Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
File:                     EjujgC-cm_Z1baq9Mk5TJu3kGao.mft (raw, json)
Hash identifier:          u5LneGjNtQH0NoaD6VXNJwA6l5LIa6Mzor8eL01EGHk=
Subject key identifier:   22:89:7E:A0:23:85:25:6C:D7:4C:46:D8:56:72:3E:8E:95:67:56:82
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Certificate issuer:       /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial:       019674C2BADF17C007786B70358E034C51B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
Manifest number:          0D6E
Signing time:             Sun 27 Apr 2025 01:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:40 +0000
Files and hashes:         1: 04B5kFR_t_P2nEjasNBAT7tnJqs.roa (hash: CDtvY+ltwTJd4nat+qn/VGqFVOYiDg8maqZV5Y1Ghm0=)
                          2: EjujgC-cm_Z1baq9Mk5TJu3kGao.crl (hash: 6YPM6wF59DSGbnv4ZgMiQHKf98QtoO6C+dcdrBkFEts=)
                          3: JE63iOY_pn4KGRwRQJXw5cNaawc.roa (hash: MxiRl7UzaZKi+99heK7lH0mlebxDgUgaLV/Sp6mBG4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:ba:df:17:c0:07:78:6b:70:35:8e:03:4c:51:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
        Validity
            Not Before: Apr 27 01:00:40 2025 GMT
            Not After : Apr 28 01:00:40 2025 GMT
        Subject: CN=22897ea02385256cd74c46d856723e8e95675682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:36:2a:e6:59:c4:f9:5e:d9:15:16:2a:fa:
                    2d:20:99:c1:5d:05:c0:ad:67:7d:74:88:e5:43:75:
                    b6:7b:4a:32:65:15:57:38:18:46:b3:b3:a6:58:b4:
                    be:16:c7:82:11:c9:97:e0:e6:86:04:dd:e7:90:d1:
                    e5:35:44:8d:09:3a:1a:c2:5c:1d:75:9e:82:6b:24:
                    49:ad:05:e6:3f:53:0a:25:db:f9:56:0a:ae:37:42:
                    fc:e5:3b:cb:c1:5c:a5:b2:d3:e3:78:60:40:1c:42:
                    da:06:db:d8:ab:8d:0b:0c:6c:69:90:2f:1c:fe:ce:
                    3e:a7:3d:79:a3:e4:f1:f6:a5:fd:40:a1:28:e0:a8:
                    ae:d7:3b:0c:0d:f7:36:d3:76:56:ba:0f:33:99:05:
                    5e:fa:b8:44:12:93:b0:5f:ce:2e:1b:34:70:de:45:
                    41:40:c1:c1:d3:cb:e2:b9:b7:56:01:41:de:48:0d:
                    d4:28:92:a2:cc:09:eb:c7:56:48:a4:3b:83:98:22:
                    87:d0:47:34:59:03:96:a6:e8:1d:17:d9:01:d0:a1:
                    68:13:bf:7b:98:5f:60:03:4f:0a:57:3b:1e:cc:83:
                    14:d0:ff:b3:d0:1f:c7:f8:16:62:84:aa:15:c2:7f:
                    79:47:45:9b:b8:ba:57:f7:5f:3d:d6:50:fe:79:d7:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:89:7E:A0:23:85:25:6C:D7:4C:46:D8:56:72:3E:8E:95:67:56:82
            X509v3 Authority Key Identifier:
                keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7b:b3:a7:48:47:1a:a2:6a:25:df:96:20:fe:63:a3:03:4f:
         3c:ae:16:a5:c9:11:92:cf:d1:08:69:69:85:58:69:11:74:09:
         fa:88:ec:29:97:05:be:c3:30:4d:37:b9:5b:2d:82:c2:d2:98:
         49:fc:1f:99:16:cd:44:3a:bf:c7:46:34:de:7c:41:f4:02:ac:
         2d:43:b1:2f:6b:e0:96:ba:d4:8f:a4:03:4f:e6:9d:73:58:40:
         42:43:a5:fd:0f:d0:54:66:58:2a:45:85:47:fb:08:4c:c6:5d:
         4c:7e:29:65:83:e0:b2:84:10:0a:24:c6:92:81:f8:87:23:d7:
         88:0a:04:fc:23:4c:32:1a:98:ac:ca:a3:68:74:10:1d:5e:ac:
         9f:b8:a5:6b:b5:39:0b:23:6e:1e:b9:1d:32:fe:09:cd:a9:92:
         00:85:e8:b0:f3:63:13:80:ad:13:cc:95:40:4f:d1:53:c0:68:
         81:a0:86:45:22:20:66:13:f8:fc:0d:dd:07:e4:4d:2d:7f:98:
         f4:99:cd:71:09:32:c5:60:36:2a:a7:d4:58:bf:52:67:50:32:
         5a:95:dc:e2:d3:80:92:2b:c7:68:88:7e:69:ab:b0:d9:89:14:
         97:86:c1:97:c8:ac:8a:06:66:61:44:af:40:25:ef:b4:5f:30:
         a1:fa:ac:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wrrfF8AHeGtwNY4DTFG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2JhMzgwMmY5YzliZjY3NTZkYWFiZDMyNGU1MzI2ZWRl
NDE5YWEwHhcNMjUwNDI3MDEwMDQwWhcNMjUwNDI4MDEwMDQwWjAzMTEwLwYDVQQD
EygyMjg5N2VhMDIzODUyNTZjZDc0YzQ2ZDg1NjcyM2U4ZTk1Njc1NjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSM2KuZZxPle2RUWKvotIJnBXQXA
rWd9dIjlQ3W2e0oyZRVXOBhGs7OmWLS+FseCEcmX4OaGBN3nkNHlNUSNCToawlwd
dZ6CayRJrQXmP1MKJdv5VgquN0L85TvLwVylstPjeGBAHELaBtvYq40LDGxpkC8c
/s4+pz15o+Tx9qX9QKEo4Kiu1zsMDfc203ZWug8zmQVe+rhEEpOwX84uGzRw3kVB
QMHB08viubdWAUHeSA3UKJKizAnrx1ZIpDuDmCKH0Ec0WQOWpugdF9kB0KFoE797
mF9gA08KVzsezIMU0P+z0B/H+BZihKoVwn95R0WbuLpX91891lD+edfBAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKJfqAjhSVs10xG2FZyPo6VZ1aCMB8GA1UdIwQY
MBaAFBI7o4AvnJv2dW2qvTJOUybt5BmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQt
ZTRkMDI0Y2RhZTBjLzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQtZTRkMDI0Y2RhZTBj
LzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHuzp0hH
GqJqJd+WIP5jowNPPK4WpckRks/RCGlphVhpEXQJ+ojsKZcFvsMwTTe5Wy2CwtKY
SfwfmRbNRDq/x0Y03nxB9AKsLUOxL2vglrrUj6QDT+adc1hAQkOl/Q/QVGZYKkWF
R/sITMZdTH4pZYPgsoQQCiTGkoH4hyPXiAoE/CNMMhqYrMqjaHQQHV6sn7ila7U5
CyNuHrkdMv4JzamSAIXosPNjE4CtE8yVQE/RU8BogaCGRSIgZhP4/A3dB+RNLX+Y
9JnNcQkyxWA2KqfUWL9SZ1AyWpXc4tOAkivHaIh+aauw2YkUl4bBl8isigZmYUSv
QCXvtF8wofqsOQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:13:31 2025 by rpki-client