Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
File:                     euxtTzVbc4ad_qGnkYDIoheN8f0.mft (raw, json)
Hash identifier:          7r5zXYv5MbDQ0xRVgCRZANabJ7Cho8h8WAYjQ7HMgI0=
Subject key identifier:   D3:3B:B1:87:D0:AB:B0:62:39:D6:17:94:0B:FB:4C:53:DA:A2:41:8F
Authority key identifier: 7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD
Certificate issuer:       /CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
Certificate serial:       0196C87249D9233644392DCE177000299531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
Manifest number:          E1
Signing time:             Tue 13 May 2025 07:00:55 +0000
Manifest this update:     Tue 13 May 2025 07:00:55 +0000
Manifest next update:     Wed 14 May 2025 07:00:55 +0000
Files and hashes:         1: GlERHStnJxWQurcUkrnzvUsZBvQ.roa (hash: 2BqHZp4aDN03bLESoTVqSnJeyUSck+7eAGoy0G/N7ws=)
                          2: euxtTzVbc4ad_qGnkYDIoheN8f0.crl (hash: Nzve84vt2UlNPTzO0u0I7d3onvouH5sZz5A1bbfjMOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:72:49:d9:23:36:44:39:2d:ce:17:70:00:29:95:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
        Validity
            Not Before: May 13 07:00:55 2025 GMT
            Not After : May 14 07:00:55 2025 GMT
        Subject: CN=d33bb187d0abb06239d617940bfb4c53daa2418f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:1b:f8:8c:80:2d:62:cc:0d:e0:a8:9e:29:
                    bd:0a:83:d3:39:6c:22:0c:ff:f2:5c:9e:c9:d0:1d:
                    71:72:85:bf:8b:91:37:4b:10:c0:aa:16:44:09:a2:
                    e1:f2:ec:99:88:bc:01:15:46:97:e6:6f:79:42:1d:
                    74:7a:68:3d:91:a5:3d:ca:25:46:3c:08:2f:da:db:
                    ac:c2:ab:a1:2a:d6:af:5c:e0:62:14:60:12:b4:db:
                    d9:21:23:17:89:e4:bc:95:e7:95:8d:d2:aa:2f:c4:
                    45:f2:f5:0c:f5:88:20:89:02:e7:b8:31:e7:49:29:
                    f3:c5:09:68:17:43:36:ba:46:4f:e7:98:b8:60:f2:
                    bb:6f:3d:98:08:89:24:0a:5c:33:f7:de:e2:49:d2:
                    76:26:ad:59:38:32:59:ff:67:7e:e9:6a:a1:d1:0c:
                    19:60:87:db:3d:1b:cb:f7:9f:51:41:ac:91:50:75:
                    e2:7b:14:6c:10:78:85:e3:35:ef:00:47:df:43:8f:
                    77:e4:c6:a0:13:ff:c4:9c:3c:1b:10:99:08:4c:a5:
                    c4:34:ba:75:9a:65:c2:71:5b:80:75:88:83:02:c5:
                    a1:9a:1e:5f:68:64:8b:0e:96:9a:48:8f:87:d4:eb:
                    74:71:9a:af:05:aa:11:b6:b6:f2:da:02:ff:82:c4:
                    54:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3B:B1:87:D0:AB:B0:62:39:D6:17:94:0B:FB:4C:53:DA:A2:41:8F
            X509v3 Authority Key Identifier:
                keyid:7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e7:09:9c:7d:46:de:47:d1:b3:ad:7f:ac:37:69:5b:0f:07:
         1e:4e:28:7a:c8:c7:38:ce:d4:6a:a6:a4:15:f0:65:26:53:cd:
         18:6b:84:44:8a:d6:aa:3e:c9:bc:a6:79:df:51:0d:ee:96:2d:
         7e:5b:41:ab:43:ea:d6:52:0f:8e:3c:33:bb:81:b2:d4:0a:e5:
         5b:53:c3:27:ea:0a:96:ec:86:3f:7d:68:bc:40:2a:da:63:1b:
         ab:e4:49:75:84:ff:ab:82:0b:75:12:d5:0d:69:30:f6:2f:66:
         90:6b:35:b5:31:b3:02:5e:d5:0c:ff:b6:01:86:50:3e:8a:72:
         8f:ce:5b:60:28:b6:20:a4:a5:89:08:43:94:ff:3c:63:b9:a1:
         75:88:15:dd:c9:6e:d7:d1:25:f1:03:35:13:04:e3:d2:07:77:
         51:e2:4b:4b:2b:76:0f:44:80:c3:00:cf:86:c3:bd:e3:2a:02:
         8a:4e:f4:b7:58:11:a1:4e:43:6e:2e:07:1d:94:9d:c5:a9:84:
         b6:16:f9:5a:3a:09:de:08:2a:88:06:4b:74:89:36:54:86:81:
         18:f3:62:48:3d:ff:5d:d9:41:a6:67:c4:cf:cb:01:56:85:3e:
         1d:ad:98:ef:e5:57:ea:41:2e:ac:be:a7:dd:c9:75:93:2c:d5:
         37:38:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:12:16 2025 by rpki-client