Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
File:                     apwfqpeD36srelPaP7D970zP6uU.mft (raw, json)
Hash identifier:          rTfJmDBtfG5oejjj7LPbd7grItqnSnYM36MFFsxZiis=
Subject key identifier:   4F:81:D9:EF:A9:66:FB:75:4E:18:E3:1A:01:67:36:8F:53:F6:0D:63
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Certificate issuer:       /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial:       01974D0E1C2DCAA65C3B86C51B95BB941642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
Manifest number:          94
Signing time:             Sun 08 Jun 2025 01:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:59 +0000
Files and hashes:         1: apwfqpeD36srelPaP7D970zP6uU.crl (hash: DwMrz5HKdibOtVlbMxgGdkfHyh0o5mmuWL+RtShP7U0=)
                          2: tIh3EbNG8PyhR2bhdKGu98lXfi0.roa (hash: WvckFFiPzlkbuyQKqzi40xspGv9L4xehhqGGvB5LMXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:1c:2d:ca:a6:5c:3b:86:c5:1b:95:bb:94:16:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
        Validity
            Not Before: Jun  8 01:00:59 2025 GMT
            Not After : Jun  9 01:00:59 2025 GMT
        Subject: CN=4f81d9efa966fb754e18e31a0167368f53f60d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:1a:1f:b8:23:2d:6a:f7:78:4c:e3:3d:ed:
                    b1:a6:6d:78:75:f0:4f:e2:6b:98:01:ab:56:fb:5b:
                    57:7e:e9:8e:83:95:fa:93:39:8c:21:6a:1a:77:ee:
                    f3:b7:a3:bf:d6:56:da:8b:16:ea:95:78:ea:3a:b6:
                    ba:05:bb:28:3d:d7:18:ac:78:10:36:ab:0c:96:74:
                    cb:8c:80:18:0f:7a:d7:16:90:46:c6:a9:a9:4f:11:
                    a6:89:e2:1f:38:a8:20:20:2d:96:39:9c:ba:ae:54:
                    96:67:c3:eb:fe:19:1f:6d:5e:55:e6:c2:27:20:70:
                    8b:c6:ab:d6:cc:0d:aa:88:d8:2f:39:9b:5d:56:eb:
                    ab:dc:b8:a4:27:ef:07:23:10:2c:f7:91:26:5f:77:
                    82:00:0a:59:1f:84:a9:8d:ca:1d:c2:b5:5c:65:4c:
                    70:51:ac:5b:58:05:e4:46:6a:e0:6a:b0:70:cf:62:
                    d6:09:b9:13:77:82:77:f1:c7:2f:79:6e:83:1b:59:
                    d6:ee:86:94:8f:53:25:0e:09:78:21:8c:9f:c4:1b:
                    2a:bb:c9:b2:4a:cd:cd:e1:4d:ae:19:02:8c:02:88:
                    b6:9d:b2:97:10:88:f4:aa:c4:2a:da:e0:99:91:21:
                    82:ce:ff:46:28:3a:5c:ad:2a:83:a3:b9:88:b7:06:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:81:D9:EF:A9:66:FB:75:4E:18:E3:1A:01:67:36:8F:53:F6:0D:63
            X509v3 Authority Key Identifier:
                keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:da:5f:37:22:96:41:cb:90:07:4d:13:02:c4:d5:d9:fe:d0:
         f2:e2:1c:25:b5:8f:a4:5f:b2:36:35:d1:b3:cd:41:28:d4:ce:
         29:d6:74:08:0b:be:02:bd:e5:ed:43:8f:50:e0:11:e8:e1:18:
         74:4f:3d:e2:cd:06:34:af:dd:1d:34:d0:45:75:e6:10:62:90:
         11:a8:3d:db:8b:1e:f2:1e:af:8a:db:f4:5d:94:e4:23:6f:35:
         87:f9:4c:f6:fd:66:f8:8f:c5:35:09:a5:b2:c1:bb:a4:2a:37:
         da:82:a9:1d:f9:c3:17:9a:9f:4b:fb:a1:03:11:3e:16:77:c9:
         1b:d0:24:e2:ed:63:91:86:5a:52:d6:ee:98:31:87:09:06:3b:
         13:54:d1:0b:0a:1a:fa:6d:e2:40:ec:f4:03:27:54:ff:fe:0d:
         a6:ab:cd:e4:8e:65:da:0c:f5:12:23:fe:ce:7a:7d:80:d0:9d:
         66:f8:72:9b:82:83:1a:7e:e0:4a:44:cc:1e:bc:6f:c4:0b:ea:
         2a:8b:c0:d6:2e:b8:83:75:1a:05:59:43:82:b2:9f:6a:80:5e:
         64:41:16:f4:87:db:d3:96:2b:e9:7a:70:c9:f9:c2:e9:2d:b6:
         ff:4d:16:20:5e:1f:47:f2:01:87:74:9b:a6:7e:90:45:a9:12:
         b3:b7:f6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:30:30 2025 by rpki-client