Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          ODcHpN7P38FmLwVRjkMx0A3HMRTKA+AR1lnP8HOTWsI=
Subject key identifier:   69:A4:87:1F:6B:7F:EA:1D:9A:D3:09:CC:27:B0:37:EF:8B:D4:55:E2
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       0196C5DE75FD34A99AE6AA7A6FA8E537BAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 19:00:12 +0000
Manifest this update:     Mon 12 May 2025 19:00:12 +0000
Manifest next update:     Tue 13 May 2025 19:00:12 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: kw2zlkU/CpejTh9qSDfFlvgfJpx959UtT4E3viZXdpk=)
                          2: dFWtNsDJ-mUPtxThTA2MYEV4hMw.roa (hash: ixgpNKTZ9Dv34+AbK1Jrz2N3i33IFdJsOuKPNGIdi1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:de:75:fd:34:a9:9a:e6:aa:7a:6f:a8:e5:37:ba:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: May 12 19:00:12 2025 GMT
            Not After : May 13 19:00:12 2025 GMT
        Subject: CN=69a4871f6b7fea1d9ad309cc27b037ef8bd455e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c2:56:e4:ec:d1:95:a8:b5:98:30:d8:63:10:
                    5c:e3:19:35:35:40:c8:23:fc:b2:f3:12:cd:b5:f6:
                    85:aa:b6:44:24:4f:6d:87:7f:f7:05:96:27:ae:45:
                    e0:1c:2d:40:7f:79:c3:7e:db:f1:7a:b9:67:a8:83:
                    ee:f1:cf:4e:79:8e:48:3d:d3:c0:b0:b6:b4:70:d6:
                    da:eb:5a:38:a0:8e:0f:d3:a6:11:90:bc:35:8e:c2:
                    05:5c:52:9f:65:ad:fb:e6:d4:5e:16:3b:a9:86:40:
                    8b:6b:83:c4:23:79:83:ca:0d:84:d2:99:ad:49:d4:
                    4f:e0:17:26:65:d9:ef:fb:b7:53:f1:99:c9:08:6c:
                    1a:e6:dc:d8:89:0d:9e:e8:4a:41:85:41:a9:d9:c0:
                    03:d2:a9:2d:a4:16:8b:f1:12:6c:f4:2c:77:6d:9e:
                    c9:19:25:03:3e:fe:b1:52:40:a6:8c:6d:58:69:aa:
                    c5:53:d9:4f:4f:a9:8e:ff:68:a2:49:db:f7:ae:55:
                    fb:e2:af:32:17:19:38:01:a7:0b:2e:00:d0:5f:1d:
                    63:50:a1:7f:99:77:64:41:b2:dc:fe:4b:98:49:72:
                    c4:fa:20:e1:20:69:b8:6d:d2:f1:ab:aa:17:99:8b:
                    38:a9:f6:41:51:94:1c:25:09:28:59:c9:51:22:fa:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A4:87:1F:6B:7F:EA:1D:9A:D3:09:CC:27:B0:37:EF:8B:D4:55:E2
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:49:9a:59:3e:2d:cf:de:fe:58:18:38:b1:d9:72:da:1d:9a:
         0b:79:82:b0:07:7f:45:7e:0e:60:ff:6e:17:c2:82:7c:a4:19:
         5c:17:38:f4:47:f9:58:c4:87:77:3a:9d:b4:f6:af:92:11:ee:
         fb:33:01:1f:d8:4c:20:8d:00:c9:0b:13:b6:a0:ad:63:33:3a:
         77:4f:cf:12:83:5e:80:b1:bf:9d:28:84:d3:65:4f:5b:70:62:
         7b:96:6e:48:d6:f3:06:f4:04:5a:2e:e9:2b:97:76:f2:52:8e:
         1b:3c:f5:32:df:f4:a2:8a:1e:a0:dd:52:76:85:f9:79:c2:b4:
         e4:5a:0b:34:bd:37:95:70:7d:e7:d7:c0:c7:c1:a0:9d:e4:3a:
         6d:82:22:80:18:42:5b:77:a8:38:70:ea:62:fd:0c:86:72:2d:
         7e:9e:61:c7:bd:96:61:62:7b:11:82:e6:c9:89:b6:66:e4:e3:
         39:f1:a3:ff:79:32:be:93:03:23:f1:f9:8e:ed:81:9e:63:b6:
         03:3e:f8:ce:9e:6e:e6:9f:a3:ca:0e:15:db:d8:3b:30:0f:32:
         f8:e4:a5:6f:89:d3:e5:72:f2:18:8c:58:34:a7:bf:95:19:22:
         19:af:96:86:63:24:de:46:04:3b:46:0b:99:a3:8b:70:ff:46:
         2c:33:c7:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3nX9NKma5qp6b6jlN7rTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmEyYmEzY2MxOGM5OTg1MDEzMDllY2RlMDQyNzA2YWY1
Yjg0NWEwHhcNMjUwNTEyMTkwMDEyWhcNMjUwNTEzMTkwMDEyWjAzMTEwLwYDVQQD
Eyg2OWE0ODcxZjZiN2ZlYTFkOWFkMzA5Y2MyN2IwMzdlZjhiZDQ1NWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MJW5OzRlai1mDDYYxBc4xk1NUDI
I/yy8xLNtfaFqrZEJE9th3/3BZYnrkXgHC1Af3nDftvxerlnqIPu8c9OeY5IPdPA
sLa0cNba61o4oI4P06YRkLw1jsIFXFKfZa375tReFjuphkCLa4PEI3mDyg2E0pmt
SdRP4BcmZdnv+7dT8ZnJCGwa5tzYiQ2e6EpBhUGp2cAD0qktpBaL8RJs9Cx3bZ7J
GSUDPv6xUkCmjG1YaarFU9lPT6mO/2iiSdv3rlX74q8yFxk4AacLLgDQXx1jUKF/
mXdkQbLc/kuYSXLE+iDhIGm4bdLxq6oXmYs4qfZBUZQcJQkoWclRIvoomwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmkhx9rf+odmtMJzCewN++L1FXiMB8GA1UdIwQY
MBaAFBIqK6PMGMmYUBMJ7N4EJwavW4RaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mOTY0MzAtNjJkNC00MzEwLTg0OTMt
YWUxYWExNjU0Y2RlLzEvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mOTY0MzAtNjJkNC00MzEwLTg0OTMtYWUxYWExNjU0Y2Rl
LzEvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0maWT4t
z97+WBg4sdly2h2aC3mCsAd/RX4OYP9uF8KCfKQZXBc49Ef5WMSHdzqdtPavkhHu
+zMBH9hMII0AyQsTtqCtYzM6d0/PEoNegLG/nSiE02VPW3Bie5ZuSNbzBvQEWi7p
K5d28lKOGzz1Mt/0oooeoN1SdoX5ecK05FoLNL03lXB959fAx8GgneQ6bYIigBhC
W3eoOHDqYv0MhnItfp5hx72WYWJ7EYLmyYm2ZuTjOfGj/3kyvpMDI/H5ju2BnmO2
Az74zp5u5p+jyg4V29g7MA8y+OSlb4nT5XLyGIxYNKe/lRkiGa+WhmMk3kYEO0YL
maOLcP9GLDPH8g==
-----END CERTIFICATE-----
Generated at Mon May 12 22:53:52 2025 by rpki-client