Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
File:                     EyhoZEV55uth9HcdZ7QGZPUBFvo.mft (raw, json)
Hash identifier:          yxFdkBup3D7Dj4RaOTl6o5UOELk19oyC9jAiZNvvveU=
Subject key identifier:   3C:C9:E7:33:58:18:44:6A:48:C0:3A:BD:00:A2:11:9D:DE:CF:7F:B1
Authority key identifier: 13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA
Certificate issuer:       /CN=132868644579e6eb61f4771d67b40664f50116fa
Certificate serial:       01976960D9400EBB98B1E6FDA0637A7F18A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
Manifest number:          1125
Signing time:             Fri 13 Jun 2025 13:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:44 +0000
Files and hashes:         1: EyhoZEV55uth9HcdZ7QGZPUBFvo.crl (hash: YR5HgVOQDPvOSB8vlukk2UN2+fT51gjZAKrG86tcAnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:d9:40:0e:bb:98:b1:e6:fd:a0:63:7a:7f:18:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132868644579e6eb61f4771d67b40664f50116fa
        Validity
            Not Before: Jun 13 13:00:44 2025 GMT
            Not After : Jun 14 13:00:44 2025 GMT
        Subject: CN=3cc9e7335818446a48c03abd00a2119ddecf7fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:83:e1:0c:c5:87:c9:3b:1a:f9:6c:2b:34:
                    04:9b:7c:de:a9:85:92:7e:0d:a9:c4:fb:1b:a8:33:
                    30:40:f4:a7:f0:24:82:b4:3d:08:69:9c:3a:44:bd:
                    50:74:38:0d:7c:a8:b6:34:60:bb:81:f8:65:45:b4:
                    7d:80:eb:bb:d8:25:82:93:d0:6d:74:04:0e:8b:17:
                    ce:13:3a:01:9e:45:0f:b1:ce:be:28:81:d7:bd:23:
                    91:a1:69:ef:d5:9e:09:d7:e9:88:31:72:55:e8:b1:
                    a3:37:b8:be:57:a3:c7:7d:80:d6:ff:5a:8a:e8:87:
                    ca:5d:b5:f6:bb:e1:3d:b4:41:59:a0:7f:93:9a:5b:
                    61:d3:1f:b6:5f:67:70:17:f2:85:26:74:a3:bf:c6:
                    06:a5:10:96:59:3d:05:75:aa:b2:e6:38:bc:50:72:
                    e2:30:5a:a6:b4:26:66:1a:f7:63:01:f8:df:ac:ac:
                    43:02:8d:e7:90:b2:09:55:72:55:8d:51:8d:93:7c:
                    a2:02:ca:7c:1d:50:e9:ae:8a:ae:9e:25:58:60:0d:
                    85:2a:17:8b:48:aa:1d:83:43:2a:d3:c3:06:6d:53:
                    30:db:b8:d9:97:55:ff:52:cf:67:2e:ca:c9:ed:fe:
                    b4:06:24:50:35:ec:69:22:f7:57:ee:01:38:81:a6:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C9:E7:33:58:18:44:6A:48:C0:3A:BD:00:A2:11:9D:DE:CF:7F:B1
            X509v3 Authority Key Identifier:
                keyid:13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:83:44:32:1d:14:e3:f5:54:79:c3:b0:ca:3b:f6:25:a7:d2:
         36:48:29:a6:d6:6d:a7:10:30:c3:93:14:78:84:07:a9:d0:29:
         88:1b:cf:e2:8b:58:90:fb:83:44:77:8f:ad:f8:51:d1:13:98:
         02:d2:75:e6:1a:40:f5:87:2a:8a:2c:19:85:0f:8d:cb:c2:15:
         ee:ea:f5:17:53:d5:3d:94:e1:88:47:9f:dd:e1:44:4f:1b:d0:
         0a:f4:e5:5f:d8:4b:22:9e:3f:9c:e5:5a:71:ca:b4:43:3c:56:
         ad:6e:89:f2:dd:f5:79:25:49:04:d6:3a:ae:e6:d6:9a:14:8e:
         2c:5f:1b:ef:16:71:0f:37:30:c5:99:f5:9f:dd:6f:43:d7:1c:
         db:0d:12:43:09:d2:a1:00:45:22:93:05:63:c2:e1:be:05:ce:
         69:59:8f:40:83:58:89:87:8a:61:a9:4b:9b:dd:26:66:ce:b8:
         88:5d:2b:5a:f9:87:d2:a3:8e:46:bf:56:42:cc:8a:f8:48:2c:
         30:ac:ba:d4:a8:5a:21:38:2a:4c:2b:8e:6f:2c:87:f1:ad:e5:
         97:31:d2:22:43:12:4f:fc:43:da:08:46:15:94:82:d5:71:85:
         ee:c2:9a:76:8e:2c:16:c2:26:cf:3f:4b:cf:6b:10:c3:26:4e:
         74:f7:65:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYNlADruYseb9oGN6fxijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjg2ODY0NDU3OWU2ZWI2MWY0NzcxZDY3YjQwNjY0ZjUw
MTE2ZmEwHhcNMjUwNjEzMTMwMDQ0WhcNMjUwNjE0MTMwMDQ0WjAzMTEwLwYDVQQD
EygzY2M5ZTczMzU4MTg0NDZhNDhjMDNhYmQwMGEyMTE5ZGRlY2Y3ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLeD4QzFh8k7GvlsKzQEm3zeqYWS
fg2pxPsbqDMwQPSn8CSCtD0IaZw6RL1QdDgNfKi2NGC7gfhlRbR9gOu72CWCk9Bt
dAQOixfOEzoBnkUPsc6+KIHXvSORoWnv1Z4J1+mIMXJV6LGjN7i+V6PHfYDW/1qK
6IfKXbX2u+E9tEFZoH+Tmlth0x+2X2dwF/KFJnSjv8YGpRCWWT0Fdaqy5ji8UHLi
MFqmtCZmGvdjAfjfrKxDAo3nkLIJVXJVjVGNk3yiAsp8HVDproquniVYYA2FKheL
SKodg0Mq08MGbVMw27jZl1X/Us9nLsrJ7f60BiRQNexpIvdX7gE4gaYg6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzJ5zNYGERqSMA6vQCiEZ3ez3+xMB8GA1UdIwQY
MBaAFBMoaGRFeebrYfR3HWe0BmT1ARb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jYzNkZTUtOTU4Ni00MWM2LWFkZTUt
ZjJkOGRmOGVhYWQ5LzEvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jYzNkZTUtOTU4Ni00MWM2LWFkZTUtZjJkOGRmOGVhYWQ5
LzEvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYNEMh0U
4/VUecOwyjv2JafSNkgpptZtpxAww5MUeIQHqdApiBvP4otYkPuDRHePrfhR0ROY
AtJ15hpA9YcqiiwZhQ+Ny8IV7ur1F1PVPZThiEef3eFETxvQCvTlX9hLIp4/nOVa
ccq0QzxWrW6J8t31eSVJBNY6rubWmhSOLF8b7xZxDzcwxZn1n91vQ9cc2w0SQwnS
oQBFIpMFY8LhvgXOaVmPQINYiYeKYalLm90mZs64iF0rWvmH0qOORr9WQsyK+Egs
MKy61KhaITgqTCuObyyH8a3llzHSIkMST/xD2ghGFZSC1XGF7sKado4sFsImzz9L
z2sQwyZOdPdl5w==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:52 2025 by rpki-client