Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
File:                     ABPKmgrnGxDSnboMs-yrXxDfUXk.mft (raw, json)
Hash identifier:          yDEPNLQ/TGjIV6XnIrkAajn1fwvkh+9rpQqgzxyfhZE=
Subject key identifier:   82:3F:08:7B:18:AE:1C:02:6A:65:76:F2:84:39:60:2B:E2:6D:BA:24
Authority key identifier: 00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79
Certificate issuer:       /CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
Certificate serial:       01974A7B82B5BE1B55F14698F70D57BEA570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
Manifest number:          0C58
Signing time:             Sat 07 Jun 2025 13:01:37 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:37 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:37 +0000
Files and hashes:         1: ABPKmgrnGxDSnboMs-yrXxDfUXk.crl (hash: MwXOnRnlIgP9vskqGM6weBLvn/SpE7vvIr2SQZvxzC8=)
                          2: KOmHsYTT8dHL3QRmpI2yEaWq1H0.roa (hash: lw5VEiyghZjGPBV+Cuu9js4RXnD7F0lqD5TiyyWbpk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:82:b5:be:1b:55:f1:46:98:f7:0d:57:be:a5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0013ca9a0ae71b10d29dba0cb3ecab5f10df5179
        Validity
            Not Before: Jun  7 13:01:37 2025 GMT
            Not After : Jun  8 13:01:37 2025 GMT
        Subject: CN=823f087b18ae1c026a6576f28439602be26dba24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:28:c7:73:4d:5b:27:6d:45:b3:da:ce:06:
                    f0:51:19:d6:9d:00:03:be:6e:cc:52:b8:27:84:49:
                    ef:b8:32:98:08:89:ba:e7:23:9c:39:09:b9:d4:bf:
                    e0:00:6d:5a:f4:94:ce:e1:b6:36:07:81:11:72:dd:
                    04:f3:19:a9:da:09:a1:4e:cd:61:7f:a5:9f:25:01:
                    59:b9:e2:fa:b8:f9:3e:cc:90:4b:dc:07:25:7e:17:
                    fa:84:4c:21:f3:b3:76:74:fd:c0:50:0d:69:4e:1a:
                    fd:e8:d6:01:4b:03:ed:82:73:54:cd:8b:5c:da:31:
                    48:a5:9f:65:7a:ca:43:bd:26:7b:ec:e8:34:7d:58:
                    c5:58:0f:84:6d:67:45:8f:a1:b1:62:e3:ce:4c:d3:
                    48:fa:c4:a5:01:60:16:66:91:56:7e:0a:9d:ab:72:
                    71:3f:75:67:f1:32:13:17:f4:4b:ca:36:b9:90:d5:
                    cd:5a:a9:4f:30:ed:c4:2e:e9:31:73:21:a1:34:00:
                    e4:84:86:4c:a6:1b:44:be:3f:0b:52:79:17:30:45:
                    bb:82:18:56:d7:ff:92:5e:e6:66:22:f2:b2:f0:e2:
                    c7:6f:45:47:71:69:9e:02:c0:ba:7d:89:ac:7e:b0:
                    70:7c:20:b9:5c:bc:b0:b7:5a:2c:1f:36:40:59:cf:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3F:08:7B:18:AE:1C:02:6A:65:76:F2:84:39:60:2B:E2:6D:BA:24
            X509v3 Authority Key Identifier:
                keyid:00:13:CA:9A:0A:E7:1B:10:D2:9D:BA:0C:B3:EC:AB:5F:10:DF:51:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABPKmgrnGxDSnboMs-yrXxDfUXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/7bdafb-4951-43b3-aef0-b5438b92c99b/1/ABPKmgrnGxDSnboMs-yrXxDfUXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:6c:0e:68:80:42:58:3a:34:32:71:e9:b7:b5:2e:95:e2:
         fd:70:20:9a:e5:56:08:0f:12:22:c3:b7:d4:81:61:15:13:b3:
         a0:b8:53:15:10:b1:bd:a9:dd:59:06:28:60:d4:f8:e8:58:d1:
         8a:03:cc:e0:4d:ab:c3:c3:41:b5:74:ac:78:5b:32:fd:e0:4b:
         9a:53:e4:30:67:1d:3a:74:2b:8c:1e:35:44:4f:af:0f:c7:12:
         5b:b3:d3:74:df:a1:72:ec:a0:a0:d5:85:74:6d:ae:29:34:ca:
         e3:7e:32:a8:f4:02:f9:3b:c6:d1:39:76:bd:ba:84:bb:cd:3b:
         a6:9a:27:c5:38:92:fa:b2:eb:cf:e8:a0:ac:69:4c:28:27:28:
         bf:f4:fd:4a:92:32:f1:a2:e2:9e:ce:0a:b1:49:53:e1:92:e2:
         1d:b7:e5:07:4c:a5:b9:55:9b:1e:dd:18:9f:40:6b:64:ff:fe:
         1c:ca:96:db:62:32:f0:78:32:fc:bb:f6:71:ed:93:0a:8e:e6:
         15:4a:57:09:31:d7:f8:9b:77:d4:36:bd:d2:ee:41:04:2d:21:
         01:62:e2:e4:33:e0:60:17:5a:7d:63:71:48:fb:f2:80:46:8a:
         cf:64:3d:4d:e7:dd:a3:95:ae:71:15:28:75:b4:c3:b3:1f:5c:
         df:10:fd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:36:19 2025 by rpki-client