Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File:                     aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier:          6XEDHvdSD3yqC5y/yaLVrAtlc5gLVK2fw9hf6bwT688=
Subject key identifier:   CB:71:AC:D3:64:1D:1E:94:4A:32:7E:D0:DE:BE:0C:E3:66:9B:AA:46
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer:       /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial:       01976884E339D5A920946551C2B3FDBE0DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number:          1388
Signing time:             Fri 13 Jun 2025 09:00:28 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:28 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:28 +0000
Files and hashes:         1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: S2h2rgbxNkSxsEIDh+NTLEX6pGBJhUc0nxJiWwHad58=)
                          2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:e3:39:d5:a9:20:94:65:51:c2:b3:fd:be:0d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
        Validity
            Not Before: Jun 13 09:00:28 2025 GMT
            Not After : Jun 14 09:00:28 2025 GMT
        Subject: CN=cb71acd3641d1e944a327ed0debe0ce3669baa46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:f2:72:bc:49:b5:ee:f6:da:8e:c0:3c:61:
                    31:e6:2c:12:bd:f0:c3:38:fa:c4:b8:03:73:2e:17:
                    d6:ca:0a:21:f8:cf:17:fb:69:a1:7b:f0:fe:9d:51:
                    ee:6a:a9:3b:71:1f:10:b3:68:c2:93:8d:aa:5e:22:
                    84:8d:7a:4a:22:23:1c:ec:69:d6:f6:ab:d8:42:21:
                    c7:bb:c1:69:71:dd:13:6a:45:fd:c3:74:67:29:10:
                    bf:00:94:0b:ab:9b:17:35:e9:52:1d:5a:8c:22:27:
                    a2:ff:44:00:0a:dd:f7:ce:01:ec:44:9e:48:90:59:
                    ac:df:5a:29:30:bd:84:93:31:b9:b2:5c:da:fe:df:
                    52:37:24:23:3e:9a:ed:6e:29:f3:90:ed:0c:44:1e:
                    99:f9:47:35:9d:48:4c:ef:be:3b:62:98:f3:04:75:
                    4d:b8:98:11:5c:f5:a4:cc:13:63:f3:7c:0a:6b:9b:
                    74:8e:ec:58:21:eb:9c:d5:4d:c9:4a:fa:0f:34:4c:
                    e5:05:de:d2:04:27:96:95:f2:c2:94:8f:2b:9b:a6:
                    49:bc:62:b7:e4:a0:c5:91:be:a3:88:84:b0:e7:0f:
                    a8:68:4d:38:d9:cf:e8:dd:03:b6:3c:3b:48:30:b3:
                    06:ff:48:e3:cd:f5:30:28:20:c6:44:da:0c:59:55:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:71:AC:D3:64:1D:1E:94:4A:32:7E:D0:DE:BE:0C:E3:66:9B:AA:46
            X509v3 Authority Key Identifier:
                keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:be:ff:cd:ae:75:8b:35:61:50:30:32:ac:ea:a5:7c:9a:07:
         cf:47:a3:bf:fb:83:e0:1d:ea:d0:e1:22:18:8f:ac:9a:1e:8f:
         2e:42:aa:00:54:31:8e:6a:d8:87:4a:22:12:1f:b6:a2:fd:4c:
         f6:2c:7c:c6:02:7b:0f:6c:13:17:cd:bc:bd:8f:30:25:01:3a:
         ea:a4:72:aa:4c:c4:d1:11:b8:5d:03:a0:33:89:6e:45:34:bb:
         c6:6f:52:57:99:fb:06:73:b2:d0:c1:e6:ff:1b:fe:28:2a:cf:
         46:44:ac:30:f8:9b:66:14:62:ea:bf:d4:9f:26:ca:2b:ae:3e:
         60:83:33:97:8f:9c:0d:47:7f:69:7e:55:f0:d2:67:16:25:f8:
         4e:df:a0:23:5e:13:ac:8c:65:38:30:a6:8e:1b:fe:43:fa:8d:
         13:55:f5:5a:44:09:1b:9f:41:86:8a:e0:26:bc:00:76:af:5e:
         f0:21:27:f8:a2:94:f1:6c:4c:8f:a2:b2:6c:d9:d5:55:a6:f6:
         70:ba:c1:1f:a6:24:33:88:56:67:0f:9c:0b:f2:bb:dc:af:d6:
         21:9a:5a:45:29:3a:eb:93:59:5c:74:e8:69:3c:94:26:f7:18:
         e7:88:ec:08:4c:7d:4f:5c:f5:fb:c5:ff:b5:44:db:9a:f6:1f:
         84:78:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:44:52 2025 by rpki-client