Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
File:                     eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json)
Hash identifier:          wACWgfxmPIb/gc226Gly6Q70/ymV3xL0kSk9eAKW+GU=
Subject key identifier:   19:76:8C:1D:B0:45:DE:C6:F4:9E:50:82:96:93:49:07:E1:02:5D:86
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Certificate issuer:       /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial:       0196CB3C451A9E9E0488B871BCB8D3B570F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
Manifest number:          153B
Signing time:             Tue 13 May 2025 20:00:46 +0000
Manifest this update:     Tue 13 May 2025 20:00:46 +0000
Manifest next update:     Wed 14 May 2025 20:00:46 +0000
Files and hashes:         1: 4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa (hash: ZKT/8JUqtRAisTydFecUdHw72JiTE01MYJo6LVg8rWw=)
                          2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: S01QlMP+JD79y2F8TIutu0QpyUgRLz+BWwJoYAvAs7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:3c:45:1a:9e:9e:04:88:b8:71:bc:b8:d3:b5:70:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
        Validity
            Not Before: May 13 20:00:46 2025 GMT
            Not After : May 14 20:00:46 2025 GMT
        Subject: CN=19768c1db045dec6f49e508296934907e1025d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bd:a8:2c:a3:c9:ab:84:23:fb:ad:6d:c8:40:
                    a3:df:e1:e0:56:15:65:c7:bf:f3:cd:dc:18:57:2e:
                    7b:e1:81:90:a1:ee:63:72:80:d7:8b:b9:78:41:d0:
                    eb:ab:6b:66:a0:74:27:0b:db:aa:94:19:95:e4:b5:
                    a8:ec:f2:8a:3d:38:7a:dc:50:ca:41:bb:d6:93:5d:
                    be:4f:7e:eb:e5:97:92:a1:4e:68:9f:54:88:33:b0:
                    bc:6b:ab:f7:f1:86:8c:13:ca:88:5c:80:8e:6d:f6:
                    5e:d0:98:43:d8:2e:f2:dc:59:85:51:9e:f3:39:7d:
                    b4:e5:42:a4:ff:be:35:8e:79:75:a7:dd:cf:7e:2d:
                    37:0e:02:fe:0c:85:07:67:55:19:f1:90:8a:1a:71:
                    64:8b:9a:a4:6a:7c:2b:75:53:e0:96:a2:86:4d:98:
                    bd:4b:bb:ff:bb:52:cd:87:3a:7f:a1:27:c1:8b:2a:
                    6e:85:1b:dc:f2:88:57:b9:9a:c1:c3:40:a8:47:08:
                    40:61:06:f8:eb:84:2a:87:6d:c0:78:34:42:11:61:
                    9c:b1:2c:c8:cc:43:80:f9:08:31:8a:49:f1:e8:92:
                    fc:92:d2:30:27:40:27:66:40:4b:98:03:75:6b:b1:
                    80:34:7f:8c:1b:21:7b:5f:a7:dc:52:46:bf:6e:2c:
                    e7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:76:8C:1D:B0:45:DE:C6:F4:9E:50:82:96:93:49:07:E1:02:5D:86
            X509v3 Authority Key Identifier:
                keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d2:5c:9e:6e:54:07:cb:62:86:19:62:f2:ca:9a:b2:74:02:
         86:6a:ba:e9:21:a2:13:ce:30:80:d1:8d:5a:a7:3f:93:a6:99:
         8e:fe:bf:fe:01:2e:a7:ef:81:a7:2e:fb:9b:6c:bc:ef:16:8d:
         83:73:cb:48:ee:c6:da:04:d4:96:03:e2:16:12:6d:13:f1:27:
         a3:42:6f:37:74:e8:6f:41:b6:21:81:93:f7:d1:a6:6b:51:59:
         78:cb:cc:2e:ea:e5:12:64:f3:56:3d:ec:4a:56:6c:20:5c:03:
         e5:94:6a:c2:ce:0c:98:63:21:fe:4d:22:a3:04:52:6d:a6:42:
         45:20:3f:7a:f9:a9:a7:29:60:1d:cf:f4:83:f8:c7:c8:71:33:
         4a:d8:a2:cc:eb:94:18:cb:5f:ee:f8:26:27:4d:09:81:0a:3f:
         99:26:b4:91:61:43:df:27:34:4d:d3:d2:f5:b7:ef:36:12:18:
         b0:bf:b0:72:aa:22:4b:8f:56:bc:ea:c2:c2:26:13:ff:01:7b:
         8d:b7:5e:0c:2b:01:57:c2:cc:14:b7:27:57:3e:9d:96:25:98:
         cd:b5:dd:14:ae:7a:96:97:cb:a8:04:c5:51:f2:c2:d4:e5:b4:
         a0:23:d2:b0:ba:8e:9e:84:9b:4c:84:f9:87:be:b5:6f:8b:a1:
         c1:6d:64:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:02:04 2025 by rpki-client