Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File:                     67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier:          IoD19m7jlN9jVhkd+O2mt594ZdTiARhu66qaHjeo2dA=
Subject key identifier:   73:02:5E:90:33:C9:F6:EA:89:A1:89:16:0D:87:7E:0C:B1:3D:B3:59
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer:       /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial:       019769CE61F5EE0F06BB8C03E83BD9DCDCD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number:          0114
Signing time:             Fri 13 Jun 2025 15:00:22 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:22 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:22 +0000
Files and hashes:         1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: QU8skjvViiikhOPDNBMKLuGlJxZmfEAKt/OXpWe5pP8=)
                          2: W66TeYTw-t7EMoHzkCaUwVfLkDI.roa (hash: Ox2U/eJQb+R2Hy97s4rI93U5aSqmhZSgt5Xa460suhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:61:f5:ee:0f:06:bb:8c:03:e8:3b:d9:dc:dc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
        Validity
            Not Before: Jun 13 15:00:22 2025 GMT
            Not After : Jun 14 15:00:22 2025 GMT
        Subject: CN=73025e9033c9f6ea89a189160d877e0cb13db359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:b0:0e:93:c8:a3:02:b4:99:6d:48:6f:a6:
                    f8:ef:e5:5b:88:42:da:1f:ae:7a:05:fc:13:46:b0:
                    9a:98:05:ba:dc:96:2a:35:d2:77:71:43:8e:65:9d:
                    0a:ce:0b:a0:be:04:49:db:ec:4c:eb:65:0b:11:1f:
                    5c:f3:62:8d:d7:2a:e7:0b:df:76:1f:b9:c7:66:7e:
                    88:cc:3d:ab:0e:4d:e4:97:af:3a:4c:55:41:03:f6:
                    76:93:9e:a4:2d:50:3d:da:cc:10:2e:71:85:ff:75:
                    7c:f3:f4:92:05:bb:cb:b6:09:d3:00:02:f5:3f:32:
                    28:c9:65:e7:e8:1f:8f:a2:5c:b7:ea:3a:c0:57:20:
                    66:27:21:58:1d:cb:21:b4:db:53:70:4e:48:a8:61:
                    4b:24:52:86:52:bc:51:e1:77:cc:72:b0:c3:c5:49:
                    65:dd:fe:93:6a:40:33:f9:da:50:fc:84:ca:00:93:
                    dd:35:52:17:11:b1:cd:e7:a7:c5:67:9d:c8:ee:c6:
                    4b:ac:97:aa:dc:ce:e5:af:7e:c9:2c:8d:2c:02:fb:
                    23:a0:69:89:78:42:0e:72:81:34:56:5f:6e:5b:3e:
                    3a:99:81:09:ad:67:bf:3f:a1:d2:58:f2:73:9c:70:
                    31:9c:a3:91:50:2d:6a:e9:cb:ef:39:b5:a7:43:67:
                    1f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:02:5E:90:33:C9:F6:EA:89:A1:89:16:0D:87:7E:0C:B1:3D:B3:59
            X509v3 Authority Key Identifier:
                keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:94:bf:0c:3c:d2:4c:6e:7c:c3:79:08:32:50:5d:f2:47:7c:
         5e:d1:96:aa:b3:0d:ef:71:96:bf:a5:2c:09:95:fe:cf:9c:9b:
         20:5f:80:ed:6a:d3:14:6c:c4:5e:5b:91:c8:fd:06:9c:b5:13:
         be:54:00:90:6a:6d:9b:c9:b3:63:64:6c:c9:82:a7:0a:bf:86:
         67:19:3e:6f:ae:59:b2:69:26:6c:f6:a4:af:9b:fa:e3:33:06:
         f0:87:f1:57:5b:4c:d1:ae:4e:ad:b5:8a:80:f1:6f:8b:30:2f:
         84:d2:d5:82:67:a5:3a:89:31:ea:6d:ac:b6:71:1f:1b:ac:d7:
         87:e1:7d:ab:87:7d:ea:d2:1b:4f:1e:93:77:43:54:f2:04:be:
         72:12:35:76:0e:ca:6d:2c:ae:aa:9f:11:3f:4b:0a:66:4d:e0:
         04:07:ff:dc:c6:7b:27:eb:67:84:c3:7b:2e:d0:90:d4:1e:43:
         b8:cf:ca:34:8e:9d:bb:ac:ee:8e:33:f0:da:97:fc:f2:0c:76:
         df:ec:22:0d:75:de:52:ee:c7:b5:0f:3b:78:43:83:d1:5d:71:
         55:43:35:02:bd:d3:1a:1e:8b:2a:62:d8:04:f8:f3:a2:3b:5d:
         db:8d:9e:22:d5:72:f7:36:31:19:c8:17:14:32:41:00:ac:7f:
         23:ea:2e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:57 2025 by rpki-client