Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
File:                     AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json)
Hash identifier:          CHrFjMI/akPawy9dfABjbAa4XxT8O9xlgO65Dtvukko=
Subject key identifier:   17:6E:FE:F1:34:65:CF:B8:3E:B3:13:75:93:2B:C8:18:5B:B4:91:B3
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Certificate issuer:       /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial:       019748FAA15EC244AA6058608530F31FD5D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
Manifest number:          1412
Signing time:             Sat 07 Jun 2025 06:01:14 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:14 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:14 +0000
Files and hashes:         1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: sy8DaUl+CLA1wkWRagaVFI/nms+NTq/ZquxvElZ62yg=)
                          2: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (hash: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:a1:5e:c2:44:aa:60:58:60:85:30:f3:1f:d5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
        Validity
            Not Before: Jun  7 06:01:14 2025 GMT
            Not After : Jun  8 06:01:14 2025 GMT
        Subject: CN=176efef13465cfb83eb31375932bc8185bb491b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b5:69:be:1b:13:ab:28:75:c3:ad:62:71:b6:
                    9f:5c:ef:05:16:27:6e:ac:89:8b:ed:7c:bb:05:46:
                    61:a5:fe:62:36:df:6f:ea:ac:b1:7e:dd:80:ba:5e:
                    77:1d:2a:8d:da:73:2f:46:96:c4:2a:7e:81:12:b4:
                    22:86:fb:14:4b:01:a9:2b:da:ca:8c:f0:cd:b4:1b:
                    67:cf:c1:e8:2d:27:f7:8a:f7:67:ea:35:5d:c2:03:
                    a9:76:7c:34:df:fd:d9:e5:65:d8:0d:46:de:b8:9a:
                    01:68:97:67:06:5b:5b:8e:bb:5c:03:7d:57:20:80:
                    dc:8c:74:31:0f:0f:53:6d:61:3f:3f:5d:6e:48:e5:
                    b0:a4:fb:45:13:4b:ad:60:38:60:53:54:78:84:4c:
                    8d:f7:dd:4e:30:aa:f6:78:d1:a2:38:cc:9f:d6:e7:
                    47:91:26:d6:e6:19:49:29:d9:53:5b:f8:30:ef:1a:
                    fa:bd:a3:af:91:c8:41:1f:78:91:e8:ed:2e:23:d4:
                    48:6a:0e:4e:aa:c0:08:f0:fe:6d:7c:50:5b:4a:76:
                    02:5f:a8:69:f0:1e:d7:3f:34:15:5e:a3:f2:4e:95:
                    67:13:19:a2:60:f0:eb:79:9a:a6:40:56:35:8e:72:
                    90:fe:45:c9:f4:cd:9b:77:b4:e4:19:c5:c0:b9:ce:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6E:FE:F1:34:65:CF:B8:3E:B3:13:75:93:2B:C8:18:5B:B4:91:B3
            X509v3 Authority Key Identifier:
                keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:50:ea:e4:d0:78:de:f9:2f:3c:d9:d6:b9:f4:1a:22:46:df:
         3b:84:33:d6:d3:70:aa:40:a4:21:8e:d0:0d:5f:93:e8:23:f3:
         87:80:6e:90:46:66:12:04:7d:47:74:ee:74:10:7b:e3:ab:85:
         29:f2:79:cf:fb:e2:34:ed:b2:6e:00:8e:0a:9a:bf:aa:4d:44:
         e3:a8:e7:cc:f5:7b:c7:70:64:bd:75:38:88:39:76:c8:e0:b9:
         a8:da:03:ee:e2:07:6a:49:cf:f9:fe:d0:e7:85:5c:4d:9e:09:
         3a:d3:8a:a5:36:a8:c4:60:cf:8f:9f:9c:27:4e:85:4c:36:dc:
         ac:b9:d9:eb:d6:d0:93:6e:06:25:9d:29:ad:17:fd:49:5b:7b:
         a7:5e:c7:e9:62:43:86:9d:8e:c0:69:57:03:cd:f5:39:7c:af:
         47:44:df:ce:6a:1b:a7:8f:69:48:3b:7e:0f:b6:78:b5:80:80:
         7b:52:38:61:34:16:3e:e2:99:bd:f0:db:90:59:1f:b1:ae:d1:
         5a:09:87:13:cd:a4:f2:8a:07:81:7c:67:1f:16:5f:20:4c:ce:
         b8:33:b5:e2:a2:24:12:dd:0b:55:92:86:d0:12:9f:5a:32:30:
         62:0e:f7:a9:1f:6f:f3:66:4b:7e:01:5c:79:e8:33:80:c8:83:
         fe:ae:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:50 2025 by rpki-client