Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
File:                     EU05B6zlGbJF_rzuMsO3rUk7KGw.mft (raw, json)
Hash identifier:          K8p0tKo/fTH2NXkw87SJy2WuVdW4Pdk/tFHlKY4KjNU=
Subject key identifier:   41:C4:66:DE:12:2C:16:16:80:ED:5D:0D:7A:F6:07:C2:0B:87:81:8A
Authority key identifier: 11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
Certificate issuer:       /CN=114d3907ace519b245febcee32c3b7ad493b286c
Certificate serial:       019684DA965B754E6764BA6A89D54D036B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
Manifest number:          0358
Signing time:             Wed 30 Apr 2025 04:00:39 +0000
Manifest this update:     Wed 30 Apr 2025 04:00:39 +0000
Manifest next update:     Thu 01 May 2025 04:00:39 +0000
Files and hashes:         1: EU05B6zlGbJF_rzuMsO3rUk7KGw.crl (hash: UyFziKCPwWIDoDtUAhekDeGJLf0+Rxe1yzFnjEsnNRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:da:96:5b:75:4e:67:64:ba:6a:89:d5:4d:03:6b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114d3907ace519b245febcee32c3b7ad493b286c
        Validity
            Not Before: Apr 30 04:00:39 2025 GMT
            Not After : May  1 04:00:39 2025 GMT
        Subject: CN=41c466de122c161680ed5d0d7af607c20b87818a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:c9:fd:1c:13:60:0c:73:7a:ce:fa:ea:96:
                    4c:ad:eb:1d:c5:92:e8:30:d6:2e:fb:76:52:ee:68:
                    c4:ef:98:c5:68:cf:fb:62:0e:d1:a0:a7:ba:ac:4c:
                    bc:63:f9:77:67:ab:72:52:5b:06:28:52:74:26:9a:
                    a9:df:a4:33:89:47:e7:a4:b3:85:0f:ac:f1:5a:8f:
                    15:15:25:4d:8c:30:75:6a:70:2f:b5:74:35:f8:92:
                    ff:8c:45:be:bb:36:b5:cf:0b:29:3a:ae:dc:b5:0f:
                    8a:b0:b8:0d:e0:ff:b8:a8:18:22:17:6a:c9:2b:f7:
                    4c:68:37:4b:64:0c:77:11:5c:e9:e8:24:29:7a:a1:
                    f0:58:98:cd:36:ce:03:81:8e:cd:87:ee:57:81:d1:
                    eb:e5:bc:7d:f3:cc:bf:c1:be:fa:bd:83:39:ca:d8:
                    40:18:76:4e:3d:ac:4a:bd:fe:57:49:fa:78:f7:8f:
                    2a:f1:34:9d:6d:f9:3f:db:56:93:89:2b:0d:c7:3b:
                    76:f8:d6:63:d3:82:d5:bf:f6:21:59:c5:b3:0f:ca:
                    fa:f9:1d:15:a9:68:2b:c8:1e:e0:0c:70:e8:f6:81:
                    5e:8a:61:c3:17:56:f0:c9:b7:66:21:f0:82:f7:21:
                    e5:9a:c3:fa:76:a4:1e:4b:74:11:a6:68:da:dd:81:
                    b2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C4:66:DE:12:2C:16:16:80:ED:5D:0D:7A:F6:07:C2:0B:87:81:8A
            X509v3 Authority Key Identifier:
                keyid:11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:cd:3e:fe:ac:f2:ce:63:56:e4:ed:f7:7e:38:78:3b:86:c9:
         21:43:d7:da:8e:a9:ea:78:b4:16:ef:63:1e:b3:06:ec:72:d7:
         69:63:b2:ce:b6:87:bb:cc:b8:59:a3:67:f1:99:65:d2:d2:37:
         af:33:d4:aa:ad:7d:7f:ec:d2:0e:30:2e:32:22:a5:17:9b:f8:
         37:0d:66:9d:31:7d:be:51:41:56:87:ed:38:31:6d:5e:66:94:
         e2:37:4b:e8:3d:32:e8:94:3b:51:ba:fb:00:92:83:41:e6:0d:
         cd:be:c5:93:bb:ba:d2:20:28:cc:e3:2e:27:a6:d3:fd:f9:e9:
         fd:0e:36:1f:89:79:b0:6b:4d:d8:1c:25:3c:b4:62:81:f8:0b:
         9b:1d:da:dc:9b:af:03:35:83:48:9a:ba:af:42:6c:f9:fc:f3:
         49:7e:e0:be:9d:df:1c:17:64:48:5e:72:58:95:8d:68:63:e5:
         81:19:95:bd:fe:08:be:4d:62:9c:53:9a:e5:70:95:27:3f:2d:
         50:f4:0b:15:67:bf:b9:f5:b3:56:72:b5:ff:ca:ee:f9:be:9e:
         23:3c:e1:ed:52:88:4a:b2:82:3c:23:89:45:d3:e1:5e:48:6b:
         c3:2e:cd:ff:03:c3:f4:36:91:71:5c:3b:f1:ce:e2:04:10:da:
         bb:d0:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:48:17 2025 by rpki-client