Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
File:                     eJaox-m6CdLx1EhjZwviE_wMohA.mft (raw, json)
Hash identifier:          JXEsSIJujRvjRVNwx6kPJhYUGPEjZedPBJNenO1Yseo=
Subject key identifier:   61:3B:AF:44:3E:8F:9D:ED:AA:5C:1B:BD:0D:CE:30:BC:58:33:5D:0B
Authority key identifier: 78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
Certificate issuer:       /CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
Certificate serial:       01976CCFE0F9A1B4B218B39E70CFBBB167FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
Manifest number:          0137
Signing time:             Sat 14 Jun 2025 05:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:52 +0000
Files and hashes:         1: eJaox-m6CdLx1EhjZwviE_wMohA.crl (hash: 8mDqRNjJ7hKLvXI+5hQx7hCIMqCvzLxV4NoPM4Wv8YM=)
                          2: wduzAoCV3X_HT3SwkAkhVbUpjvk.roa (hash: xcQexB5syiRJfDRPxaM63gktKvSVatGww4DJIDGRPJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:e0:f9:a1:b4:b2:18:b3:9e:70:cf:bb:b1:67:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
        Validity
            Not Before: Jun 14 05:00:52 2025 GMT
            Not After : Jun 15 05:00:52 2025 GMT
        Subject: CN=613baf443e8f9dedaa5c1bbd0dce30bc58335d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:63:dd:35:94:1b:08:df:47:dd:8f:6f:b0:
                    e2:9e:50:52:7c:c8:a3:96:d2:fd:d6:80:88:b6:0a:
                    eb:95:62:92:ab:90:8d:7e:62:a6:1e:f9:d2:28:f2:
                    dc:67:db:30:0c:b9:5a:37:b8:c6:64:71:86:4e:55:
                    64:15:7d:96:c8:06:04:61:21:10:8f:5b:e1:8a:ff:
                    6b:29:cd:ec:ef:5d:41:5e:34:b5:90:25:87:32:8b:
                    45:8c:cf:0f:08:c1:fa:f8:96:5a:6c:be:c5:1e:e1:
                    22:31:48:71:bc:ab:ab:bf:9d:85:87:60:e5:a2:97:
                    0d:e8:43:b4:6a:a3:48:0f:23:71:b4:d4:a2:63:90:
                    9b:6e:27:3a:53:a8:c5:bf:aa:85:a9:c5:5a:d8:1b:
                    bc:4f:12:d4:5d:1d:22:51:dd:1a:af:3d:4f:fe:52:
                    91:b6:42:66:22:ba:52:94:b7:a4:aa:e5:64:d1:3b:
                    b6:ad:3e:2d:0a:1a:7e:51:f7:01:c3:46:90:b0:23:
                    86:4a:6e:d0:b7:ca:85:c0:ba:81:80:47:05:fe:cf:
                    61:e8:dd:f4:e6:58:4a:bf:e4:d5:35:96:47:b5:5c:
                    e9:52:f3:db:04:25:5b:26:26:eb:ff:04:5a:c8:4b:
                    e4:2f:82:e9:72:20:a8:20:6a:92:84:9a:12:62:46:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3B:AF:44:3E:8F:9D:ED:AA:5C:1B:BD:0D:CE:30:BC:58:33:5D:0B
            X509v3 Authority Key Identifier:
                keyid:78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ab:06:a8:93:5b:95:fc:98:92:55:99:69:88:c5:a8:75:bf:
         fa:63:79:5b:c0:b1:94:12:33:73:3d:da:2c:1a:cb:d7:fa:c7:
         5d:d5:fc:83:2e:ff:a5:21:e2:c9:18:99:64:a7:8d:4b:33:3e:
         41:56:a1:43:41:88:f2:6e:dd:49:a4:63:76:f2:e0:94:2d:5c:
         98:6d:07:bc:9f:71:ba:d0:86:db:b2:18:5c:fa:bd:9b:da:1c:
         e4:d0:66:bc:e2:14:63:92:c7:e8:ad:6a:7b:f2:7e:87:73:2f:
         82:7c:51:b1:c4:a4:03:39:5d:e8:85:eb:30:6d:65:9d:3c:02:
         4f:89:9b:1e:0e:eb:6d:11:a8:2f:47:fc:7f:2f:4c:16:a8:37:
         6c:8b:e6:18:7e:a6:3f:79:2c:24:81:53:8e:e2:c4:9f:69:8a:
         23:9f:dc:7c:f7:1a:97:f6:49:41:ab:46:f7:7a:11:48:be:33:
         18:b2:cf:37:b6:e6:2e:3d:d2:9e:97:f3:a1:97:0f:2f:e0:9e:
         e5:8f:1a:bf:fa:03:2c:fb:9d:6c:85:7f:c8:de:d1:7a:e8:46:
         c7:65:f0:dd:4f:ba:b6:75:d9:a5:7b:54:4a:eb:aa:86:fc:56:
         84:a9:ee:05:3c:db:47:58:a1:32:94:e1:4e:6d:d8:bb:2f:6d:
         86:71:86:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:47:32 2025 by rpki-client