Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File:                     EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier:          K4m4RUhR0LRdIvXNcuErPrU7pi2ClbePsGUVJzPm2L4=
Subject key identifier:   0E:C6:57:D0:A4:45:35:C6:7B:91:30:EC:82:65:03:67:62:20:B4:92
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer:       /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial:       01976DABA33FB4B9CEF79D105E11B8AF83D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number:          0573
Signing time:             Sat 14 Jun 2025 09:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:54 +0000
Files and hashes:         1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: RhzEPxA0u2wrkocEmBDPGePFN08o+z9IRBhjD2Czf8w=)
                          2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:a3:3f:b4:b9:ce:f7:9d:10:5e:11:b8:af:83:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
        Validity
            Not Before: Jun 14 09:00:54 2025 GMT
            Not After : Jun 15 09:00:54 2025 GMT
        Subject: CN=0ec657d0a44535c67b9130ec826503676220b492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:69:e6:75:08:9a:04:45:32:b6:7d:98:04:f6:
                    d3:d7:48:af:b8:9b:4f:7e:6c:db:b5:03:aa:20:86:
                    de:51:bf:dc:28:4a:e7:da:54:98:e4:8e:48:4c:da:
                    ad:70:a4:cc:c2:59:3f:56:19:6d:de:0c:bb:50:06:
                    92:c7:47:8e:6a:dd:37:de:04:3b:8c:9d:17:8f:00:
                    ef:7b:09:10:f4:e3:3b:79:57:03:79:e1:5b:12:8f:
                    7c:6e:d2:e5:bd:82:d1:d1:ae:38:45:d3:ae:eb:d4:
                    11:de:d8:0f:71:56:92:90:bb:fb:c4:9b:49:0e:ad:
                    5f:34:0a:6f:9a:da:b3:e2:35:62:8e:d1:52:c7:3e:
                    a6:6b:e1:9c:40:ec:e9:53:72:f9:00:04:d6:cb:66:
                    c2:0b:91:e3:f5:62:88:8e:d1:e1:da:f8:7b:01:5d:
                    98:01:27:1d:ed:de:01:16:8c:b0:ea:37:00:8c:c9:
                    3c:0b:5b:4c:a9:7d:a6:b4:ae:9c:d5:a1:00:0b:39:
                    1a:aa:e6:01:3d:44:56:b0:36:9c:03:69:48:d0:6b:
                    6f:84:b2:95:ed:fe:5d:ed:01:b9:7f:ce:e9:b7:39:
                    6d:c5:da:c4:b4:8e:dc:aa:20:a9:b5:f6:94:20:a5:
                    db:76:3e:b3:74:e6:7c:36:73:c1:d2:e6:10:0d:66:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C6:57:D0:A4:45:35:C6:7B:91:30:EC:82:65:03:67:62:20:B4:92
            X509v3 Authority Key Identifier:
                keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:a1:c6:1d:e3:f8:80:6c:ca:43:31:d0:0e:d1:14:1d:0f:
         31:3e:8e:c6:f3:87:97:a7:b1:d5:ee:71:97:49:81:ea:14:3d:
         ad:cf:84:70:79:58:d2:1c:e2:c2:28:a3:13:e1:a7:5c:89:90:
         57:1b:2f:76:38:48:5d:39:9f:ab:ab:68:2a:7c:21:ed:96:d9:
         23:ef:76:52:77:76:7c:18:36:53:97:e0:31:05:4d:4a:5e:cf:
         71:3d:dc:22:37:77:ef:c5:85:ab:b1:5c:7d:55:21:bf:a7:8b:
         b4:5d:23:ac:4f:a2:a7:4c:cd:87:b5:3f:66:e1:78:d6:06:33:
         c8:20:04:4c:1a:9b:14:ea:f0:4c:0c:1b:8e:f2:8f:5b:a6:6e:
         bf:ce:9d:3e:b8:c1:aa:0f:de:02:36:7e:bf:cf:01:22:c1:06:
         8a:01:2c:28:f9:02:1e:7a:cf:42:db:02:7e:23:ce:f2:0f:41:
         dd:d7:2e:14:2f:83:66:c6:40:17:ab:18:e0:bf:e8:f9:3f:1e:
         e2:31:25:59:fb:38:fd:8c:4a:1b:f9:f8:fa:fe:20:09:f9:b8:
         f0:67:22:53:3a:1c:b1:2f:7c:dc:72:01:4f:a0:69:16:f0:52:
         f0:21:63:85:89:ec:c9:24:45:c9:1d:23:8a:c3:b3:c4:58:c4:
         e4:ca:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:11:07 2025 by rpki-client