Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
File:                     EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json)
Hash identifier:          HsQVUHd/kIBYnC94qvRlu9QpM73E8KAXHCTgxDXj6yo=
Subject key identifier:   E2:28:E0:39:CD:76:46:A3:72:F6:EC:4F:92:99:6D:DB:43:17:79:75
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Certificate issuer:       /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial:       01987450A77B6C9811FC1563CEEEBC9610AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
Manifest number:          1352
Signing time:             Mon 04 Aug 2025 09:01:39 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:39 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:39 +0000
Files and hashes:         1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: Os9xtXxwy4lS3DX3JaFrT3iIf79/a8qDiF66MoQjr5Q=)
                          2: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (hash: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:a7:7b:6c:98:11:fc:15:63:ce:ee:bc:96:10:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
        Validity
            Not Before: Aug  4 09:01:39 2025 GMT
            Not After : Aug  5 09:01:39 2025 GMT
        Subject: CN=e228e039cd7646a372f6ec4f92996ddb43177975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:44:ef:0c:d5:d1:3b:79:ab:2d:3e:10:33:
                    2f:61:e5:3c:c2:f5:2a:58:1f:3e:82:2d:c4:cf:93:
                    1e:19:ee:81:70:a7:d9:e8:e9:75:db:21:8f:ba:0d:
                    fd:fe:d3:ae:e8:94:cf:a6:81:84:e8:ce:c3:f2:95:
                    07:85:0d:a4:71:fb:31:39:48:0f:60:fc:38:dc:37:
                    a8:ea:9e:af:3d:8e:c2:62:2e:b2:36:45:b8:87:ef:
                    97:1f:fb:b0:5f:2e:1f:e6:f8:3b:99:0b:21:6c:ea:
                    76:94:ff:ae:e2:63:4f:ce:6d:95:69:c5:60:80:8a:
                    e6:58:52:2c:41:3d:26:79:69:f3:cc:84:fe:07:17:
                    95:dc:ed:c7:4c:c6:58:8a:59:e2:c2:07:69:c9:35:
                    a3:25:05:3d:87:f4:3e:72:48:15:6c:f5:23:ae:af:
                    25:1b:b7:9f:ec:b9:b0:d6:ad:be:d1:c1:de:0d:f3:
                    60:41:37:59:fa:8e:09:4a:6e:cb:cd:c9:39:81:ff:
                    3b:8e:ad:c7:07:df:f3:10:f9:41:16:e0:9b:9f:ce:
                    bc:87:86:eb:7d:af:37:af:af:ba:24:73:e3:59:f3:
                    a8:39:bd:91:b3:36:c8:44:49:a2:51:0a:52:3a:7c:
                    e3:cb:b2:e1:db:b5:49:25:fa:c1:59:c7:cb:26:9a:
                    e3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:E0:39:CD:76:46:A3:72:F6:EC:4F:92:99:6D:DB:43:17:79:75
            X509v3 Authority Key Identifier:
                keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e9:ed:cd:fb:18:f8:f5:ba:b0:93:61:bb:4c:0f:fd:f4:d9:
         95:32:24:34:a8:29:6a:43:14:86:3b:39:47:d8:58:46:86:80:
         da:a1:18:02:d6:49:8c:be:2c:6d:4d:cc:32:fc:84:c9:4a:76:
         57:af:c3:39:f6:30:ab:ca:b8:7d:1e:19:b9:8c:09:dc:79:a6:
         5e:b2:90:ca:08:6b:c9:06:d8:9b:26:68:12:34:0f:4e:dd:a3:
         da:fc:4e:f2:79:e7:bd:4b:dc:94:2e:8b:12:10:72:0b:5e:c7:
         a7:35:43:91:56:40:cb:84:49:b0:57:ba:f0:60:fa:bc:2d:35:
         39:75:0e:f9:2a:d9:c3:31:fa:21:6e:5b:22:f7:0c:cc:6f:33:
         ab:62:85:88:50:50:39:e1:49:75:7c:09:60:31:bc:9c:f3:e1:
         0f:4d:26:0d:04:b2:30:2a:67:e1:81:35:ab:8d:8d:46:f2:15:
         a2:a9:4f:94:f7:da:5a:b8:a1:85:0f:97:ab:14:be:c7:44:27:
         ee:4b:73:94:16:c6:be:9a:ed:49:51:d5:b1:ad:8c:f1:1d:c7:
         9d:d0:73:c9:d3:8d:a8:67:21:94:a9:8b:f6:c9:2d:a6:f4:0a:
         06:63:08:85:da:c4:5c:80:2f:16:85:37:0d:52:85:63:0b:8a:
         98:a9:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:59 2025 by rpki-client