Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File:                     A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier:          /cE9BW1efaC65jcmEHf2fCHcMwlEDGGUdfbutGueRnY=
Subject key identifier:   06:70:19:3F:2C:74:3D:61:88:18:73:62:64:D6:F3:9F:E1:78:70:A6
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer:       /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial:       01974CD76D01EA3233C18032F4A22A95CBCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number:          118B
Signing time:             Sun 08 Jun 2025 00:01:15 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:15 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:15 +0000
Files and hashes:         1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: QqfrIjfwlokcyesMT2YmVUkLThF/R2RarmiQR7A91ME=)
                          2: woal0JSD05J3-HE_srcu4HZklsQ.roa (hash: K5meebvZSg84nTxN3gUNn0hvuS4tbvBQ0f3EUj0mZV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:6d:01:ea:32:33:c1:80:32:f4:a2:2a:95:cb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
        Validity
            Not Before: Jun  8 00:01:15 2025 GMT
            Not After : Jun  9 00:01:15 2025 GMT
        Subject: CN=0670193f2c743d618818736264d6f39fe17870a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:b1:5d:19:da:21:ac:ec:a8:5e:ad:2f:73:
                    68:0f:38:53:a6:fd:55:1a:4c:95:bb:43:89:91:9d:
                    19:5a:78:6e:13:04:0b:05:96:26:09:ab:93:7b:66:
                    84:3c:42:fb:7c:20:da:47:85:d4:06:bf:9f:67:bc:
                    e1:63:2b:c6:3b:03:35:70:ad:e9:2b:04:38:65:a3:
                    aa:6c:aa:b3:d0:b6:08:81:16:99:93:d0:7a:e2:23:
                    2d:fc:69:cd:cd:bc:b0:58:eb:24:fa:b4:d0:e0:6a:
                    5a:19:04:40:a4:54:0e:61:da:f9:50:17:d7:6b:2f:
                    54:d4:61:de:44:a3:83:55:fe:bb:36:3c:ca:d6:9c:
                    5b:93:a4:52:89:6c:bb:e3:86:2f:0c:92:37:49:81:
                    de:b8:38:69:2d:8c:79:3e:d5:2a:85:bb:26:5c:93:
                    dd:f9:32:fb:59:df:40:d3:0a:ef:72:f2:1b:a9:e5:
                    c1:9a:e8:dc:63:5a:69:7e:d6:9d:54:a3:10:4d:67:
                    ae:03:e9:d4:4e:bf:70:a2:1a:04:44:72:38:c0:1f:
                    0a:0c:a0:5d:77:6f:5a:cf:47:2f:33:2a:55:93:65:
                    27:37:52:2b:42:d1:94:f6:33:4c:b1:67:f9:8e:3a:
                    02:7a:6e:49:28:ec:90:5e:ba:b0:fb:23:c5:3f:a4:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:70:19:3F:2C:74:3D:61:88:18:73:62:64:D6:F3:9F:E1:78:70:A6
            X509v3 Authority Key Identifier:
                keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:78:e4:be:ec:cc:e7:c9:43:7e:c9:d1:9f:93:8d:42:79:a9:
         78:0f:ee:57:96:d5:a9:7b:8e:a5:68:0f:93:1f:d7:da:b2:ad:
         30:54:70:44:2e:af:51:41:94:b5:66:22:34:aa:6d:d0:94:35:
         62:db:07:1a:ef:e3:31:6b:57:1e:dc:0f:55:96:eb:53:06:15:
         f1:e7:b4:ff:ac:21:e1:72:e9:3f:e1:57:58:d7:c9:5a:78:2a:
         e6:ae:4e:5e:59:2d:33:aa:ac:78:36:a3:6b:0c:c7:ce:9f:fd:
         92:fa:f5:af:15:b5:04:65:2e:91:d7:7e:7e:ad:dc:14:c4:c9:
         f3:30:3c:54:87:38:7b:0b:49:fd:04:fb:34:e6:52:fa:35:a8:
         21:24:5e:0b:f6:d6:fd:dd:c2:0a:99:7d:93:8a:58:dc:20:ba:
         48:62:45:2d:75:88:55:87:2f:8d:d5:ff:12:1a:1b:94:86:c9:
         1b:80:50:f4:6b:42:df:47:c8:23:65:cc:c1:59:65:77:8c:ec:
         b9:f6:2d:83:0a:15:64:3a:af:ac:1d:3c:e8:94:43:fb:63:10:
         61:9c:da:67:a9:71:6a:4e:04:9f:1d:0b:6f:ce:ba:f6:c4:7a:
         51:bf:39:98:d4:8a:dc:ad:13:eb:a0:4b:69:48:20:c3:9b:8a:
         b3:ec:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:29:24 2025 by rpki-client