Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File:                     AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier:          LAh5Q74thZAKzN7oEk6pY6r3592ouey5EatUowyaGkI=
Subject key identifier:   EA:A8:C3:53:28:A8:D5:4B:97:A1:DB:77:DD:FC:9B:3C:6E:4C:67:08
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer:       /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial:       0197469E76C36F845BEDDE365634CE66324E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number:          0E3C
Signing time:             Fri 06 Jun 2025 19:01:19 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:19 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:19 +0000
Files and hashes:         1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: LQF1yxJYJs02i4wNLylM6dTD8SeeTkTg1GBBK7wRgw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:76:c3:6f:84:5b:ed:de:36:56:34:ce:66:32:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
        Validity
            Not Before: Jun  6 19:01:19 2025 GMT
            Not After : Jun  7 19:01:19 2025 GMT
        Subject: CN=eaa8c35328a8d54b97a1db77ddfc9b3c6e4c6708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:28:a3:26:12:97:8c:26:a5:9d:e6:61:fa:
                    26:39:94:bc:94:80:f7:42:d0:13:37:44:b9:d2:f6:
                    12:0b:f7:1b:8d:ef:f4:d7:62:a5:f5:5e:f0:83:53:
                    e8:2f:d2:cc:93:2e:e7:ad:3e:ee:59:56:ed:64:21:
                    17:85:49:2b:84:7c:c2:04:e0:98:2e:a5:89:60:c6:
                    b7:61:73:9a:e3:c8:59:09:46:84:dd:08:f5:cf:de:
                    28:7d:b2:1b:40:54:86:69:fa:b4:5b:5c:b5:6a:d8:
                    87:8d:8b:f6:f8:6b:c6:d2:0e:75:f7:74:e7:42:11:
                    ef:d9:00:bb:a6:08:08:01:05:f5:e0:7d:c9:64:b9:
                    07:2c:a6:21:10:b4:68:d1:8c:63:00:7c:e2:b9:9c:
                    f4:c4:4f:36:d4:56:bc:ef:3b:c3:40:11:14:5a:c5:
                    57:6c:f0:ce:9d:61:25:51:9f:40:fe:7d:d2:1e:05:
                    29:c5:36:66:0a:81:4e:4d:90:4d:01:70:c0:16:14:
                    c0:52:c8:26:7b:79:37:2d:25:92:62:82:85:d6:44:
                    fc:bb:ca:75:ab:69:0c:8d:62:11:93:5e:62:a5:53:
                    66:ce:9a:f0:59:c4:da:76:73:7e:99:ca:31:43:c2:
                    3b:04:66:5a:71:2d:8f:67:b4:f6:79:48:38:cd:f9:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A8:C3:53:28:A8:D5:4B:97:A1:DB:77:DD:FC:9B:3C:6E:4C:67:08
            X509v3 Authority Key Identifier:
                keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:3b:b5:18:de:f2:d9:f4:fe:ad:30:0f:ff:7f:ee:85:64:
         15:e9:55:1c:dd:6c:86:e8:25:0c:be:ec:6d:ea:da:ef:8b:50:
         42:6a:69:6c:58:33:ca:e2:df:18:09:d5:86:61:1c:b1:8d:62:
         cc:a6:b8:d9:f7:aa:44:99:32:f8:1d:c6:1a:69:f6:9b:8f:2f:
         9c:ef:ff:f7:a3:bd:00:bd:68:ae:83:64:dd:af:bc:08:71:b4:
         f7:b6:a5:4a:5b:86:d0:22:5d:ef:60:00:4d:a9:cb:d4:40:05:
         59:f8:64:8d:8a:2c:ef:1c:08:1a:db:29:73:3d:d6:c2:ff:6e:
         9e:b7:53:4b:c0:be:e3:5b:a4:45:a9:c6:d0:3d:30:1a:c4:04:
         8c:10:6e:df:e8:7b:16:c3:b9:80:d8:61:d3:7f:35:6d:7c:d6:
         6e:ca:eb:57:e8:cb:74:9b:f6:a3:bd:7b:ed:89:b6:f7:cc:b9:
         a8:cc:8b:66:88:90:03:ac:57:a3:98:ed:e2:c9:5e:cb:2e:aa:
         21:df:79:1d:7c:a6:20:64:c5:be:10:e7:45:4c:e7:1d:21:e7:
         f5:4e:89:09:74:e7:9c:9f:49:76:52:5b:e1:c6:c6:a4:97:88:
         2e:8e:08:37:8a:71:fd:74:27:aa:2c:da:b5:83:d8:97:bc:8d:
         9c:39:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:28 2025 by rpki-client