Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
File:                     EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft (raw, json)
Hash identifier:          KkukA2U8D1FJYRs2JLh/SUKV5ikbYloQLPmyMA4gpqc=
Subject key identifier:   46:CA:61:08:0D:B6:87:07:49:40:94:64:07:82:6A:DC:6D:26:71:F4
Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41
Certificate issuer:       /CN=122a541caf138341bd32798940de206052910341
Certificate serial:       0197B7EA150EC49C7CA11DC3860ABED0045C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
Manifest number:          0C37
Signing time:             Sat 28 Jun 2025 19:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:00 +0000
Files and hashes:         1: EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl (hash: mTGZ8ArYKMJlXyrE9wj7SXSoyQLVdaMMDPpgpsBGEvY=)
                          2: N9zcYe5ReKGYCwNwcNWVqIdGiS0.roa (hash: VpzrJQRuZQfy5BAF/SwMEyOY3wzqdR1C+GvTYF7gE24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:15:0e:c4:9c:7c:a1:1d:c3:86:0a:be:d0:04:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a541caf138341bd32798940de206052910341
        Validity
            Not Before: Jun 28 19:01:00 2025 GMT
            Not After : Jun 29 19:01:00 2025 GMT
        Subject: CN=46ca61080db687074940946407826adc6d2671f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:3c:47:7a:f9:05:2b:8f:ae:58:03:7c:42:
                    93:82:2d:65:4c:1b:ae:86:63:9a:c2:59:2a:42:d0:
                    6b:27:d1:a3:77:de:25:37:45:89:d6:64:b2:75:21:
                    c6:4c:3d:fd:4d:51:8d:2c:65:dd:b7:dd:d2:8e:e9:
                    da:c3:9e:32:0f:c4:3a:32:c7:e8:48:40:9c:ab:5c:
                    5b:96:8c:47:08:c6:4b:a0:98:a0:5e:46:51:8e:6a:
                    bc:b3:8b:9d:f0:22:02:f8:1b:ae:5b:46:b8:ae:d8:
                    c5:b3:35:f1:59:b9:ce:3e:21:a9:ce:1f:0f:13:0e:
                    f7:90:19:80:fb:64:b7:d0:61:65:d3:20:a7:2a:f7:
                    ff:50:43:77:59:b6:78:c5:92:ca:d1:2b:e0:8f:c8:
                    7c:e1:6a:d1:5a:b5:a3:50:ec:2d:68:cc:1a:9a:da:
                    ff:af:65:4a:8f:63:62:6c:ec:02:03:8a:cc:01:4e:
                    4e:e2:d1:af:5f:b7:d0:65:1a:61:76:d3:98:c4:31:
                    87:f0:b7:4d:21:21:05:fa:48:2f:fb:a2:03:31:02:
                    26:94:33:42:58:9e:63:7b:ce:ed:85:96:ee:9d:09:
                    15:11:a8:59:80:eb:b2:80:c8:a3:46:b7:df:19:3e:
                    77:a5:d0:34:c3:79:ca:b8:58:89:53:19:87:8e:d8:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CA:61:08:0D:B6:87:07:49:40:94:64:07:82:6A:DC:6D:26:71:F4
            X509v3 Authority Key Identifier:
                keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f6:0a:fc:ab:07:78:ec:ec:82:fb:b4:ae:99:4d:e2:44:89:
         1b:0e:7f:70:b3:75:42:5f:89:c7:2a:0a:0e:4a:28:17:22:29:
         58:34:fe:67:61:44:e8:34:d2:3e:07:54:7a:3c:c1:f6:a3:88:
         01:74:b1:65:32:b6:9a:51:d1:a0:e5:51:e2:fe:ac:c0:63:54:
         e3:98:57:56:97:a9:64:f1:66:17:28:93:e8:05:90:fe:4d:42:
         39:38:36:5f:4c:d2:2f:8e:77:74:23:ab:ca:83:9f:ec:c3:5f:
         65:64:14:12:46:1c:94:55:d7:92:e4:15:48:6d:37:eb:97:c5:
         22:3a:cb:16:de:67:c9:12:b2:82:f7:b9:7b:6f:1d:e5:54:f0:
         28:1c:fa:fc:8d:3d:4a:4e:c5:9d:0f:e8:ed:6b:6e:fa:98:69:
         50:1a:1b:09:7c:ea:77:80:41:0b:b8:f8:ee:1e:14:41:2a:4f:
         bb:cf:79:e7:a7:fd:3f:5f:a3:3d:be:d3:c0:e8:65:15:5b:bb:
         e2:65:ae:21:6f:f0:16:3f:61:e2:78:23:e5:90:8c:a2:a1:8b:
         b1:27:c6:57:ac:ac:a4:67:b9:d3:4e:4d:a4:d6:67:e2:56:42:
         62:bc:d1:0a:9f:ba:c4:a9:0a:bd:b7:e4:db:e2:db:76:b7:7b:
         85:24:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:20 2025 by rpki-client