Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
File:                     EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft (raw, json)
Hash identifier:          2LPnLDRhzJne3JFimpCZca985PZAgByAuzhhKpiN8f0=
Subject key identifier:   C3:DC:02:7E:F3:9D:61:24:B1:4C:C0:3D:54:91:27:69:FD:3E:FA:8C
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Certificate issuer:       /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial:       0197B74596CF44E9C8AD36020E6DA7B186E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
Manifest number:          12C4
Signing time:             Sat 28 Jun 2025 16:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:20 +0000
Files and hashes:         1: 5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa (hash: oYg7Hd7YagslknVGleyR1QDuiaGvaAsro+gwXQIpa8k=)
                          2: EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl (hash: pO1PSgA0HPoY3aZajKc5GttvRQF/FmLP/i6hqmDRKbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:96:cf:44:e9:c8:ad:36:02:0e:6d:a7:b1:86:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
        Validity
            Not Before: Jun 28 16:01:20 2025 GMT
            Not After : Jun 29 16:01:20 2025 GMT
        Subject: CN=c3dc027ef39d6124b14cc03d54912769fd3efa8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:67:d9:63:2f:34:f1:17:da:55:fc:bc:01:
                    d0:f3:8e:c7:df:08:cc:20:e5:5a:8b:26:d7:bb:c6:
                    95:93:a8:40:12:7d:f1:94:a4:2e:f5:3c:22:cc:70:
                    99:51:f3:f9:7e:10:11:c5:78:7e:d0:5d:d4:34:b1:
                    a0:94:8e:ba:70:29:4f:ed:ff:64:ad:b9:ef:0a:0e:
                    8c:0a:a2:ae:7d:63:1c:58:2f:42:e9:dc:f4:53:a5:
                    bb:1e:67:21:28:f7:1f:d8:d6:10:c8:a5:56:4f:38:
                    98:c4:b8:53:96:9c:fa:bf:a4:de:6e:6b:db:a0:6e:
                    26:7a:16:7c:93:9b:cb:d5:de:9b:1d:24:7c:80:f2:
                    94:c9:cc:b8:b2:2c:1b:91:85:a9:d6:0b:35:3e:14:
                    db:e9:ee:39:6f:93:ee:01:75:32:6c:f7:af:84:af:
                    88:ed:e4:34:ff:ec:63:9e:d6:f3:4b:87:47:dc:fa:
                    89:99:d9:94:ad:60:68:e1:ea:14:36:5b:c4:86:82:
                    ab:12:1c:14:86:e6:c0:81:78:48:8e:bf:15:88:4f:
                    e7:ad:c6:3d:6b:fe:6f:05:97:eb:61:7c:c7:09:0d:
                    7c:50:f9:70:f1:b6:40:8c:c5:e6:63:cf:8e:c4:37:
                    93:70:33:8e:b7:a4:0c:81:aa:67:79:c4:11:a4:90:
                    b7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DC:02:7E:F3:9D:61:24:B1:4C:C0:3D:54:91:27:69:FD:3E:FA:8C
            X509v3 Authority Key Identifier:
                keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7e:51:63:bb:d9:53:d6:90:24:f7:05:77:2a:02:1f:7f:f1:
         48:41:61:28:f6:fd:70:76:67:5a:28:5b:26:a5:f5:4c:7e:92:
         4c:27:f4:58:64:b8:f7:6a:20:4a:d1:fe:e7:be:01:05:60:57:
         ef:6b:12:24:9c:d5:5b:31:88:c7:4f:46:37:1f:3e:52:58:4b:
         2b:c4:33:56:1a:7c:3b:1f:77:76:d5:17:8c:fb:26:aa:3a:9a:
         36:28:03:27:d9:a2:99:06:ea:ad:49:1f:4f:fe:33:07:2e:00:
         ad:05:bf:ad:78:5f:c9:aa:70:4a:de:48:08:bb:79:30:c0:1a:
         60:ee:cb:9b:13:8d:87:a9:08:8a:2a:a2:26:1b:23:fa:f3:fd:
         24:f9:8c:35:be:e4:88:75:cd:87:76:01:65:1c:87:78:92:61:
         98:cd:d4:a2:34:32:9f:5f:68:c7:92:70:1a:bb:9c:81:16:04:
         bf:6d:96:b1:48:7d:27:e2:02:ce:dc:4a:7a:30:dc:e0:b9:2b:
         2b:b0:68:8f:43:bd:2d:69:2a:31:11:6d:ca:fc:e6:b2:dc:12:
         d7:11:32:c2:ad:cd:3e:97:36:d0:16:07:a8:f3:7d:88:a8:d3:
         a5:2a:56:8a:ec:9c:41:15:4d:e5:cb:5c:04:42:a1:40:4e:c5:
         2c:28:1f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:46 2025 by rpki-client