Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          yIg6cySzmvMvjmMJS3Guo2nQuzN6L3aba9BHeTGrNDk=
Subject key identifier:   15:79:C9:7C:E7:6A:F2:08:DE:4B:42:46:0C:2B:B1:E3:B2:32:10:23
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       0196BE5C224ADA36A01339D6E11B5250E110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          0C94
Signing time:             Sun 11 May 2025 08:00:31 +0000
Manifest this update:     Sun 11 May 2025 08:00:31 +0000
Manifest next update:     Mon 12 May 2025 08:00:31 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: XAQeJ8Wycq1DyC6FPy7CBrbt/rtDilzNwWQh3FJOtzU=)
                          2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=)
                          3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=)
                          4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:22:4a:da:36:a0:13:39:d6:e1:1b:52:50:e1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: May 11 08:00:31 2025 GMT
            Not After : May 12 08:00:31 2025 GMT
        Subject: CN=1579c97ce76af208de4b42460c2bb1e3b2321023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:40:b1:cf:b1:e3:fe:2e:d8:8b:da:60:8e:a7:
                    1f:aa:d0:b5:e7:c2:c3:bb:57:a9:35:42:12:4b:71:
                    71:0f:5c:4b:ce:28:2b:bc:68:1d:3e:13:97:d2:11:
                    1b:02:3c:da:96:80:89:cf:4c:28:31:67:97:18:8b:
                    66:ad:0d:f5:2b:12:a9:78:d0:9e:e3:7f:bf:8e:3d:
                    79:d2:0d:fc:d1:10:0f:26:ce:30:73:f0:12:41:29:
                    49:09:44:07:99:f5:6a:83:4d:d3:a4:5f:6a:c4:aa:
                    1e:1c:0c:b5:b0:30:df:41:bd:ea:8c:28:ec:03:4e:
                    9a:57:b6:bb:df:1e:da:d8:e3:66:9c:bb:65:ab:91:
                    06:d6:62:3f:91:63:4f:db:7b:11:e8:e1:ef:40:ac:
                    15:79:41:09:69:ff:a3:7e:8c:82:ea:4e:78:66:c1:
                    6a:ca:b8:fb:86:77:77:df:57:66:d8:70:64:42:43:
                    17:29:07:84:c2:14:cd:99:3f:1a:71:ca:09:7b:59:
                    82:84:6b:c8:bd:d8:21:c1:35:4e:db:dc:54:ed:51:
                    80:e4:8f:05:ca:68:e3:59:ee:41:5d:f4:25:23:f6:
                    d4:85:6f:e4:6e:7b:a4:e9:bd:9a:31:b0:b6:1c:ae:
                    4b:dd:3d:b3:9e:74:de:5a:91:9d:34:6a:02:1f:25:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:C9:7C:E7:6A:F2:08:DE:4B:42:46:0C:2B:B1:E3:B2:32:10:23
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:49:7c:ba:2d:27:8f:95:40:e3:83:f1:83:1e:32:86:ba:c0:
         ae:7e:4c:5b:0f:2e:53:e7:dd:1c:8b:75:4a:6d:96:3d:ca:50:
         13:d0:ab:84:69:e1:24:cf:dc:65:d0:39:33:83:b8:d1:53:18:
         e5:39:68:d0:23:aa:15:02:e9:4a:cb:bc:d7:fe:57:2c:81:1f:
         5a:5f:4c:1f:55:64:a3:30:cd:db:a0:91:2f:39:c2:9b:ce:e9:
         56:db:3e:57:d9:df:df:06:be:87:cb:74:42:21:c2:7d:9c:ab:
         29:80:ca:9a:4a:b4:69:44:ce:f6:24:47:6c:2b:b2:0d:f4:af:
         cd:0a:f8:86:ef:62:10:2e:e8:05:08:89:ac:70:f5:d1:f8:2d:
         97:56:93:bc:b2:21:34:26:26:d4:4b:14:3a:cf:98:c4:b8:5e:
         86:ee:70:ac:8b:7b:b5:7f:9a:a6:0d:58:54:8b:e6:c8:7b:92:
         dc:a6:8c:88:eb:3a:83:9b:a4:b3:16:53:e1:f6:de:58:6f:d1:
         92:48:dc:ec:bb:1c:d0:ee:c4:ae:c5:8a:8e:fd:9b:ab:b2:92:
         41:ec:ce:a9:f5:f4:14:21:e6:ef:4f:0f:8e:fa:cb:a1:e6:e1:
         03:e4:ad:4a:97:e3:30:ca:85:08:51:11:8a:26:7b:c1:fd:76:
         26:8a:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:56:18 2025 by rpki-client