Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          rbyjUTkbr4Jubn74noYkm0K34clzFn3mTWknZ5B2n1w=
Subject key identifier:   2F:69:B6:BB:A3:13:87:DD:2E:F6:B6:9E:2C:E3:03:E6:67:3A:E6:AF
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       0196DC6644A794D861749092B1D59D83D6DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          1531
Signing time:             Sat 17 May 2025 04:00:11 +0000
Manifest this update:     Sat 17 May 2025 04:00:11 +0000
Manifest next update:     Sun 18 May 2025 04:00:11 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: e2h9qXGsCP9KrPTQyJEhfQtvdjGxZbNOS1DCk7sv+lU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:dc:66:44:a7:94:d8:61:74:90:92:b1:d5:9d:83:d6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: May 17 04:00:11 2025 GMT
            Not After : May 18 04:00:11 2025 GMT
        Subject: CN=2f69b6bba31387dd2ef6b69e2ce303e6673ae6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:3a:f7:10:66:aa:e8:f2:92:60:4b:32:38:
                    b1:1b:ef:17:c0:78:38:aa:a4:8e:26:ca:ee:b2:f2:
                    8b:b2:2a:dd:94:d4:03:9d:02:47:c0:69:b9:e3:0f:
                    a5:8b:b5:5b:1f:fb:c0:98:6c:5e:36:4f:67:81:49:
                    9e:f0:9b:97:f9:d0:59:dc:32:f3:c3:35:e6:50:7f:
                    35:71:b5:19:8b:c8:ff:b6:c9:af:fb:d7:b3:2e:5f:
                    43:f9:3d:31:8c:f1:9f:79:a3:c4:68:da:78:75:90:
                    c0:e3:11:3e:a7:50:a8:a4:08:43:20:82:74:c4:0c:
                    d4:68:aa:2e:fd:ae:ac:5f:39:cd:fd:5c:ae:e9:85:
                    8f:b2:7a:5f:e3:e0:eb:1b:e9:4a:f4:c9:b3:1a:a8:
                    13:9c:77:92:25:a5:89:26:f6:01:7f:ca:0d:a8:7f:
                    00:a3:0b:19:a7:bc:ab:66:7f:81:a2:49:18:eb:6f:
                    5d:70:6a:3f:58:d5:b6:e1:c0:15:ac:86:1b:1c:13:
                    5e:14:f9:b0:29:c1:c3:93:8f:09:e2:1f:fd:1c:85:
                    19:72:e6:50:6a:2b:8a:36:fb:2a:70:d4:8e:f4:e5:
                    01:1b:eb:b4:44:13:5a:ef:bc:b8:cc:c5:79:79:07:
                    dd:59:d5:33:c2:27:4a:57:11:41:33:1a:13:dc:89:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:B6:BB:A3:13:87:DD:2E:F6:B6:9E:2C:E3:03:E6:67:3A:E6:AF
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:0e:d7:50:c8:e0:84:5e:f2:c1:c2:32:9e:07:25:51:a8:30:
         18:ae:32:4c:d6:98:6a:ea:93:61:bc:2b:97:aa:02:3b:55:ca:
         8d:56:e5:11:59:f0:a1:d8:3e:5d:ed:28:85:ac:5a:09:e2:5d:
         0f:7a:d8:7b:a5:30:1b:e7:3e:f3:cd:b1:5f:bd:b7:f5:f8:16:
         9a:13:15:37:b0:1e:e3:35:6f:b6:86:8a:b1:54:54:c7:fa:bf:
         55:b3:b9:ed:72:33:d0:c2:2c:0f:e8:20:b0:02:66:b4:52:45:
         e5:62:26:f1:c9:ac:a6:3d:c6:9d:62:6d:c0:0e:dd:dc:90:c1:
         ab:27:d4:ec:2f:c4:24:df:99:d9:9a:d6:56:64:c8:cf:52:c4:
         27:57:2b:b4:f1:ed:f5:f0:8d:18:ab:60:e9:49:96:ef:16:19:
         80:e9:85:44:dc:ca:24:d0:70:17:6b:ae:ab:13:ca:9e:99:61:
         35:57:1e:30:e2:6f:d5:60:7f:33:77:98:d0:d8:53:e2:98:56:
         39:10:c6:b8:8b:e4:f0:f4:f6:fb:80:3e:4f:18:d9:e8:1d:e3:
         d0:15:5a:b0:f6:b6:dd:a2:ba:07:d6:64:76:d7:4e:df:5b:0c:
         92:a0:fe:80:c8:2a:0c:9f:c9:d3:64:ac:3e:80:47:74:e6:f1:
         35:78:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:32:05 2025 by rpki-client