Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
File:                     EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft (raw, json)
Hash identifier:          dD6ko/PSzmZaJRGDpmDOk83buPsABnazMWfbRjfKNfc=
Subject key identifier:   8F:D9:DD:F4:9D:2D:EB:D3:7A:83:C5:4E:24:6D:C3:8E:70:12:3E:BC
Authority key identifier: 12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18
Certificate issuer:       /CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
Certificate serial:       0196AB4368AD1455B8B2568D6DAF7411CEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
Manifest number:          1137
Signing time:             Wed 07 May 2025 15:00:43 +0000
Manifest this update:     Wed 07 May 2025 15:00:43 +0000
Manifest next update:     Thu 08 May 2025 15:00:43 +0000
Files and hashes:         1: EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl (hash: ulX+lMXufy2VaSDXTxCOMiYJITbSknO0aSGfjUXcDhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:43:68:ad:14:55:b8:b2:56:8d:6d:af:74:11:ce:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
        Validity
            Not Before: May  7 15:00:43 2025 GMT
            Not After : May  8 15:00:43 2025 GMT
        Subject: CN=8fd9ddf49d2debd37a83c54e246dc38e70123ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:90:b1:36:06:89:64:6c:6f:40:81:0e:cf:
                    bc:1e:c1:ee:de:6a:18:ff:32:cd:0f:2c:3b:45:66:
                    0f:50:ad:1a:9b:d0:cb:43:01:9f:96:c9:ec:38:3e:
                    b7:66:39:7b:b5:9f:8c:7d:48:fc:ef:4a:2f:c0:80:
                    c9:a3:5a:06:87:b3:b1:d8:ad:bf:67:65:fb:9d:02:
                    13:4a:fb:85:b5:52:c1:37:fb:44:c7:74:47:98:53:
                    dc:b8:8a:43:c5:dc:b4:2e:6b:19:42:f4:3e:72:23:
                    26:ad:df:31:f5:d5:71:fb:85:bf:04:61:88:4d:cb:
                    a5:1d:41:a2:9a:25:11:67:c4:68:92:45:1f:0f:d7:
                    3f:7c:17:1d:cb:67:eb:2b:7d:ac:f8:2a:fd:a6:de:
                    8b:0a:9b:31:29:25:28:c0:04:b6:4a:2a:e9:7e:41:
                    75:7e:bf:40:77:11:4a:55:6d:7c:bc:56:e2:ca:27:
                    9f:c4:6d:e3:07:2b:37:8a:7a:78:bb:cf:ae:40:5a:
                    95:ae:cd:b2:41:13:ce:aa:b4:d3:9f:ff:12:0b:19:
                    59:5a:5e:5b:72:ec:81:58:34:69:a1:0d:6f:ff:5c:
                    86:e8:f6:7d:a6:7b:6e:81:da:42:a3:c5:ba:32:e0:
                    ec:7f:b1:a2:38:24:65:8f:d7:cd:fd:2d:f6:b3:f3:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D9:DD:F4:9D:2D:EB:D3:7A:83:C5:4E:24:6D:C3:8E:70:12:3E:BC
            X509v3 Authority Key Identifier:
                keyid:12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:21:46:b8:a6:ce:65:2c:24:d5:29:b4:77:c9:76:4d:a1:14:
         5f:fc:d2:64:e6:35:71:29:49:56:51:9e:46:d9:b3:93:5f:08:
         17:04:e3:5d:ef:22:d6:08:8f:b4:51:03:32:24:fd:16:8e:47:
         bf:b7:f2:57:90:b7:50:77:38:ce:10:f1:6f:f6:cc:b7:6e:2a:
         48:ee:3f:08:fd:4d:98:a2:f0:12:07:1e:40:41:71:63:61:26:
         a4:aa:20:d2:eb:fd:e2:14:9a:86:4b:fa:07:08:41:5b:7d:0b:
         f2:66:1e:30:2d:42:11:7b:d9:19:d0:1a:91:ea:06:f7:b8:6b:
         07:cf:26:02:ac:0a:92:77:77:74:b0:2b:c0:79:d4:c2:d8:f9:
         f2:b2:1c:ac:67:f8:cf:f7:89:a7:11:bf:62:0b:a7:69:e1:bd:
         b5:79:48:6e:08:d7:e8:70:98:03:e1:be:f8:c9:57:3c:ec:32:
         41:7d:fc:e0:bc:fe:aa:20:36:d1:ed:4f:a7:e1:34:cf:50:20:
         98:c3:07:fd:2b:8f:1a:4f:8d:51:74:aa:79:66:36:5b:fc:bf:
         02:27:a3:1d:7b:eb:8c:c8:58:2e:df:9c:6e:8f:96:95:af:00:
         73:12:aa:f1:af:3c:37:11:22:84:a0:c4:4c:12:b3:a1:91:2a:
         c5:5f:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:28:12 2025 by rpki-client