Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
File:                     EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft (raw, json)
Hash identifier:          IJheCX6jo26+jiooz/c3J1vZR8jU6e+LRpNNcN9n6oM=
Subject key identifier:   6B:BD:D9:09:D0:33:F7:6F:B1:34:8E:9D:D9:98:1C:6E:F6:9F:94:61
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Certificate issuer:       /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial:       0196C201F9187AA3EE1F3B2BA154677691FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
Manifest number:          1245
Signing time:             Mon 12 May 2025 01:00:31 +0000
Manifest this update:     Mon 12 May 2025 01:00:31 +0000
Manifest next update:     Tue 13 May 2025 01:00:31 +0000
Files and hashes:         1: 5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa (hash: oYg7Hd7YagslknVGleyR1QDuiaGvaAsro+gwXQIpa8k=)
                          2: EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl (hash: L0w/JRScnPuwDZiTxaT2JoDQtyt3GlDtl3RYt4yV2VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:01:f9:18:7a:a3:ee:1f:3b:2b:a1:54:67:76:91:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
        Validity
            Not Before: May 12 01:00:31 2025 GMT
            Not After : May 13 01:00:31 2025 GMT
        Subject: CN=6bbdd909d033f76fb1348e9dd9981c6ef69f9461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:96:d1:f6:03:19:5e:4d:7b:15:c1:40:92:bf:
                    0d:87:12:7f:9e:d6:d0:23:0e:43:1f:be:76:51:a9:
                    72:7f:de:31:78:b9:0f:42:19:5f:2b:9e:7f:08:f5:
                    a9:09:4a:9e:88:da:dd:67:4b:44:2c:10:10:6c:3d:
                    a7:1d:1e:15:ea:c7:90:3e:79:62:1f:da:3a:d0:a5:
                    3b:ff:b0:59:52:02:a4:5f:8a:1f:77:1f:22:b1:7d:
                    aa:d1:ee:45:0d:7b:11:da:d8:4e:b4:b9:d1:21:09:
                    46:db:70:6d:fa:f8:6f:1c:2f:67:70:2c:87:0f:dd:
                    86:ef:4a:b9:09:0c:cc:9a:80:74:ba:a8:98:57:51:
                    7c:d5:75:ff:37:8a:c6:4f:9d:24:5d:d0:f1:95:f9:
                    a6:de:c3:ad:18:e5:46:1a:d6:ae:a5:db:95:a1:e9:
                    75:bb:54:a8:89:5e:79:39:5f:dc:fe:1f:a9:fc:90:
                    a8:99:4c:fe:da:02:bc:44:77:cd:df:e8:d9:c5:2d:
                    16:43:d3:5b:26:b1:c9:88:ed:ab:7f:80:75:27:23:
                    64:28:3e:ce:03:d0:cb:62:1d:7c:bc:12:7b:b0:3b:
                    d0:c7:ec:ec:00:aa:10:24:69:61:c4:7e:22:d7:0d:
                    3a:30:bc:99:7a:f4:95:06:47:b1:f8:be:62:57:fa:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:D9:09:D0:33:F7:6F:B1:34:8E:9D:D9:98:1C:6E:F6:9F:94:61
            X509v3 Authority Key Identifier:
                keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:61:17:5a:e2:35:ad:81:1f:78:40:3b:71:b9:bc:27:18:6a:
         34:f0:0c:63:c8:6d:5f:cf:31:22:dc:71:02:c8:76:ca:a8:ef:
         d0:8f:3a:57:32:18:e8:09:3c:a8:c8:6d:6d:54:e7:c7:5c:17:
         0d:1b:2c:bc:90:34:cc:95:34:3d:96:78:12:bf:2d:5b:80:44:
         70:03:d8:d3:47:19:c3:f6:8a:78:6f:73:4c:a1:70:d4:a8:6f:
         62:67:4c:4d:16:9c:2e:bb:36:4a:79:91:e6:0a:47:17:5f:78:
         02:21:f5:07:f9:0a:fd:c8:c0:9c:85:7c:87:79:93:90:ca:ed:
         df:07:87:07:22:96:2e:6e:4f:f1:8f:d8:22:60:44:35:1b:a4:
         57:ef:73:4f:f8:10:20:09:13:33:6b:8e:b0:54:e5:63:b2:90:
         36:a5:fc:95:03:1d:06:51:9b:86:6c:e5:90:8d:7b:47:4d:8d:
         d9:ee:b0:44:7d:db:b2:dc:23:82:3f:1f:2d:a7:28:4e:03:3d:
         23:c5:cf:44:be:d2:f7:0a:a1:df:ac:9d:35:66:22:48:48:f5:
         1c:a9:30:fd:72:ad:2a:f7:f8:94:83:29:2e:97:57:c0:10:1c:
         e9:b9:6a:8c:c3:e1:4c:96:c3:fc:ce:f6:52:5b:0c:02:b6:ad:
         f2:d3:30:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:17 2025 by rpki-client