Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
File:                     EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json)
Hash identifier:          pJpP6GIKl+Ak9marY/oBzDpGJyODYK7fzHekiNMWjfE=
Subject key identifier:   16:98:B2:C1:3C:C2:C7:F0:16:7F:66:88:3A:61:F7:17:CD:6B:9B:6D
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Certificate issuer:       /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial:       01976A05FB5D031343C384EB8D98FA273ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
Manifest number:          12D7
Signing time:             Fri 13 Jun 2025 16:01:06 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:06 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:06 +0000
Files and hashes:         1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: e3B6azUqaYL1R1neF+Lb8q+TX13rBshP30SXijvAvxM=)
                          2: h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa (hash: bzjeTqPcjaJhOMAteDMwXrvi1f6qBvlBTlDeNbXA0mc=)
                          3: kkhZtXnFFbbyksJB3tfkXPoindU.roa (hash: AnX+QPeb1iA6tYHpW/GJq8CbkdKou5XvPzQURX4/+g0=)
                          4: n7z_DfOtkGmMleyu2ItBMkfbWIg.roa (hash: JfGahSu9V1xovP5pxrTlWe3nwAxY6TrxY6kTUEokFws=)
                          5: uBAndVEu4g2uOttKjyLkMFr3ADc.roa (hash: RQpI8/9SZFmhxGwLcGtsCyax4v0wvsItiR+xv1PadRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:fb:5d:03:13:43:c3:84:eb:8d:98:fa:27:3e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
        Validity
            Not Before: Jun 13 16:01:06 2025 GMT
            Not After : Jun 14 16:01:06 2025 GMT
        Subject: CN=1698b2c13cc2c7f0167f66883a61f717cd6b9b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:e2:dd:33:98:16:c0:b7:88:16:10:d5:49:
                    20:14:41:fa:55:8b:e8:7b:87:d3:46:0c:b9:ee:77:
                    12:f8:9b:09:e9:cb:1b:04:93:e8:61:11:4a:6f:cb:
                    2c:07:11:a1:93:25:a3:56:01:1b:5c:95:4d:42:7c:
                    01:d0:d9:7e:eb:81:9d:09:33:90:34:39:4d:ab:ff:
                    78:50:5f:37:05:d2:42:3e:a7:5e:50:ad:72:29:31:
                    f6:51:c3:ef:bb:db:5f:5d:ae:89:70:17:ba:9d:84:
                    53:2c:a7:72:71:a0:0a:12:e1:fe:0e:2f:a0:a3:3c:
                    57:f4:3d:da:f5:94:e1:d4:d2:2e:7e:08:8b:fd:84:
                    26:ab:d1:d5:1f:ca:53:3f:11:4b:9e:ee:cf:a5:c0:
                    92:45:e9:30:ca:6b:ef:d7:83:5a:64:ce:3d:1d:73:
                    cc:1d:df:05:ce:17:14:79:42:ea:45:56:e1:71:8a:
                    c2:7c:53:5c:03:8c:cc:28:39:a5:b9:1e:ce:cb:a0:
                    9c:29:60:31:a4:a2:aa:11:25:ff:72:d1:51:26:72:
                    89:fa:6c:73:e0:4a:8c:78:1a:19:64:88:3c:7e:45:
                    6f:1e:f5:8b:39:09:6a:f7:c5:83:5c:3c:c7:5f:12:
                    25:f5:84:57:88:b1:72:7f:73:8b:ee:04:20:55:91:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:98:B2:C1:3C:C2:C7:F0:16:7F:66:88:3A:61:F7:17:CD:6B:9B:6D
            X509v3 Authority Key Identifier:
                keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:1f:f0:ec:8a:5c:71:be:c2:dd:a0:6d:2e:8d:d9:4c:42:
         8c:d1:5e:3f:a2:dc:43:91:44:6a:d9:23:ca:a8:1d:6e:d0:94:
         f9:3f:f3:05:f0:14:ea:6f:05:30:9e:04:00:de:a5:7d:99:cf:
         f3:be:82:0f:b9:c3:8a:57:3e:ae:e5:d5:fa:35:4c:c7:2d:25:
         bf:00:31:35:40:3e:23:5a:f0:60:2b:a9:e2:23:b1:78:f4:86:
         16:34:af:7f:25:e8:b2:45:22:0c:61:43:d6:8a:0c:3d:98:8c:
         8f:fd:67:e2:a0:79:b7:1a:1c:68:1f:b5:54:2e:9b:0a:4d:88:
         81:43:fc:1e:eb:14:16:38:cb:c7:27:70:d8:38:c5:f0:3f:62:
         a2:44:95:b3:ee:82:60:bb:50:17:67:2b:6c:43:b0:19:ca:54:
         69:02:7f:52:86:b1:a9:17:e5:08:2e:18:4e:d1:17:b1:c0:fe:
         10:b7:d8:e7:63:fb:ea:d5:e6:6a:f4:9c:6c:1b:5b:76:d9:9e:
         06:0a:9f:ab:85:dd:80:39:fd:36:a2:c5:86:a4:35:4b:bc:ef:
         0a:d6:5f:6a:27:66:f5:50:e2:ad:2e:11:76:df:fb:17:6f:5a:
         9c:42:dc:e2:e1:6d:8e:63:ba:e9:78:43:03:b4:85:7f:2c:9f:
         92:4e:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:00:39 2025 by rpki-client