Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File:                     EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier:          cDyD9jy2xZKMkdp7Z8rJm2CPawgWMCynR+wcYFYFt3k=
Subject key identifier:   42:43:A1:F6:5F:AC:9B:F7:7A:73:BC:52:0F:92:FD:4D:9B:6E:57:03
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer:       /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial:       019676E7A1345210EC366F5C16F0ACA64125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number:          1513
Signing time:             Sun 27 Apr 2025 11:00:13 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:13 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:13 +0000
Files and hashes:         1: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (hash: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=)
                          2: 4-AjoNA7VOJ_UiimHqze6-r8mOc.roa (hash: JTkL4x5ahR/KwObF9hG8YAZtFMXcuYYdoh4Dfvy4fEs=)
                          3: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: w/sAcaoAXyXQEY1H9eFDkk9cQOTZvwtbefnRg6DEjVE=)
                          4: d20O9emcn7CjuDmJRpHLCr299Xc.roa (hash: rl+B2eBW+ldlkZ8XO+QKbvyeN9kIzHzzXRoP3cWB2GM=)
                          5: gtefixppHDgPkEEMhZq1SfvWirQ.roa (hash: vn3uTTSXJsi+O61TM8/AR6beVW9RqmzQLNC3wyKaQ10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:a1:34:52:10:ec:36:6f:5c:16:f0:ac:a6:41:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
        Validity
            Not Before: Apr 27 11:00:13 2025 GMT
            Not After : Apr 28 11:00:13 2025 GMT
        Subject: CN=4243a1f65fac9bf77a73bc520f92fd4d9b6e5703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:3c:10:be:10:0c:8e:e2:b2:8c:41:29:a3:
                    c5:91:9d:16:4a:e8:d6:a8:b1:77:ad:b0:fd:6b:10:
                    b3:df:74:28:9a:de:92:33:06:70:26:e2:dd:79:76:
                    6f:d7:55:d6:54:cc:69:3d:2b:5c:79:23:f9:1b:f7:
                    39:f9:a2:8e:f8:8e:97:f8:e4:e9:6f:50:52:b4:b4:
                    09:1b:ea:93:2b:02:0c:76:8a:09:b2:7b:5d:87:35:
                    2c:e8:78:79:1f:01:95:47:30:d3:7d:e8:78:08:0c:
                    7c:e5:9d:0d:74:c9:b7:78:c7:38:6f:c6:a4:e2:54:
                    45:10:f0:91:12:42:c5:9b:5e:fc:06:71:25:57:66:
                    90:e7:68:0d:d5:e3:5a:cc:94:e9:c9:b6:37:3b:fd:
                    a4:8c:8a:40:36:e1:29:53:b7:24:0e:7f:b3:db:a8:
                    82:56:06:91:ad:aa:68:3d:2e:ff:13:1b:87:c9:c7:
                    66:b2:3a:0b:6f:10:5b:98:97:77:21:06:bc:44:ec:
                    c5:8d:c6:e8:44:1c:73:95:91:da:98:12:eb:29:2c:
                    49:03:69:8d:9d:32:02:e0:c3:5b:52:7f:70:98:87:
                    e6:8c:b6:9f:b5:a9:e7:de:d4:58:eb:71:93:d2:39:
                    9d:fa:e0:be:ac:d7:93:26:04:8b:59:9e:9d:9f:d9:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:43:A1:F6:5F:AC:9B:F7:7A:73:BC:52:0F:92:FD:4D:9B:6E:57:03
            X509v3 Authority Key Identifier:
                keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f9:75:8a:aa:13:6e:25:29:4f:42:0a:53:59:6a:24:f3:b6:
         9e:8b:d2:44:aa:3d:91:e3:31:8f:59:37:9e:42:87:24:55:05:
         9e:9e:fd:ff:87:ac:1b:30:2e:1f:58:ee:23:54:6a:3f:55:3e:
         bf:05:d9:34:42:d4:87:54:15:c0:be:e0:93:4f:0e:30:1d:ba:
         5f:11:b9:69:10:eb:cf:97:7d:75:05:ac:18:bd:f2:e1:a4:d2:
         9d:44:77:61:12:d3:73:2a:0e:aa:69:11:4b:c6:07:d8:6e:8e:
         e5:85:8c:2e:b5:94:26:42:12:62:2e:27:89:eb:41:12:59:7e:
         ee:89:10:0e:1a:2a:bc:6c:2e:f9:0d:f6:5a:35:0a:89:a7:82:
         ff:aa:5c:1a:bf:56:be:c2:3e:f2:2c:bd:56:f0:fa:9b:93:97:
         be:2e:08:45:57:ad:da:32:3e:bf:a2:19:2e:20:97:1b:d9:4e:
         fa:e4:3c:3a:8e:e2:33:e0:30:a9:f3:11:ad:61:32:c7:4f:6c:
         82:9e:57:ba:82:44:30:d6:9c:6b:35:b4:3f:26:d1:de:e5:59:
         e0:e0:88:3e:f4:8e:6d:20:fe:9d:8b:20:28:61:9d:51:84:51:
         2e:5b:27:c6:83:07:3a:4b:ed:0f:c2:aa:df:2f:65:5b:b6:2c:
         9a:88:27:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:16:24 2025 by rpki-client