Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File:                     A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier:          T60qTeMISf4zsekcKE4AgBs90SIzgmhGVPmYlZCqLhU=
Subject key identifier:   CE:F9:C8:6F:45:64:82:53:FB:28:0B:7A:70:FA:BC:CF:B2:5C:A9:C7
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer:       /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial:       01975DCB471F7170F2293B655280F5F4B7BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number:          0665
Signing time:             Wed 11 Jun 2025 07:01:32 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:32 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:32 +0000
Files and hashes:         1: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: 4SYRHot5XabodaRxDPtdZp4I9eKW5fdyAQyeXwVlFIc=)
                          2: lKpyDy3PB0VVOKumldUJ5R7DcrY.roa (hash: bAnBEKlnNSPWwWtu1bOB6beqo4iFn6Nt2CccoFRqSNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:cb:47:1f:71:70:f2:29:3b:65:52:80:f5:f4:b7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
        Validity
            Not Before: Jun 11 07:01:32 2025 GMT
            Not After : Jun 12 07:01:32 2025 GMT
        Subject: CN=cef9c86f45648253fb280b7a70fabccfb25ca9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:f9:45:2f:22:7f:51:d7:38:28:02:86:0c:
                    37:af:86:ee:2e:7b:ed:9e:21:a7:ca:df:91:ea:9c:
                    c6:14:69:c8:1d:59:89:72:c1:dc:3c:7b:bc:38:85:
                    57:2b:fa:d3:b2:c7:f3:5f:af:0d:43:48:a5:47:00:
                    72:ab:32:0c:20:dd:25:4c:d4:09:07:c1:d5:d4:bb:
                    a9:55:84:24:f5:67:16:2c:27:bd:d3:85:c8:9d:80:
                    4f:8c:79:9f:7e:64:69:3f:93:8d:ad:db:04:56:89:
                    9b:3e:ca:7b:2b:af:0b:35:4e:e8:4e:0b:1f:d4:b0:
                    e9:3f:86:91:7a:8b:34:80:9e:21:7e:ab:02:a7:d0:
                    6d:58:3d:fe:96:13:60:a1:d3:13:43:5b:b1:15:5b:
                    86:2e:ea:63:39:2a:41:d7:55:bb:a1:12:f5:4c:e4:
                    bc:04:19:71:c6:8d:3d:3a:ac:15:e4:a8:62:73:16:
                    ae:77:84:ee:8a:e1:b8:4b:5b:a6:02:ab:25:be:da:
                    ed:62:65:1b:78:12:bd:ff:77:ac:1c:b6:4a:55:21:
                    3e:86:a7:e5:70:81:ea:60:8d:9f:a5:71:ac:a6:3c:
                    54:9a:2a:ad:19:6e:9d:02:69:1e:6d:aa:ff:e0:bc:
                    3c:17:9b:0d:20:5f:c6:f0:59:ed:c9:55:4a:e0:8a:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F9:C8:6F:45:64:82:53:FB:28:0B:7A:70:FA:BC:CF:B2:5C:A9:C7
            X509v3 Authority Key Identifier:
                keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8c:02:a7:df:6c:67:3e:5e:ba:d5:a7:2c:02:22:6d:c2:db:
         a2:10:fd:4f:73:9f:8c:2c:47:c5:14:ec:c0:8b:e0:e1:9d:e9:
         de:bf:af:7c:43:8b:0a:82:f8:dd:ab:2d:aa:3f:fd:df:53:f5:
         27:a7:d4:54:64:3c:58:b5:4b:54:01:4f:bb:81:a0:b3:13:67:
         b2:64:57:89:69:fa:c4:cb:6a:a2:a6:dc:aa:06:23:43:6e:ba:
         b9:90:5e:e2:05:26:01:8f:4d:cc:c0:38:fd:a4:df:37:a8:c5:
         c1:82:0d:f4:39:be:2c:66:c9:41:3b:f5:d9:a9:a7:c9:f0:33:
         29:55:97:5c:8b:7d:bb:6c:6e:40:41:47:fc:47:32:ed:d1:80:
         fa:d4:34:97:9c:28:53:f8:37:bd:bc:7d:b0:08:ff:be:22:7e:
         57:82:d6:54:27:b8:9f:84:ea:b4:3d:ad:f9:0b:2d:85:85:62:
         de:87:ec:c7:19:b3:1b:62:85:ba:1f:99:2b:aa:7f:61:90:f5:
         32:aa:8f:fc:2e:55:42:63:5c:55:1b:fe:80:83:b3:83:1d:d5:
         c0:3e:72:30:63:44:4f:4e:77:25:6c:5e:71:28:f4:8a:f2:54:
         6a:62:2f:78:50:d7:64:73:c1:5c:ed:e8:84:25:3e:9f:99:9e:
         d5:d4:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:29:13 2025 by rpki-client