Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File:                     aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier:          iGjfJIwzr7o7k7S1anezNJG7LFN9q5g4/qMmjIK4xxg=
Subject key identifier:   CD:74:60:8C:F4:C3:39:18:3A:37:1D:1F:B1:6B:72:6E:5F:29:2A:2C
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer:       /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial:       01974A7AC51120AA9F132A83B0EA4432CF3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number:          1510
Signing time:             Sat 07 Jun 2025 13:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:49 +0000
Files and hashes:         1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: JYhjC/4VRoNEUzWI0bSNi/8wHEc9evAxXDN4MQAOj5Y=)
                          2: c3cfCpPele1fDi8UyS3_TO9IOZU.roa (hash: x4G7KBYVMCONibc2Rol9WiF29BGQsdbC/SUMmPlKdpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:c5:11:20:aa:9f:13:2a:83:b0:ea:44:32:cf:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
        Validity
            Not Before: Jun  7 13:00:49 2025 GMT
            Not After : Jun  8 13:00:49 2025 GMT
        Subject: CN=cd74608cf4c339183a371d1fb16b726e5f292a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:93:4b:4d:e5:9a:3d:32:97:b8:a1:40:af:
                    c5:54:e5:ca:ee:71:90:5d:76:f1:d5:87:db:52:08:
                    c8:1b:ab:a1:79:75:62:b2:56:38:66:23:d1:9b:32:
                    d3:4f:56:e5:b9:7a:2f:15:e2:78:0b:5e:cf:39:0a:
                    8e:fe:3e:85:39:c2:b7:77:a5:c1:1b:c8:b3:23:df:
                    7f:26:61:98:57:0a:d8:14:4a:14:98:e3:2e:5c:35:
                    dd:42:6f:78:a7:2c:4a:d9:94:4f:f6:ea:77:37:18:
                    6e:1f:e2:7d:42:06:0c:3f:81:b9:c3:91:80:b4:2d:
                    ba:e9:5a:11:c1:25:84:33:a6:cd:01:46:1e:62:a2:
                    5b:42:7b:50:aa:32:b8:2c:41:d2:e4:f5:cc:e1:3d:
                    fe:1e:32:37:cb:a2:56:a5:c1:24:31:e9:55:67:bf:
                    df:c2:f3:38:45:7b:f4:b6:66:44:b3:af:f5:aa:c2:
                    ba:28:23:c8:6b:01:01:9f:29:fb:0f:4a:00:8a:74:
                    b3:30:c0:d1:59:41:53:25:2b:40:27:7f:ae:e0:68:
                    c5:d3:1b:42:33:1c:48:b0:e4:3f:d7:a3:2f:87:87:
                    31:bf:89:db:4b:77:73:c0:19:95:0c:cd:8f:6a:38:
                    99:c8:31:3f:20:03:5a:02:62:d0:8e:2b:91:23:b6:
                    bd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:74:60:8C:F4:C3:39:18:3A:37:1D:1F:B1:6B:72:6E:5F:29:2A:2C
            X509v3 Authority Key Identifier:
                keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:dc:9e:8e:5f:1b:fa:81:d4:ef:2a:75:88:e4:59:ab:b6:a0:
         06:83:13:89:9d:54:fc:88:61:89:ac:9d:28:3e:a5:0b:b4:f3:
         f2:92:d9:82:2e:f3:da:95:04:e2:e8:c8:28:32:1f:db:6c:23:
         18:86:44:b0:24:f1:bf:d8:66:de:69:b8:01:66:9a:76:20:7c:
         6e:7f:3d:27:26:e1:cd:dd:d4:09:33:13:d9:2a:fb:a2:2d:fd:
         95:1c:e6:22:70:2c:5f:7a:2d:24:67:51:3b:62:0b:f7:0b:e5:
         de:2b:e7:15:1d:69:39:13:7b:d9:58:09:36:bb:b4:ef:36:51:
         3f:1f:d4:58:8c:d1:73:53:5b:b6:67:16:79:93:e4:5f:06:b0:
         07:5e:69:45:17:bb:89:fb:81:99:7f:2d:5e:c6:a5:b8:e1:2f:
         93:1a:c3:65:b2:3a:88:34:0d:de:4d:3e:2d:3d:d8:32:83:5c:
         41:9d:f7:8e:08:6c:df:14:0a:7d:2e:8f:60:fc:7c:35:72:97:
         5e:28:ae:4f:a5:07:a2:f4:72:b3:83:51:e2:13:3c:bd:66:31:
         a5:93:da:2f:cd:aa:49:4e:a8:99:ff:5e:fc:ca:f2:88:7d:09:
         77:4b:d6:9c:a9:85:12:d2:3f:c1:b8:a2:ab:6e:ca:bc:b0:38:
         e3:89:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:17 2025 by rpki-client