Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
File:                     emc1t6VToWgMEa3T5Iw2NbU5eco.mft (raw, json)
Hash identifier:          16Cyti/poS8o10RBKNoA18lVyJixWsuN73BOe1LncSY=
Subject key identifier:   12:5B:19:E1:CD:FF:EB:41:1C:9B:03:71:58:9B:2D:1C:CB:7C:92:82
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Certificate issuer:       /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial:       01969FE461B252CF593D6F2F86870AB96E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
Manifest number:          152C
Signing time:             Mon 05 May 2025 10:01:06 +0000
Manifest this update:     Mon 05 May 2025 10:01:06 +0000
Manifest next update:     Tue 06 May 2025 10:01:06 +0000
Files and hashes:         1: Y0QzFQpxED6pQGOSZGJB2X93kKs.roa (hash: QstMZbErBCYp+ToxnOCIPJt5s0/mWI/dSe8BQlrQ6lk=)
                          2: emc1t6VToWgMEa3T5Iw2NbU5eco.crl (hash: qHHDxgofwtlv2q6HOQMP9Urb8PN3qZV1mG/LbFxb0vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e4:61:b2:52:cf:59:3d:6f:2f:86:87:0a:b9:6e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
        Validity
            Not Before: May  5 10:01:06 2025 GMT
            Not After : May  6 10:01:06 2025 GMT
        Subject: CN=125b19e1cdffeb411c9b0371589b2d1ccb7c9282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:90:47:11:be:73:7a:66:98:82:5b:f6:69:
                    83:7a:7c:1b:22:c8:07:f3:ed:a9:f4:ac:91:a7:fb:
                    fb:34:a6:59:02:1c:92:00:0d:23:aa:4b:8c:ef:32:
                    d9:ec:04:10:c5:e1:7b:c0:0f:97:69:27:d5:28:33:
                    4c:da:44:18:cf:f6:09:36:3b:a1:26:45:2f:3a:03:
                    54:e8:fa:34:f7:44:14:95:9c:ee:e4:c7:50:42:da:
                    b2:00:a8:f5:9c:da:f8:38:09:01:4b:27:72:d9:d0:
                    d5:66:35:14:85:eb:89:91:ed:df:dd:91:b6:12:e0:
                    80:ee:4e:6c:03:e4:f8:a6:0e:af:5e:5c:60:ba:ea:
                    54:9d:69:9c:ea:49:8a:43:4a:66:f0:db:12:19:93:
                    14:9e:7a:ef:cd:8e:b5:d5:da:c0:2f:a6:95:6b:e9:
                    af:dc:a9:63:e7:d5:fa:4c:fe:7a:27:38:b7:68:6d:
                    77:83:85:4c:27:38:c3:da:52:ba:4e:13:ab:1f:e3:
                    28:6f:6d:4a:56:b7:46:0f:52:49:51:97:fb:6a:6b:
                    71:30:94:8c:f0:9b:08:ed:79:c7:07:25:7e:5b:7b:
                    c9:a2:1e:8b:ff:ee:e9:b4:75:f4:a9:67:1e:aa:31:
                    89:cd:75:b8:1f:7b:15:67:84:09:ec:22:63:f7:48:
                    bc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5B:19:E1:CD:FF:EB:41:1C:9B:03:71:58:9B:2D:1C:CB:7C:92:82
            X509v3 Authority Key Identifier:
                keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:32:b6:10:fd:83:31:41:5b:51:e1:44:6e:7d:66:d8:af:66:
         2e:e4:70:b4:07:e2:d0:35:77:2b:81:fd:b4:72:33:79:a9:28:
         3e:5e:ff:ee:e0:70:4c:f7:42:87:a2:16:37:df:d6:75:79:ba:
         cb:3c:78:b5:01:34:2f:11:3d:d8:09:90:2b:dd:23:e8:a3:1c:
         05:55:cd:d7:7c:a1:9a:8e:4c:d9:a2:df:3f:0d:66:3a:26:97:
         13:d1:1d:da:5e:9e:8a:ee:f3:8c:69:91:01:42:52:da:01:99:
         84:3c:30:83:23:6e:6e:b8:7d:2d:c6:5c:98:4b:81:6e:9f:77:
         be:a2:8f:ae:0a:37:e2:d1:d7:a3:48:30:6f:f9:7c:5f:20:19:
         2a:01:76:02:3d:35:a8:71:39:5c:1e:c9:c6:33:41:af:b8:28:
         52:8d:4b:31:8c:ce:9f:90:b9:22:1a:5b:1a:d8:ac:69:13:ee:
         90:39:44:a5:a0:e4:4a:c0:cf:44:85:00:2e:d1:ee:14:47:be:
         26:5f:bb:f5:6d:e6:1d:b5:02:a8:c7:c9:a3:51:e0:31:ac:a1:
         b4:cf:2a:fa:01:a9:8a:bb:2c:73:4b:a0:9e:49:47:be:a8:8a:
         ad:05:d9:d3:eb:c5:68:50:e5:30:26:82:06:b9:b4:6c:33:63:
         e0:b0:87:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:06 2025 by rpki-client