Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File:                     Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier:          SYfjJxndaa0qBp/AxU/e64pkJezV720JdzEt3r/NEpg=
Subject key identifier:   69:1A:A6:5E:C9:F7:64:E7:65:CE:5F:66:A4:8C:BF:E6:85:C8:88:D6
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer:       /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial:       0194BB5FF714AABB6C19D4ACE0C4707332BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number:          0365
Signing time:             Fri 31 Jan 2025 08:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:16 +0000
Files and hashes:         1: 20TV3G_zqSwWD9jn85G0oHSYUWo.roa (hash: ln3cpOzlT6bLA9htFrfQ1ndKs7h6RkK+G1oPsD3H/Og=)
                          2: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: ekoWIRjAjl2WMEi9FMRt6qNLzeQvYUXJ+3wkQdBsO0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5f:f7:14:aa:bb:6c:19:d4:ac:e0:c4:70:73:32:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
        Validity
            Not Before: Jan 31 08:00:16 2025 GMT
            Not After : Feb  1 08:00:16 2025 GMT
        Subject: CN=691aa65ec9f764e765ce5f66a48cbfe685c888d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a7:8e:e6:8e:4f:ab:ab:74:5c:3e:1f:ef:e8:
                    25:ab:bc:63:5a:3c:dd:90:74:e2:c6:96:24:da:d5:
                    81:96:00:74:25:d4:13:1b:64:63:fd:90:c5:9f:2d:
                    2f:f3:f8:99:6b:67:a6:71:cf:71:bc:fb:9e:2b:c8:
                    6d:93:e9:c4:15:a3:1c:e9:b6:cf:8f:c3:3e:8f:ca:
                    5b:ad:72:19:99:47:93:f0:bd:ee:e1:04:2c:70:06:
                    95:35:0e:57:80:5d:4b:f1:e8:8d:3f:78:dd:73:ef:
                    b6:db:15:49:fe:e1:d9:35:3a:45:ff:ab:0c:6c:52:
                    c2:ae:3f:02:a2:01:23:81:e2:36:8e:0b:da:cc:e1:
                    96:de:15:f0:bd:1b:3b:98:00:69:86:78:3e:23:84:
                    fd:63:e9:ce:1d:dc:9f:b7:d6:b3:48:15:7f:51:00:
                    1e:6d:2d:8d:08:9f:19:57:c2:88:71:3a:27:ff:84:
                    28:47:4e:93:8a:90:36:07:48:6c:a4:6e:40:e8:fd:
                    0d:22:3d:21:d8:21:2b:93:4f:10:43:f8:f2:c7:ec:
                    17:c6:99:0f:9e:d1:ef:21:29:3f:85:00:c5:8f:5f:
                    58:5a:22:44:3b:f7:eb:24:5c:2d:10:27:c1:90:42:
                    10:02:ec:1f:07:3b:ee:30:91:80:a0:02:70:d5:d7:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1A:A6:5E:C9:F7:64:E7:65:CE:5F:66:A4:8C:BF:E6:85:C8:88:D6
            X509v3 Authority Key Identifier:
                keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:ce:48:c8:61:e4:14:2d:41:50:a2:08:98:5d:02:4a:87:
         51:c1:60:da:c1:58:cc:d0:e8:74:18:23:f7:51:d6:c5:e1:d1:
         92:0f:ad:f3:a1:9e:56:24:3a:c4:ec:c3:42:77:62:d9:c8:f8:
         f9:9b:35:2a:81:98:cf:89:1d:d8:5b:41:75:2c:55:15:92:c6:
         75:e3:f8:a6:6b:20:1d:09:89:1e:95:e6:4b:1b:03:41:2f:de:
         c3:a1:35:7f:6c:80:1b:39:05:15:89:3b:83:60:5a:6f:43:72:
         96:5b:85:dc:a1:0b:ad:e2:61:aa:97:8f:cf:78:6c:a2:69:18:
         03:22:66:eb:e7:ea:95:29:cf:db:59:31:cb:b3:b1:35:41:05:
         b1:e4:08:e9:84:69:cd:1b:91:ae:e6:4d:f2:ec:31:0a:34:59:
         cb:f3:94:d7:fc:d5:a4:5f:3b:cf:89:fc:e6:74:82:40:1f:dd:
         18:61:a5:ca:3a:c6:28:cc:fa:91:3b:e3:d9:7d:85:e7:d7:3c:
         e6:1e:4b:26:15:fb:54:b5:d4:14:01:df:2c:47:33:68:69:04:
         1d:8c:06:b9:f4:69:d1:d3:b5:a6:1d:e2:9a:a0:44:d1:99:22:
         fd:5f:23:d3:94:0a:bc:8a:34:7c:48:61:bf:d1:71:77:06:5f:
         cf:dc:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:46 2025 by rpki-client on console-fra.rpki-client.org