Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
File:                     EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json)
Hash identifier:          TulIilR82vNu2n1APkY9U3xTWVvshOKQakqVKizVpsw=
Subject key identifier:   7F:28:5A:18:AB:43:E0:99:6E:8C:44:B4:F3:DA:EE:4C:BA:22:F4:63
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Certificate issuer:       /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial:       01977B9E199F76557E681FB86859E4493076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
Manifest number:          1596
Signing time:             Tue 17 Jun 2025 02:00:48 +0000
Manifest this update:     Tue 17 Jun 2025 02:00:48 +0000
Manifest next update:     Wed 18 Jun 2025 02:00:48 +0000
Files and hashes:         1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=)
                          2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: ydAZGUz0mKfRqudjOc2IBDFDpc7iQTXSuy2qE3kyCZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:9e:19:9f:76:55:7e:68:1f:b8:68:59:e4:49:30:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
        Validity
            Not Before: Jun 17 02:00:48 2025 GMT
            Not After : Jun 18 02:00:48 2025 GMT
        Subject: CN=7f285a18ab43e0996e8c44b4f3daee4cba22f463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:44:6b:07:25:56:d3:ef:9e:99:a7:c4:5f:
                    56:ff:2d:24:66:86:3c:56:49:74:0b:32:a4:e3:0f:
                    e6:b7:cb:46:e4:6f:54:93:bf:5f:39:7b:26:1e:35:
                    6b:9a:b9:c6:e3:28:93:80:be:e6:a3:30:d3:af:15:
                    44:a5:db:ec:5a:31:13:0b:0f:62:f1:fd:2b:9f:7f:
                    8a:71:00:b3:11:d9:49:87:9b:17:c0:b6:ab:a5:ef:
                    d1:fd:2b:e6:83:be:8f:3d:16:a2:6e:1f:dc:db:ea:
                    45:00:f0:31:d2:c8:11:32:23:1f:ad:7c:93:c8:6e:
                    d0:5a:7b:8a:56:5b:cf:1f:99:57:aa:41:a4:98:a6:
                    e4:d7:96:e5:2c:25:6b:c4:5e:28:84:95:de:ef:a8:
                    55:a6:63:78:dd:a4:a2:d9:d4:bc:0d:79:a0:eb:eb:
                    81:6c:f0:f9:17:4d:ba:d5:9f:9d:fd:e5:74:ce:27:
                    ba:de:62:d8:ac:d4:08:29:a0:c3:56:bf:c9:85:20:
                    63:73:52:2a:b7:d3:f8:fb:86:3c:ec:ce:3d:c0:b8:
                    b0:22:21:f0:f0:a8:58:32:64:fd:86:f0:3b:b7:83:
                    96:20:d5:be:6d:6a:3d:28:a3:62:11:c4:63:1d:98:
                    47:1f:b4:e8:05:8f:55:17:75:ff:9e:60:d7:44:77:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:28:5A:18:AB:43:E0:99:6E:8C:44:B4:F3:DA:EE:4C:BA:22:F4:63
            X509v3 Authority Key Identifier:
                keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:df:36:d9:1f:7e:e1:fd:d6:f9:47:57:10:82:19:e8:2c:fc:
         dc:73:d6:b1:cb:43:34:fe:73:5c:9c:65:8a:ff:e7:d5:f2:1e:
         f7:09:87:47:4c:c8:c4:6b:84:2b:ea:0a:7c:2a:a0:78:ce:66:
         82:05:bf:25:65:9c:34:87:c0:9c:b2:59:87:95:49:ef:f1:14:
         4a:9c:54:de:5a:87:96:67:cd:2b:54:69:ff:34:d8:22:1c:0b:
         2a:f7:cd:6c:c4:38:e5:c0:2a:b7:36:ca:be:8e:8e:bd:be:b2:
         b9:5a:53:ca:b6:6b:87:b0:2a:04:a0:cd:6c:70:bd:0f:5f:11:
         9f:81:79:e5:43:c5:ab:c9:69:99:7a:3f:c8:58:40:ca:94:a6:
         ec:49:2c:31:13:78:05:8c:20:14:59:cf:ce:de:25:c1:90:60:
         c4:99:4c:9c:9c:28:98:21:6f:a6:cf:8b:a1:15:b6:e5:0b:e4:
         7f:c4:03:bf:0a:16:09:ce:b1:92:19:f5:d7:25:ee:cc:39:bb:
         a3:29:d9:fe:72:96:78:40:a7:2a:49:50:1f:77:04:e8:29:17:
         d1:0e:3c:bd:d1:8f:4c:71:52:46:20:05:81:c9:90:00:cd:9b:
         36:74:31:75:1d:8b:d6:73:ff:8a:ce:55:78:87:bf:a0:85:f0:
         fb:11:2c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:02:08 2025 by rpki-client