Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
File:                     eVoYZBqRazBgdNHhH9CxDp39xDA.mft (raw, json)
Hash identifier:          TJncBzcYvJjYnIixT4ce6yZOFwnTCy+8ArjiJDs75p0=
Subject key identifier:   E5:20:DF:64:63:3D:62:04:BF:32:2B:D2:DF:D4:20:70:B0:A2:91:F7
Authority key identifier: 79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
Certificate issuer:       /CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Certificate serial:       01967CEA46929CDBE4C0F2DBEE6C3D7106CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
Manifest number:          0718
Signing time:             Mon 28 Apr 2025 15:00:50 +0000
Manifest this update:     Mon 28 Apr 2025 15:00:50 +0000
Manifest next update:     Tue 29 Apr 2025 15:00:50 +0000
Files and hashes:         1: 3O6Hfmbr30Ak6WicBkkKlx5hysk.roa (hash: kcj0ENONASwkAQnmBjvrTNy0GRh8JWD6AlfD+TxgS4I=)
                          2: eVoYZBqRazBgdNHhH9CxDp39xDA.crl (hash: HY5XMtR3iX3Hq7b/sRH7MPxKwFRoJEyOs8ilAg8hGiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:ea:46:92:9c:db:e4:c0:f2:db:ee:6c:3d:71:06:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795a18641a916b306074d1e11fd0b10e9dfdc430
        Validity
            Not Before: Apr 28 15:00:50 2025 GMT
            Not After : Apr 29 15:00:50 2025 GMT
        Subject: CN=e520df64633d6204bf322bd2dfd42070b0a291f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:15:f8:70:dd:f0:d1:bb:03:7d:9b:9b:c0:
                    8c:b8:44:b4:64:85:95:bd:b1:b3:85:4c:3c:ec:48:
                    1a:41:10:f8:c5:39:ba:72:b8:ac:4b:05:08:06:4f:
                    37:89:d1:07:13:24:7a:58:a4:3a:59:71:11:69:4d:
                    e1:bb:34:33:4f:37:20:45:35:42:43:ad:2b:b2:c3:
                    43:db:c7:d2:b9:b9:21:c4:a8:e9:ea:53:4e:18:44:
                    e2:f5:91:52:54:dc:9b:29:7e:b7:82:39:0c:31:62:
                    ad:8d:5f:b9:95:63:ee:62:77:af:8c:8c:f1:71:b9:
                    ae:19:7d:9d:ac:21:0c:6b:f3:3f:85:70:6e:68:ac:
                    40:1b:d3:d9:ac:2b:5b:44:c9:40:68:3e:4b:73:0d:
                    aa:f9:48:a1:c0:bf:12:d5:a5:58:53:17:e1:e6:93:
                    57:4c:bf:92:6a:d0:e1:fd:7c:02:31:e1:15:ab:d6:
                    dd:24:c1:5d:aa:cf:37:bd:26:9d:86:91:07:53:c6:
                    41:4d:fd:f6:a7:52:9f:14:70:f5:71:a7:5c:4d:fd:
                    3f:45:29:2d:3a:66:0d:34:bd:ce:b8:21:06:7b:d8:
                    bb:a9:af:40:c7:a6:ad:07:c3:e5:a0:e8:84:bd:3d:
                    c9:47:e5:ca:ea:ce:df:4d:3c:4f:ff:a8:16:fa:c4:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:20:DF:64:63:3D:62:04:BF:32:2B:D2:DF:D4:20:70:B0:A2:91:F7
            X509v3 Authority Key Identifier:
                keyid:79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:69:d9:d8:7c:3b:14:39:ca:60:97:cc:cb:fc:20:5d:a0:c5:
         96:31:e9:a9:0b:08:61:da:a9:19:ff:64:9d:85:af:01:9a:fc:
         36:43:32:1d:4d:2b:01:7e:9f:66:70:98:f0:22:08:c2:90:7c:
         8a:55:f3:0e:8b:4d:b4:56:93:5e:a4:bc:f3:bc:44:e6:a2:33:
         c1:ee:a0:17:98:c4:7a:72:41:f4:b7:fa:e9:d8:a4:06:ae:25:
         28:a6:07:59:ab:75:e1:86:44:1c:8d:3d:04:fe:4c:52:19:9b:
         c1:46:08:dc:f7:61:f3:80:48:43:f7:12:86:e4:6b:02:1e:8d:
         a5:04:53:b6:c4:ef:04:a5:65:a0:2d:79:a1:36:bd:49:75:c4:
         ce:e1:4f:6a:5d:a3:9e:14:c1:a1:6e:e2:60:5b:a8:f1:94:8b:
         46:74:16:2b:63:73:7d:9f:26:21:59:62:9c:72:b3:11:35:42:
         c3:0a:ff:3a:2d:68:09:b6:4a:48:ed:7f:15:32:fd:b8:da:45:
         fa:2a:a2:8c:ca:4e:c2:cb:a7:a6:03:bb:d6:cd:a3:e0:c5:2e:
         e1:db:be:15:c7:3a:61:e1:98:13:ea:9c:8a:d4:ce:62:ae:93:
         d0:27:66:0a:c2:1f:72:22:2f:77:00:05:82:3e:81:52:2f:fb:
         bb:16:37:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:20:53 2025 by rpki-client