Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
File:                     eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft (raw, json)
Hash identifier:          aXAbUghuygben8q0e5QfBK44Mqy5voL4XHSg6V8tJwQ=
Subject key identifier:   3D:BB:7D:F4:9C:A2:C3:D7:D5:F0:24:5D:41:C5:0D:5D:3A:39:E0:1B
Authority key identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E
Certificate issuer:       /CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
Certificate serial:       019770081118A885BAD97D25310B8484A97D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
Manifest number:          0A35
Signing time:             Sat 14 Jun 2025 20:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:06 +0000
Files and hashes:         1: SeZ4MHkWijanJyiqLEKOSjkards.roa (hash: 0MJVFVX2eka97RjF2zWc+vftmisrddmh+e7zXYl/UsE=)
                          2: eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl (hash: RJlCp6sSfNsJZ+p/xT9AuzFXtANpvycRGv2SV4SmDHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:11:18:a8:85:ba:d9:7d:25:31:0b:84:84:a9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
        Validity
            Not Before: Jun 14 20:01:06 2025 GMT
            Not After : Jun 15 20:01:06 2025 GMT
        Subject: CN=3dbb7df49ca2c3d7d5f0245d41c50d5d3a39e01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:71:2c:77:e4:26:a7:c2:6e:9c:4b:b8:3e:
                    e7:7d:52:e7:e0:a8:18:17:fb:ea:b1:cc:16:96:84:
                    b8:99:28:41:d9:8d:26:76:37:16:63:21:ca:29:0b:
                    8c:a9:14:a1:f4:6d:79:38:a5:06:4b:4b:eb:e8:7c:
                    2e:62:91:37:c6:82:70:78:00:15:84:b7:e3:7d:95:
                    82:0a:cf:4b:22:cd:6e:75:a6:1d:2a:01:de:bb:27:
                    64:b4:72:30:e3:dd:a4:3d:01:a6:0e:f3:c3:b6:c8:
                    b9:a1:aa:1a:d3:38:6d:91:b5:40:fc:d8:f9:f8:84:
                    fd:ea:1d:81:fe:9c:c4:d8:5e:08:b2:13:a0:cf:9d:
                    db:ac:b0:b6:be:60:ee:af:1a:63:ba:ce:32:9b:d5:
                    00:9e:20:01:2b:f1:ea:08:52:53:2b:5e:24:29:f3:
                    d2:a1:cf:f9:5f:e1:7f:78:a6:64:1c:9d:7b:3e:96:
                    22:73:b6:b3:0b:0b:46:f4:5b:30:ac:54:05:34:eb:
                    a5:a4:69:f2:b3:6f:ed:c5:df:cc:a9:7c:32:eb:13:
                    de:46:11:c0:be:50:f4:d3:7e:fd:96:e0:81:ce:54:
                    e3:cf:ec:c6:8c:5f:48:e5:38:dd:3f:37:71:13:4b:
                    79:bb:7d:41:24:33:a2:9a:e4:8a:70:98:00:4a:58:
                    20:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:7D:F4:9C:A2:C3:D7:D5:F0:24:5D:41:C5:0D:5D:3A:39:E0:1B
            X509v3 Authority Key Identifier:
                keyid:78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:54:2e:c9:cf:34:42:44:c0:6d:77:b3:b2:01:38:0e:8a:ac:
         ec:14:c3:0e:92:5b:3b:dc:79:c5:6c:4a:58:6a:73:24:55:ea:
         fd:99:38:65:0f:5c:d6:05:cd:cb:ae:4c:85:08:91:af:1b:85:
         10:59:6a:21:19:71:5d:55:bc:f8:e1:36:1c:fd:39:44:14:40:
         ef:a8:99:3e:c7:43:b0:85:7c:48:86:70:88:c5:e5:a1:5e:a4:
         7b:74:6f:58:a9:f3:cd:26:4e:8d:dc:a4:c2:00:49:05:87:79:
         43:54:e5:8a:da:6e:e7:9d:4e:77:a5:e5:46:2f:d7:b2:83:b1:
         e5:d4:ca:cd:ae:1b:4e:39:ef:01:0d:6a:45:d3:00:7f:44:e3:
         c6:64:51:47:4d:38:ab:ef:5a:e7:23:36:e0:2e:d3:2d:a5:dc:
         09:26:ae:ce:c9:07:ba:9c:8c:aa:ca:9a:30:25:ba:21:23:0f:
         a3:71:63:65:c4:2e:39:61:c5:5a:bb:2d:31:7b:a3:03:84:ab:
         62:0e:43:5e:73:35:29:ae:4b:4e:e6:e8:e3:ff:04:91:9b:cb:
         69:41:44:1d:e5:ce:d6:1a:74:ca:f9:c7:e4:c6:f9:76:94:ea:
         68:0f:46:5f:cd:5d:f0:4c:29:b1:af:9a:aa:5a:d3:89:8f:c7:
         61:7d:ee:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:42:15 2025 by rpki-client