Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          PN4/nJkBIK8u9V5qL78UOZpeOuAWY0EjV0Npdd0CT/A=
Subject key identifier:   46:C7:CF:38:29:C8:23:F2:82:B8:7C:C5:3F:71:1C:4C:ED:54:26:25
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       019770ACA34861777590B08710CB4BD97EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          15AE
Signing time:             Sat 14 Jun 2025 23:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:51 +0000
Files and hashes:         1: A-CITLCzJtdw39wtm0dLTltUEFM.roa (hash: c5iWUzoFE3kjILTe2m5OWQi3zSByNEE2KpMzxgoNxeI=)
                          2: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: LpPp/ro8E+1DrzJTzHf/CZBvsI/KVo7GmSPCsrXZiTY=)
                          3: VZ0QTQOqbhBZXRpRcK6PrfGjqXA.roa (hash: qUqfQH6HkkXqxIuCFL1oijtckoAAoRaIonlYxeFElKw=)
                          4: f-Juu6-6GY6L6jxX6W7h7A1eHrk.roa (hash: ZfWB0QSC1JhyWEDFyE7CZ6ZmAqPQnN6XecILZVAnstM=)
                          5: kh5T0eGIG6pki0AMnhy0w9eCTLQ.roa (hash: SgO20AkeVjqIkes5Gz4s0ZXBoQPcPhpf8s/VjNKSJAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:a3:48:61:77:75:90:b0:87:10:cb:4b:d9:7e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Jun 14 23:00:51 2025 GMT
            Not After : Jun 15 23:00:51 2025 GMT
        Subject: CN=46c7cf3829c823f282b87cc53f711c4ced542625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:1d:b3:be:b6:b8:7d:39:2a:f9:67:7f:fa:
                    43:9b:20:9e:fa:6e:37:22:e3:d2:41:ba:47:cd:2d:
                    ce:52:d4:20:db:9f:83:97:88:fc:ca:0c:6e:9c:03:
                    8d:b9:ca:f6:ed:ec:ab:7c:11:af:a3:23:c0:a0:df:
                    32:75:7f:15:95:ee:c6:68:02:8c:29:67:36:cd:e5:
                    6b:73:11:98:82:11:aa:c0:5d:eb:e4:f3:ff:7f:67:
                    03:8a:a1:26:c1:10:05:38:98:17:6e:9e:bc:f7:4b:
                    47:ee:cf:ec:57:5e:91:5b:99:f1:3a:49:be:b5:0c:
                    cf:56:12:18:ba:cd:c9:36:46:d1:46:42:95:f0:64:
                    ab:f8:b7:e9:a6:28:02:60:fb:25:66:ae:27:8b:13:
                    03:29:18:90:88:b1:28:a5:83:ce:22:da:62:e2:88:
                    55:41:ea:8e:62:3a:81:ed:16:dc:2d:25:89:0e:81:
                    b9:30:ad:ac:ef:68:89:b6:82:2e:71:00:c1:aa:d8:
                    25:24:ab:1a:81:b5:c0:6f:ac:c1:1a:6b:52:81:ab:
                    f1:4b:05:eb:b2:f0:e4:aa:33:7d:a6:df:e5:5f:bf:
                    12:5f:e3:11:da:77:12:f9:04:d4:24:a7:17:a2:2b:
                    03:2b:0d:18:e7:e9:fd:aa:26:29:81:fd:e3:8d:77:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C7:CF:38:29:C8:23:F2:82:B8:7C:C5:3F:71:1C:4C:ED:54:26:25
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:e6:88:cf:e3:e1:4f:3a:16:1d:38:b3:ed:ad:1a:1c:3f:36:
         91:1b:68:64:a8:55:d9:9f:05:eb:86:e9:d0:92:99:8a:d9:2d:
         b2:06:20:9b:c4:05:3c:19:37:cf:83:37:c4:01:2a:da:d5:d5:
         30:d2:89:e7:cb:62:3e:82:17:a6:9d:b2:99:99:10:70:32:08:
         ee:a9:1f:2c:ae:e1:6d:e8:ee:9f:a2:8c:c3:d8:43:03:3d:0e:
         0d:ac:7c:de:b4:81:23:dd:4f:05:de:70:2b:72:50:f5:22:a5:
         8a:21:0b:e9:79:6e:1f:fe:46:a3:4b:02:88:52:e9:eb:d7:8b:
         58:29:04:a0:f5:fa:7e:ba:31:34:de:ab:ae:05:43:e8:53:59:
         32:44:4d:84:6a:67:b4:16:b1:15:30:a6:c1:69:02:5c:50:8a:
         28:91:17:39:e3:b6:99:fa:25:1f:22:a9:68:67:33:20:5e:27:
         c2:22:31:93:77:7f:eb:c9:28:9a:93:58:c8:e7:84:02:c7:e4:
         bd:d1:44:4e:2e:4d:87:d1:93:bc:d0:97:04:76:b5:19:e6:3d:
         96:f4:8f:91:55:e7:19:f7:e9:1e:f9:6c:a9:54:34:f8:7a:e0:
         5b:3e:b0:af:10:2a:75:3b:19:7a:f2:a5:83:90:2c:9a:7e:cf:
         92:db:44:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:09:59 2025 by rpki-client