Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
File:                     1-10-EU-84s8PkgQxxWp8c9_aWn4.mft (raw, json)
Hash identifier:          r+m5yZ+3gEuJd5xUmWlmUvQvUBmqVaEPatZZZlm4G/c=
Subject key identifier:   76:73:F0:08:03:8C:69:19:08:FC:4E:21:15:DD:B0:24:49:5D:F9:06
Authority key identifier: FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E
Certificate issuer:       /CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
Certificate serial:       0197786605BB79776B75AA6D37CEE35D0072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
Manifest number:          0476
Signing time:             Mon 16 Jun 2025 11:00:41 +0000
Manifest this update:     Mon 16 Jun 2025 11:00:41 +0000
Manifest next update:     Tue 17 Jun 2025 11:00:41 +0000
Files and hashes:         1: 1-10-EU-84s8PkgQxxWp8c9_aWn4.crl (hash: pDofwe+/TdUslYUhia4gZygOkxiMC68HVB9OC2Ofxfs=)
                          2: cH_DJKgBmzslket3VUx6YX5cgVY.roa (hash: uLbc4oJP9W2SYmp+K5RveZ5JkK6djDmntWnr1BfZmrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:66:05:bb:79:77:6b:75:aa:6d:37:ce:e3:5d:00:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5d3e114fbce2cf0f920431c56a7c73dfda5a7e
        Validity
            Not Before: Jun 16 11:00:41 2025 GMT
            Not After : Jun 17 11:00:41 2025 GMT
        Subject: CN=7673f008038c691908fc4e2115ddb024495df906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:c0:cb:6a:79:8c:f9:82:77:c4:7b:a6:b7:
                    72:dc:14:f1:af:05:d2:a4:c2:0f:0b:fe:01:49:09:
                    23:34:ac:df:21:63:24:53:7d:82:5c:ca:ee:56:08:
                    af:3a:22:07:16:b1:72:2d:2b:79:85:0b:ed:e3:40:
                    6e:96:b1:9c:ae:54:cb:4b:bc:95:e2:e3:cb:45:a4:
                    40:88:71:15:90:5b:5a:11:98:e7:0d:4d:32:08:85:
                    3c:1d:2c:37:91:28:b7:a1:6d:ef:2b:d6:67:8e:7f:
                    3f:47:f7:26:7f:62:26:bf:36:fb:3d:99:04:09:5e:
                    8c:9d:66:a4:5e:14:77:5c:25:9d:8b:69:68:a5:9e:
                    89:72:b5:8f:bd:03:09:b3:af:2e:a1:0c:3d:f7:f7:
                    88:d2:e8:bc:4f:85:d0:8d:6d:e4:2d:8f:42:6f:8b:
                    98:73:6e:f6:ee:2b:7e:88:5e:da:c6:1b:eb:ec:ff:
                    58:b0:16:11:73:5c:23:86:7a:05:29:1a:2f:4f:99:
                    41:ce:1d:a6:73:7d:c4:52:64:f6:02:9d:44:1c:6d:
                    2e:f7:8f:0f:fb:56:f7:e1:3e:26:09:2f:ba:ae:8e:
                    0b:15:47:84:25:d2:93:26:ed:96:2c:0a:75:1f:ec:
                    4c:6d:32:32:16:67:e7:ff:d9:f7:cb:4d:2c:52:64:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:73:F0:08:03:8C:69:19:08:FC:4E:21:15:DD:B0:24:49:5D:F9:06
            X509v3 Authority Key Identifier:
                keyid:FB:5D:3E:11:4F:BC:E2:CF:0F:92:04:31:C5:6A:7C:73:DF:DA:5A:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-10-EU-84s8PkgQxxWp8c9_aWn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e70d98-426e-46fe-afaf-82139f3b433c/1/1-10-EU-84s8PkgQxxWp8c9_aWn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:98:88:80:e6:d9:c2:67:54:ba:f4:75:7c:51:41:e6:87:63:
         7c:9e:1e:45:96:88:55:64:c6:c4:4a:4a:b6:aa:3c:0e:1e:43:
         6a:2d:7a:c1:d7:fb:d2:df:41:24:d3:30:79:e8:5d:93:77:e5:
         41:f5:48:d5:4d:3b:a5:5a:c6:73:50:75:1c:95:a8:26:65:2b:
         85:96:50:cd:8e:75:23:fd:0d:c0:e8:be:ff:ed:ce:9c:28:9c:
         da:2e:d0:0a:c0:2d:10:96:c8:71:b6:9b:28:5d:64:24:fe:08:
         40:32:d6:6c:2c:e8:9c:f9:19:69:88:c8:44:ad:4d:1f:5a:60:
         66:ad:ae:26:12:18:6e:2c:fa:ef:02:9b:54:dc:c5:e8:43:89:
         a8:d2:e1:91:2f:56:50:90:df:73:0c:b5:74:a9:3d:97:fc:3d:
         5a:0f:c9:64:8e:a9:10:b0:04:42:41:7a:a8:bd:c0:7b:2b:df:
         6b:a6:09:38:b7:15:3c:e8:5d:26:55:0f:22:ff:d9:b3:14:40:
         fc:b9:5f:b8:92:e1:7e:84:91:5f:32:f0:4f:8c:9f:75:72:c6:
         eb:86:18:9b:65:22:d7:28:fa:0a:04:41:6c:c4:23:35:f9:02:
         2c:30:41:cc:a0:eb:e4:14:a2:9d:94:2a:50:e3:a9:a6:09:be:
         e8:7e:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:24:04 2025 by rpki-client