Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File:                     alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier:          0FVZZxWKDkAm68UgEKhq7HqepVeE6wv3iiNyJrda9T4=
Subject key identifier:   81:D6:B5:9C:E9:06:08:86:82:CF:68:33:B7:AD:64:93:F9:38:31:2D
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer:       /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial:       01974D0E1BC8E10F2D35BF592B4704BDE5B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number:          0272
Signing time:             Sun 08 Jun 2025 01:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:59 +0000
Files and hashes:         1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: tRI37FXrdyNz2TTT7odrI876w1ICdcDVqPkWdRqsncU=)
                          2: bFwnlPb3JkTM0-_fQyjycPLTOXg.roa (hash: T3+8uVMg57oldqwBxpb7FIVcJ3Kl6M0sjRANKp19Uzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:1b:c8:e1:0f:2d:35:bf:59:2b:47:04:bd:e5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
        Validity
            Not Before: Jun  8 01:00:59 2025 GMT
            Not After : Jun  9 01:00:59 2025 GMT
        Subject: CN=81d6b59ce906088682cf6833b7ad6493f938312d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:42:b7:b9:10:94:38:8f:f6:39:d2:37:70:
                    10:c4:12:16:a7:cc:d2:3d:99:53:a6:3c:e5:c4:5c:
                    5e:a9:b4:75:05:22:c9:b4:d9:14:44:5d:b8:77:bb:
                    cb:17:d5:77:4d:d1:f9:f6:4f:0d:93:4e:22:01:47:
                    44:97:35:81:a0:d7:24:5e:57:0e:1c:47:a7:93:99:
                    0c:68:df:a5:51:6f:97:8a:02:06:db:c2:59:e0:3d:
                    a2:99:8e:72:d7:1e:9b:87:3a:41:a8:3e:6b:77:c1:
                    50:dd:14:b4:21:d1:61:b7:e4:14:e7:90:89:50:0e:
                    18:d1:f5:3a:ad:3f:5f:f1:53:6f:99:83:de:a3:49:
                    9a:59:92:34:79:0c:79:0e:1d:93:54:1a:d5:c3:35:
                    8f:fb:3a:17:69:39:b8:e2:77:b5:a7:af:24:3f:33:
                    57:13:0e:c0:40:f7:03:df:d4:50:7a:d3:0a:cd:4c:
                    52:8c:3d:89:98:c2:88:4a:cd:70:6d:73:e1:03:19:
                    78:79:b2:63:b5:d3:b4:4a:3d:5e:0e:bb:25:4a:27:
                    cd:25:df:0f:e4:79:01:ef:3f:35:28:72:04:2d:f1:
                    91:0d:7c:44:af:db:40:a9:dc:7f:b7:13:2f:fa:6b:
                    07:a5:0f:1e:c4:d3:30:b4:08:28:b4:67:07:3a:c6:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:B5:9C:E9:06:08:86:82:CF:68:33:B7:AD:64:93:F9:38:31:2D
            X509v3 Authority Key Identifier:
                keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1a:5f:9c:e2:50:b4:e4:45:dc:f8:b8:88:c9:25:b3:cb:99:
         a4:85:6c:2e:44:1f:f7:24:5e:67:d5:7d:d4:08:11:1d:3b:35:
         0b:ce:ad:6b:e0:dc:29:d5:a1:73:7b:ab:0b:cb:5a:41:9a:fe:
         61:74:0b:04:48:8e:c9:90:f9:ae:6c:09:4f:d9:25:7e:ca:ea:
         b0:31:c3:18:04:ba:18:09:69:6c:dc:3c:4b:ff:c3:c3:d7:74:
         2c:dc:20:7f:86:eb:22:ab:19:90:44:2a:b8:52:f1:bf:de:9c:
         b1:11:83:8f:f1:69:87:09:f8:e0:c0:4e:24:e6:7a:07:35:9a:
         2d:52:5b:4b:52:96:de:fa:0f:09:1d:e6:11:fe:7c:9a:18:03:
         a1:29:11:6a:eb:a5:df:35:d4:d7:d2:4e:9a:69:ba:cf:67:a4:
         d7:a6:d4:15:d5:b2:b0:13:b8:b3:2f:2e:2e:4c:d7:9d:ed:d9:
         a6:49:63:5c:d5:6a:3a:bd:56:15:5b:17:59:fe:42:2e:5b:be:
         9d:31:7d:65:34:04:64:27:f5:18:02:7e:29:55:53:18:8c:c7:
         6c:a0:b1:2a:42:4f:be:c4:ee:ed:55:4c:5c:dd:d2:ac:63:7d:
         52:6e:a7:2d:78:95:a6:a2:c7:7e:7c:53:6b:60:c7:3a:f9:e4:
         cd:0b:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:52 2025 by rpki-client