf:bf:3c:50:73:d3:23:32:3d:e1:97:cb:8a:
                    c6:81:9d:f5:b5:8a:9e:31:88:f8:41:ce:95:ba:3d:
                    28:03:99:20:d9:c7:d9:3f:82:6d:d2:36:64:50:58:
                    90:c5:58:12:7a:96:2c:6f:d2:fd:a3:74:cb:d1:39:
                    3a:17:8a:ea:73:5e:8e:28:b0:6c:26:ad:5d:b4:c6:
                    cb:23:11:04:e5:0d:d7:2e:04:64:c7:34:16:86:86:
                    73:24:e1:a4:29:4d:1d:fa:fa:27:26:6c:83:dc:e4:
                    0c:45:d0:fc:e2:c9:ba:7b:bb:72:94:f4:e0:15:b2:
                    57:14:17:0c:05:da:a5:18:ae:7a:71:12:2c:5d:13:
                    a9:0b:c0:44:ba:8f:99:87:1c:b3:81:fb:2a:e8:5d:
                    4f:e5:4c:86:fc:67:56:5d:54:4b:e0:4f:bb:89:21:
                    27:b6:36:2a:c7:aa:3b:b4:12:88:86:33:00:aa:19:
                    93:35:6f:66:53:95:1e:6e:d3:29:62:2b:d0:ba:e0:
                    03:c5:f2:b3:ff:d5:3c:0c:c4:20:99:f1:da:85:c3:
                    e3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7D:0D:FE:4B:43:C1:BE:C1:41:18:5C:83:28:F6:03:D8:C3:C8:43
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:99:d2:a1:c8:31:39:2a:8c:fa:b0:c5:8d:10:a7:fc:c7:5c:
         e0:8e:d7:dd:8b:a5:31:2f:ad:41:f9:ec:c9:45:ae:bf:68:8c:
         c6:41:4f:ee:82:94:06:dc:2e:cb:64:b1:07:3e:a8:6c:89:7d:
         80:f3:99:bd:31:8c:21:c9:ca:b6:e8:2d:61:9b:4b:03:95:e7:
         ce:25:c7:c8:eb:89:7c:f6:64:c8:2f:01:fb:98:c7:68:6d:47:
         04:52:b5:a8:0a:e9:95:36:bc:54:33:21:e0:c6:3e:5e:71:f9:
         d2:eb:43:3c:5d:bd:65:56:64:56:3e:3c:de:1a:82:2a:cc:12:
         f3:ff:de:40:10:18:9b:f3:2d:ab:05:87:a8:8d:94:47:e8:0e:
         b2:38:34:7d:b8:6d:fb:dc:b8:08:9b:7a:6f:ef:7e:56:02:1f:
         c9:46:92:a7:6a:38:1b:0a:0b:a9:ee:51:8b:0e:c9:8d:ef:b6:
         72:40:e6:cc:ff:6e:8c:bd:38:d0:ec:78:de:72:be:5e:a0:36:
         c0:02:46:8c:db:be:e0:08:f1:d8:2a:aa:46:71:f9:93:78:7b:
         a7:64:03:49:33:f7:b1:d0:4d:9e:ee:4c:44:51:5d:4b:55:df:
         f5:df:49:b0:a1:1f:d2:6a:eb:5e:22:cf:fd:7d:f2:06:df:43:
         ed:61:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:20:29 2025 by rpki-client