Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
File:                     eL0cbGiKF1q8jVmPvNEH_KUlS94.mft (raw, json)
Hash identifier:          B+t5IN6Y0+VxJkTjexbEI9CZsoYPwWik9vVEiSvmG4I=
Subject key identifier:   C8:4E:46:45:99:45:AD:FA:AE:2F:E5:DC:39:1B:F1:7F:AE:EA:EF:B7
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       0197794179B27A51BEFBA933165B825ACF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
Manifest number:          1595
Signing time:             Mon 16 Jun 2025 15:00:23 +0000
Manifest this update:     Mon 16 Jun 2025 15:00:23 +0000
Manifest next update:     Tue 17 Jun 2025 15:00:23 +0000
Files and hashes:         1: eL0cbGiKF1q8jVmPvNEH_KUlS94.crl (hash: 7ptrLQInnWTQLKBBn4kq8YtZmnSP5JFBLuQuc+cLj4g=)
                          2: nCGmubCJiSGpdDfmtDjyCBhbirE.roa (hash: DBvXchMzo0c+o7gBr3asd/okXNFiJinaSi6NEP9igBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:41:79:b2:7a:51:be:fb:a9:33:16:5b:82:5a:cf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Jun 16 15:00:23 2025 GMT
            Not After : Jun 17 15:00:23 2025 GMT
        Subject: CN=c84e46459945adfaae2fe5dc391bf17faeeaefb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:61:b2:92:88:e9:f1:44:94:ba:6d:c7:fb:a1:
                    9d:ae:bc:dd:a6:ef:78:b3:4f:71:18:2d:25:d4:aa:
                    21:05:9a:52:3a:59:e7:19:93:1d:ff:18:75:ad:5b:
                    67:b8:09:42:f6:39:14:8d:1d:ae:bc:36:c2:85:80:
                    c5:94:f6:f7:38:dc:01:87:ec:a7:d4:80:3a:38:0a:
                    0a:02:ad:60:47:e5:7e:a1:bd:92:2b:63:da:be:42:
                    7a:03:a3:2b:18:0d:18:25:7e:09:2d:4e:84:dc:e1:
                    ce:5f:c3:1e:eb:d4:f6:bc:17:5f:36:b8:42:64:82:
                    80:ab:0e:4e:4c:61:f9:0c:9f:52:fc:ac:55:0a:a2:
                    01:8c:f6:e6:38:07:d1:a0:4f:7e:c9:3b:dd:3d:d5:
                    a5:9c:16:60:94:63:91:98:cc:64:f2:c8:ce:50:ba:
                    23:ad:1e:f7:6b:01:9b:8e:21:46:e3:08:8a:87:29:
                    49:bb:42:d2:14:be:f4:6b:80:0e:bc:9f:d7:f9:21:
                    d4:bb:18:7a:b7:63:cb:e9:dd:e4:8d:cb:55:80:90:
                    37:c4:9f:11:54:86:05:66:36:41:f9:15:7b:78:b8:
                    7f:1a:91:cc:c5:c4:5a:84:b3:5e:18:bb:eb:4d:f2:
                    20:38:f5:48:f1:f6:57:b9:a5:6c:db:24:47:c1:2d:
                    b3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4E:46:45:99:45:AD:FA:AE:2F:E5:DC:39:1B:F1:7F:AE:EA:EF:B7
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:9e:54:53:da:24:fc:09:54:70:5a:d6:fe:1e:d3:f5:c7:47:
         a8:4c:1a:65:c4:47:66:08:a1:96:ae:00:ce:56:c4:d2:93:96:
         16:78:71:2f:e3:7d:89:fd:d0:05:d9:4e:0d:5f:57:f3:ad:ac:
         f5:fb:27:a9:a4:99:75:da:b9:c0:28:1b:11:ec:60:e5:bc:ca:
         6c:db:ee:13:06:89:67:de:d8:63:98:fe:5f:5e:73:8f:e4:f4:
         00:d5:dd:ae:61:7d:42:a3:b1:31:b4:6d:77:5f:4c:44:5c:21:
         c2:ba:30:6a:d3:c5:80:38:a9:c5:fb:d5:c2:5f:2b:aa:37:dd:
         b4:d1:94:e7:20:c6:d2:5d:d1:6b:95:02:2b:dc:7b:61:2d:1a:
         e2:a3:85:c0:53:be:ec:29:62:c9:d4:20:70:cb:bc:a9:0c:43:
         e3:e8:cd:70:44:c1:d8:af:ed:03:b0:a1:6f:70:5b:67:d2:2e:
         35:0f:00:09:66:e5:d7:de:bf:1f:04:4c:c8:c7:88:ef:2e:db:
         e8:3c:53:da:2a:e6:95:5c:23:ab:54:5f:65:db:df:f2:03:4a:
         43:b5:7e:b5:5a:dc:d2:a2:97:e0:c1:77:1c:6c:69:91:2f:5e:
         93:d7:32:e4:8f:5b:52:6d:f2:7a:26:11:e8:a1:29:a1:0c:65:
         5a:2c:56:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:33:47 2025 by rpki-client