Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
File:                     EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json)
Hash identifier:          YtjTR0DsVX1/eFycY1X+yZDl9jMEnnqB8LOKPw1deQE=
Subject key identifier:   27:EC:CF:B1:C7:46:6C:30:95:9C:EF:E6:D9:8F:9C:11:40:34:76:5F
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Certificate issuer:       /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial:       0196BC376ACA0B4A49A31C465BF27D7D458D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
Manifest number:          14C4
Signing time:             Sat 10 May 2025 22:01:10 +0000
Manifest this update:     Sat 10 May 2025 22:01:10 +0000
Manifest next update:     Sun 11 May 2025 22:01:10 +0000
Files and hashes:         1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: GJenKBjkgWmE+CdoPAA79TOL6ib9854wSDFO6MMrFB8=)
                          2: Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa (hash: a+DkDp1TptVBWwEy/OfBk+uhB64mMxCuleZtGIvfNQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:37:6a:ca:0b:4a:49:a3:1c:46:5b:f2:7d:7d:45:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
        Validity
            Not Before: May 10 22:01:10 2025 GMT
            Not After : May 11 22:01:10 2025 GMT
        Subject: CN=27eccfb1c7466c30959cefe6d98f9c114034765f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ab:40:d5:21:2e:86:98:44:9b:40:b3:68:b9:
                    b0:bb:72:15:91:a5:bd:e1:df:27:e8:3f:32:9b:e0:
                    4f:bd:97:f2:5f:16:f8:bd:1f:3a:61:d4:ce:d6:d4:
                    46:5e:d0:a7:e9:6e:3c:77:de:2d:47:fb:4b:d1:5a:
                    68:6f:94:05:66:6e:5e:23:a6:a4:3b:c8:c0:6b:c8:
                    35:bd:b4:40:75:45:a5:3f:5f:0a:64:ef:f6:68:1e:
                    ee:22:c1:eb:5e:54:ae:5c:8d:8d:83:ca:aa:86:47:
                    fa:aa:f6:7e:a7:1d:ab:cd:36:30:57:9e:da:e1:bc:
                    c6:54:43:2f:59:16:69:d0:7c:8b:4a:0d:a8:0f:44:
                    2f:45:25:08:a8:a2:3e:93:b3:38:42:e1:d0:b1:4e:
                    a3:f0:b8:80:91:33:22:48:59:8c:09:3c:03:32:3a:
                    e8:c7:a6:4c:c6:d0:64:59:99:27:98:8c:16:40:fc:
                    44:0f:9c:44:80:50:e6:04:80:ce:81:6c:09:42:46:
                    2f:d8:fe:1d:14:a2:b7:1e:2c:ca:8d:97:a0:af:21:
                    52:74:f8:c8:9c:f1:3b:f4:ab:9c:01:12:16:94:88:
                    a2:27:d0:72:b4:10:cc:57:40:d1:ec:78:d2:c1:1f:
                    9e:ac:5b:41:0a:49:6a:87:67:f6:39:63:aa:b1:d2:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:CF:B1:C7:46:6C:30:95:9C:EF:E6:D9:8F:9C:11:40:34:76:5F
            X509v3 Authority Key Identifier:
                keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:7b:49:bf:f2:6f:62:76:34:34:43:ae:85:83:e1:74:8c:
         69:2b:5f:68:c1:3d:78:e5:bd:92:dc:ee:66:b5:68:56:6d:51:
         ab:95:da:a8:59:59:9f:d9:d2:83:ab:07:1d:9e:73:66:ba:d5:
         c7:d3:95:83:9e:fc:1b:94:c0:a3:6a:67:a6:ad:76:a1:46:0a:
         bc:9d:a2:2d:73:37:10:25:72:68:25:04:f4:d2:8b:d1:bd:f8:
         17:ec:9a:31:de:74:6d:d6:fa:d2:a1:e3:f9:99:9c:78:0f:cf:
         10:44:35:28:24:d0:d9:fb:6a:7b:fc:27:c3:2c:7a:73:27:bf:
         4e:28:07:74:4b:60:67:7f:d5:f9:99:6a:81:0f:88:4b:4d:60:
         4e:a4:99:37:bc:e2:98:b2:20:ad:b3:ed:54:32:dc:7d:cf:9d:
         15:79:f5:60:47:7c:34:c1:a8:95:5f:8b:65:14:8e:07:0e:22:
         fd:0f:89:75:15:55:9b:e8:a0:e8:0d:73:22:ac:03:92:49:26:
         59:11:21:ab:24:23:80:c4:9e:ca:b5:52:e8:98:2b:46:43:4f:
         ae:49:35:e8:e4:f3:59:35:37:c5:57:4a:f1:59:2f:45:1a:20:
         92:5e:06:98:6e:ca:f6:05:0d:97:78:9e:ab:68:d8:f6:fb:ec:
         5e:38:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:25:29 2025 by rpki-client