Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
File:                     EFQ6UZfrJUREfp02s-vxRFLHd-s.mft (raw, json)
Hash identifier:          CbHxKqW9ZfIZHcGx3rmOpW+a/+pKC2EXvXyPhOWLUoE=
Subject key identifier:   4C:9F:2E:E1:98:80:45:67:6D:C7:A7:71:C1:8F:A4:73:9E:25:00:EB
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Certificate issuer:       /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial:       01976D7425774309C12C6D3178708E968B70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 08:00:17 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:17 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:17 +0000
Files and hashes:         1: EFQ6UZfrJUREfp02s-vxRFLHd-s.crl (hash: xuupe4/jgp0XlhXhe8SIOHLBakt8xw6EhzzmCv1xWkc=)
                          2: O7lEAqmJ6RVW6ZUznCOtA8Wqr_U.roa (hash: 1bSxYn5Oc7EjOQaFfznp7ul3zLl0SKUWaiYKT6AxWVI=)
                          3: USGB4EfibArvmHzd6YayMlE_4Ts.roa (hash: QP2OBD46ZcKAmd7iDiZKVRRwOA0LwH3cIZJcmun1SiE=)
                          4: WfSIoxcGiNbq5oGvcE0eiwRzwaI.roa (hash: 4+ITlETEk/svEAAS/Kisuuoh14YPCP7V8PSGJ6x5Okw=)
                          5: lnnez22JWNJd2WeZ5gJhM-lXVrk.roa (hash: /nXGCYPW3MVBYSZbtf5SJkkLnnjwK5da+GKvEPkj/WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:25:77:43:09:c1:2c:6d:31:78:70:8e:96:8b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
        Validity
            Not Before: Jun 14 08:00:17 2025 GMT
            Not After : Jun 15 08:00:17 2025 GMT
        Subject: CN=4c9f2ee1988045676dc7a771c18fa4739e2500eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:be:b7:62:69:24:64:91:38:70:de:7e:3d:
                    b2:3d:9b:17:39:8a:11:ad:e3:2c:f2:07:13:df:a8:
                    63:b8:df:11:aa:df:dd:11:1d:ff:ae:f5:fc:26:a7:
                    de:0c:f2:45:3c:8c:c5:84:c7:de:b7:f7:19:53:a1:
                    bc:7c:dc:7b:29:25:88:d6:3a:c2:99:55:18:58:2a:
                    ad:5c:56:69:17:8f:3f:d5:b4:35:9f:dd:ae:eb:b0:
                    24:df:17:8e:3a:2e:3a:2b:e9:a8:37:24:3e:83:ce:
                    d5:3c:92:b8:ed:43:20:e0:16:d7:2a:f3:49:87:f8:
                    eb:b6:38:0b:97:46:67:7c:1a:41:22:63:af:0b:7d:
                    fe:e7:ed:d3:dc:6c:16:54:62:1e:e4:9a:55:56:4f:
                    1b:43:7b:b4:38:6d:bf:77:f8:95:de:63:47:5d:ae:
                    27:b5:fd:68:b9:e5:8a:d2:e0:ec:d9:fd:26:79:79:
                    d7:3c:be:0f:b7:a7:5e:cb:8c:47:98:9e:66:5d:11:
                    dd:aa:f6:81:9d:51:c9:8e:f9:73:6a:23:65:f7:51:
                    d8:3a:bf:2d:bf:c4:55:c3:a5:9f:9b:e0:64:61:c8:
                    5f:a0:b2:3e:93:e4:8b:11:a7:15:79:2e:2c:7b:e1:
                    94:04:00:8a:9a:ca:03:71:d5:b4:70:a7:5a:d5:d6:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9F:2E:E1:98:80:45:67:6D:C7:A7:71:C1:8F:A4:73:9E:25:00:EB
            X509v3 Authority Key Identifier:
                keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7c:46:e2:a9:1d:c0:56:a3:58:fb:f1:e8:be:ed:47:e7:fb:
         83:d3:52:52:01:96:08:d0:98:df:7f:e2:fd:c7:87:e8:83:ca:
         cb:e6:3e:2e:ba:25:a9:c4:0b:bf:b4:36:5f:97:aa:3b:3b:34:
         dd:01:95:68:c3:6a:53:6d:b5:01:0a:cf:40:f6:44:66:87:00:
         d1:1d:24:27:7e:96:e4:00:e0:b9:73:19:8e:b5:1b:b7:62:53:
         25:af:72:0b:80:79:2c:14:bb:25:d0:28:c7:b1:ff:7b:28:65:
         0f:3a:f3:cc:7e:5a:65:67:f4:8b:06:6d:39:6c:e0:00:2f:40:
         10:ea:37:d6:24:72:72:74:46:ae:ef:ec:0f:05:d6:6c:e6:41:
         e1:6d:d5:9d:82:1d:6a:c6:f1:59:0c:e8:8b:af:59:6d:bb:04:
         bc:65:02:4c:5a:60:05:5a:d5:26:aa:61:d0:3b:fe:f0:d2:d5:
         41:07:47:ff:53:0e:07:61:16:8d:df:9c:b8:30:55:5d:aa:07:
         ea:bf:f4:20:e3:a1:98:ea:eb:02:99:52:de:01:55:7e:eb:0a:
         fd:5e:6c:5c:1f:dc:ca:b4:cf:59:fb:1b:16:fb:d5:76:9e:9f:
         24:b2:1e:bd:c0:d7:b8:04:e2:4d:a1:de:69:97:05:67:c4:37:
         c7:f2:4f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:18 2025 by rpki-client