Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
File:                     EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json)
Hash identifier:          Ezp//Vt9AOHuFCfwnHuqmiUq93kwOacbTsAVeN2CSDM=
Subject key identifier:   D9:DF:3A:DE:87:61:24:F6:CE:3A:C4:70:50:7D:21:BC:89:CB:4A:FA
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       0197827C0735573849BBF657DB85BCCE180F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
Manifest number:          0C81
Signing time:             Wed 18 Jun 2025 10:00:55 +0000
Manifest this update:     Wed 18 Jun 2025 10:00:55 +0000
Manifest next update:     Thu 19 Jun 2025 10:00:55 +0000
Files and hashes:         1: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: oDPwT3+EiXWy2cK4kwRNPpc5a8Aw+0xPgNsq8gwZhNU=)
                          2: OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa (hash: 4qqAXlUiD4s2s0wNKmpYnzZpaP7ycT4Hqs2PhA8Ebd4=)
                          3: bMZAGJiSL37RYjG0omxqUzfw6RQ.roa (hash: GC8GdghFTzQFHElrcSiH/7+b0UQBvz9Pyt1qThrmjO4=)
                          4: cA-3PBWL1bUwOarNEMZiyyIevMU.roa (hash: cnw/uPeaFuZ+fncW2i8jJnwO4+wUVJ2d2gj1ViPSrJQ=)
                          5: mOheAjZvIR3dWuAdDZpcmihTHzQ.roa (hash: zDN/FrzOeeK98CYXtLxiPly6YpcVp+cmbxmn8fxsrMs=)
                          6: p1DQi1u18C75Ohux7URg7YfrGs8.roa (hash: INt16ax1DFlOoo29QJUQDnOPGS2CLSORfkcRk285y/0=)
                          7: xEHBG-sDPVKJ9XXxM6Z9mKuo0U0.roa (hash: G3jD6yODhofSNU3PUJZMmjQCNj42WLMnZ0Laof6Aj28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:7c:07:35:57:38:49:bb:f6:57:db:85:bc:ce:18:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Jun 18 10:00:55 2025 GMT
            Not After : Jun 19 10:00:55 2025 GMT
        Subject: CN=d9df3ade876124f6ce3ac470507d21bc89cb4afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:aa:2c:fe:60:72:71:a5:b5:df:7b:ae:95:
                    00:a3:ef:ae:09:a8:86:d0:d9:53:b4:f4:97:ec:4a:
                    db:c0:a7:cb:82:c1:d0:4c:6f:b2:1d:ad:eb:90:56:
                    ca:4c:92:ab:cf:53:7e:05:c6:f5:ed:c8:16:d3:b5:
                    9c:0d:b5:2c:0d:f0:7a:0e:80:fd:d6:c9:87:81:f3:
                    43:0d:76:ab:47:33:dc:09:dc:d8:6e:70:d7:57:f1:
                    94:ed:2e:53:b7:7d:3f:64:ef:a2:b7:88:96:4b:a0:
                    f4:1b:0c:e8:ea:30:82:62:22:e8:c7:5b:fa:be:cb:
                    e8:76:08:54:c0:6e:6e:65:de:39:a2:bf:ce:b1:89:
                    70:17:e6:db:22:2a:db:45:85:49:77:3e:e3:0f:9c:
                    d2:b0:64:96:1d:b1:74:ff:52:1b:40:aa:2c:28:fb:
                    43:ed:a8:7e:31:74:12:17:a7:07:68:00:eb:b7:d0:
                    a4:b9:1f:15:70:48:27:69:d3:bd:ed:31:4c:39:5e:
                    b1:2f:32:75:64:1f:3d:4c:99:e6:c5:2f:51:2b:ec:
                    a5:3c:69:94:d1:0b:f5:1e:27:7d:79:12:d1:d8:56:
                    ae:e2:6b:fc:cf:a0:a2:e6:bb:29:39:c8:93:62:12:
                    0f:68:cc:26:b4:01:c4:c3:6d:da:57:e2:b0:16:ec:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DF:3A:DE:87:61:24:F6:CE:3A:C4:70:50:7D:21:BC:89:CB:4A:FA
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f9:e5:df:1c:57:de:61:dd:0f:5d:94:ba:24:ee:96:8a:64:
         e6:a4:bc:63:96:83:0d:d9:31:1c:03:00:68:f4:d4:80:cb:54:
         bb:7e:7b:a9:f6:ca:fd:3e:28:2d:e6:24:f4:1f:96:63:43:ca:
         d3:59:39:03:14:dc:e8:6e:96:71:85:28:9c:4d:4b:d0:f1:27:
         3b:91:8c:93:29:53:27:69:f5:ee:7f:df:cd:31:5a:2c:6e:d5:
         de:27:d6:ca:6a:18:01:e1:ba:3a:7f:b7:b9:b8:fa:af:47:6d:
         85:17:52:04:16:fb:dc:c3:a7:42:33:db:26:71:ba:db:3b:e5:
         5a:fd:3d:9a:86:0b:2c:7b:9f:48:44:20:20:05:e2:e1:c0:63:
         88:c1:ed:3a:e5:0a:9b:95:3b:0e:b2:02:09:f8:35:0f:d6:b3:
         7a:ba:14:53:e2:f9:1b:06:a9:3e:aa:d5:78:2f:42:9c:b1:46:
         1c:92:c2:fa:28:32:34:c5:1a:d7:be:93:52:8b:bd:f0:e6:e9:
         21:d5:c3:d4:b9:c6:47:ba:61:24:a5:94:f0:2e:62:28:a5:33:
         a0:a4:b9:99:bf:e9:a3:dd:0f:80:b0:6e:86:09:c9:97:33:89:
         a8:58:bf:d8:82:dd:75:64:91:61:bb:e5:2a:b4:7f:65:a8:a9:
         98:0a:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:54:59 2025 by rpki-client