Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          JygP9QkBO7kSdRovbxvO3pv3QdX6bk0uOwHBN0E+NUw=
Subject key identifier:   A8:F6:3E:97:A7:A1:F1:36:E2:92:E8:8E:A8:E0:73:97:B9:EB:44:1C
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       0196C0EF839EE7F2431DF4C4D2A8DF3F4AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          1553
Signing time:             Sun 11 May 2025 20:00:44 +0000
Manifest this update:     Sun 11 May 2025 20:00:44 +0000
Manifest next update:     Mon 12 May 2025 20:00:44 +0000
Files and hashes:         1: A-CITLCzJtdw39wtm0dLTltUEFM.roa (hash: c5iWUzoFE3kjILTe2m5OWQi3zSByNEE2KpMzxgoNxeI=)
                          2: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: f7L8Taf5l/5kungPgS0tks08RE1u9/otjb7DtKAcOMM=)
                          3: VZ0QTQOqbhBZXRpRcK6PrfGjqXA.roa (hash: qUqfQH6HkkXqxIuCFL1oijtckoAAoRaIonlYxeFElKw=)
                          4: f-Juu6-6GY6L6jxX6W7h7A1eHrk.roa (hash: ZfWB0QSC1JhyWEDFyE7CZ6ZmAqPQnN6XecILZVAnstM=)
                          5: kh5T0eGIG6pki0AMnhy0w9eCTLQ.roa (hash: SgO20AkeVjqIkes5Gz4s0ZXBoQPcPhpf8s/VjNKSJAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:ef:83:9e:e7:f2:43:1d:f4:c4:d2:a8:df:3f:4a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: May 11 20:00:44 2025 GMT
            Not After : May 12 20:00:44 2025 GMT
        Subject: CN=a8f63e97a7a1f136e292e88ea8e07397b9eb441c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:dc:bd:60:77:04:3a:77:f4:49:a0:60:2a:
                    7c:0c:33:60:0e:0a:c9:61:07:e4:dd:92:a9:06:c9:
                    3c:92:8b:ff:c8:5b:c4:5c:4b:9b:6f:2d:bd:bd:37:
                    5c:90:4f:c4:e7:7c:96:eb:80:e8:e2:c3:81:ca:73:
                    69:a4:f1:42:2e:20:96:9a:0c:9d:07:85:ec:67:1e:
                    59:b5:e2:c5:31:70:54:aa:62:0d:a4:b5:dc:4e:c4:
                    dd:45:77:17:68:dc:64:ba:39:9d:08:fe:66:aa:fe:
                    9d:fe:56:c0:6a:6f:19:b2:6c:79:d1:53:21:3e:02:
                    6c:32:2b:79:bb:17:30:0c:91:5d:74:0a:55:c6:bd:
                    8d:70:ef:3b:b7:31:00:45:cd:96:f2:01:9f:96:38:
                    b3:56:5a:b1:89:01:47:eb:6d:89:d1:5a:d4:05:d4:
                    76:c7:76:3c:66:89:1c:4c:2c:24:55:5e:f4:12:7a:
                    61:46:68:13:73:4a:7d:d5:2d:44:b7:c5:21:21:e6:
                    4a:c5:33:32:9b:0a:de:af:5c:0d:ae:b1:34:87:f1:
                    76:d4:2b:8d:b6:e4:d1:99:33:f4:cb:84:c4:c6:31:
                    59:12:75:f3:1f:c9:49:a7:6c:f5:30:ca:0b:04:89:
                    fe:57:07:02:f7:b7:49:79:03:76:8d:4e:da:6e:cc:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F6:3E:97:A7:A1:F1:36:E2:92:E8:8E:A8:E0:73:97:B9:EB:44:1C
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d1:e1:3a:fc:a3:43:fa:7b:0a:09:f8:24:28:ec:45:de:73:
         c8:5f:9c:80:26:1d:bd:ff:ad:ed:66:08:d1:5d:6a:56:a5:40:
         88:dc:6b:a4:ce:b1:5f:24:16:6d:4b:d8:d6:87:c8:ce:18:80:
         74:93:43:d6:a4:b3:64:76:c4:87:69:c9:05:d7:65:47:12:c8:
         da:ae:bc:63:68:3e:9d:30:14:bc:01:b4:40:5c:78:b7:bf:05:
         59:03:f2:8d:02:03:97:bf:b0:4b:9b:40:86:14:a9:ab:b0:d7:
         ef:8d:82:d3:20:06:af:3d:cc:94:ec:54:a0:55:8b:c9:2e:89:
         ae:c5:12:ff:b5:7f:82:25:2f:f8:8e:86:98:8c:8c:d5:4c:2c:
         92:47:33:4d:9e:1f:96:c5:8e:79:cf:c4:b6:93:70:c5:1d:20:
         64:07:d4:f4:ba:67:eb:2b:d1:7e:e3:e2:30:04:2a:b7:a9:f9:
         74:17:08:db:86:36:46:12:74:8f:68:d5:bf:39:63:7b:15:f2:
         36:7a:2d:16:16:bf:b1:3b:35:9a:e2:4b:d2:78:59:1d:8f:8c:
         61:f9:29:6b:62:55:71:77:70:88:dd:69:c6:1d:0a:e8:3f:44:
         54:a3:3f:76:71:e9:35:2a:5f:5c:ab:d1:0e:2b:dc:7c:21:88:
         4a:ea:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:20:49 2025 by rpki-client