Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File:                     EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier:          p75cRC8s78biQfRdC3ss+ptpxYNRA10ORLl389ljxrw=
Subject key identifier:   A8:88:3F:30:78:21:7A:A8:B1:62:CE:E0:27:AA:D6:11:3A:30:1A:7D
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer:       /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial:       01969183986D57AFD0613813B92425825F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number:          075B
Signing time:             Fri 02 May 2025 15:00:42 +0000
Manifest this update:     Fri 02 May 2025 15:00:42 +0000
Manifest next update:     Sat 03 May 2025 15:00:42 +0000
Files and hashes:         1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: u+YXUQmhheFsfLDAfs4BdqPhf0RRpYdIirQRPyA+L0c=)
                          2: Rm4G8KwJAms34HdBJGkkvyGyVeo.roa (hash: /H/EXJlnlnkPcjJyZSTq8hc9wXqmJ/nwbv9HzKcNsm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:83:98:6d:57:af:d0:61:38:13:b9:24:25:82:5f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
        Validity
            Not Before: May  2 15:00:42 2025 GMT
            Not After : May  3 15:00:42 2025 GMT
        Subject: CN=a8883f3078217aa8b162cee027aad6113a301a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:00:8b:c7:29:ef:8d:23:cc:6f:ff:37:ea:
                    e5:f7:08:d9:d4:6a:e3:8f:0d:ed:24:00:84:4f:4c:
                    c6:69:36:d9:04:d8:1e:d5:05:1a:3e:57:de:63:9f:
                    9c:08:20:e5:8b:ae:b1:c8:ec:4c:85:28:26:43:f0:
                    bd:d0:c1:8e:6e:b9:3e:65:70:d9:4e:74:c5:55:75:
                    be:ee:18:d1:c9:69:5e:17:60:4a:02:60:93:f2:5b:
                    a0:9d:e9:82:82:33:9c:cf:6b:fb:07:54:57:68:1a:
                    19:6e:38:ca:7d:4e:56:fe:c8:b0:80:83:85:04:e3:
                    bb:f3:49:6c:85:85:7c:ce:52:ae:9f:b3:15:ac:13:
                    a1:d3:d0:65:2e:c3:f2:17:f9:b5:88:ba:15:50:f5:
                    54:f6:a5:7a:05:f5:47:b9:34:b8:8a:95:f6:92:55:
                    18:1a:7d:fe:ee:d4:c0:ae:f9:07:00:31:f5:00:d2:
                    f6:a6:ea:fa:59:1a:5c:5e:c9:aa:c8:fa:80:68:a9:
                    b4:1f:bd:ca:8d:9c:c9:79:82:fb:5d:f9:5f:f8:55:
                    e9:41:b2:a5:7e:6e:63:15:cb:bb:98:27:af:f5:11:
                    97:78:a0:d0:63:d6:07:1e:0a:aa:20:a7:ff:63:be:
                    b1:a8:00:70:5f:07:06:77:db:be:47:d5:88:6e:f7:
                    c2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:3F:30:78:21:7A:A8:B1:62:CE:E0:27:AA:D6:11:3A:30:1A:7D
            X509v3 Authority Key Identifier:
                keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:1e:0b:bb:c4:b9:77:aa:8a:f5:3b:83:b7:0d:c1:8a:f4:
         2c:5f:8f:92:a6:e0:f4:b4:aa:c5:b4:cd:a3:48:b1:ab:dd:72:
         31:d8:82:64:16:4d:97:83:48:c0:d3:4c:f1:26:5d:59:48:4b:
         1f:85:40:f8:7d:c0:94:36:86:32:d7:01:b1:4e:83:cf:f8:7e:
         30:f5:9e:29:aa:b0:e5:92:db:3b:00:ff:b8:d2:15:dd:fe:40:
         c0:2e:84:f3:5d:67:16:46:7e:fa:cb:9f:57:48:38:34:a8:00:
         1c:cd:84:e7:34:92:c2:b8:8c:df:25:be:ea:4c:d8:b8:4f:cd:
         16:e1:79:b3:ac:3a:42:f8:c6:df:dc:86:d8:46:56:83:67:72:
         80:f7:23:92:fa:93:4c:57:74:78:e8:5b:ec:93:7c:39:c5:3b:
         78:9d:65:67:19:8d:bd:13:14:28:07:9c:99:16:b2:71:01:7f:
         e2:bd:43:c5:a1:2c:b3:65:e4:71:f7:a3:34:26:87:9d:87:7a:
         cc:3e:67:bc:50:57:4f:e1:98:a3:58:fd:54:34:ba:dd:98:56:
         c6:e9:70:03:19:58:c4:66:c4:11:39:ef:56:d5:4f:86:fe:8d:
         8f:80:c7:3a:47:f6:fb:c3:87:e1:83:25:af:e8:07:7c:5b:e8:
         5b:2d:47:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:00 2025 by rpki-client