Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File:                     az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier:          3r5nH5WrPrfQTNZKiJPOf6cHEOmKw3fTD/XMW7PiFEo=
Subject key identifier:   56:9B:5D:3D:F9:E3:BD:CE:49:16:D6:22:01:1F:25:E8:B3:04:1A:67
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer:       /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial:       019748FA0F2DC44DA8DDC350142D8BFF4293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number:          14CC
Signing time:             Sat 07 Jun 2025 06:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:36 +0000
Files and hashes:         1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: dgWHR4sQIt49onsu1nTf9iY7vexFRtdc4zCZ0a7JqVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:0f:2d:c4:4d:a8:dd:c3:50:14:2d:8b:ff:42:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
        Validity
            Not Before: Jun  7 06:00:36 2025 GMT
            Not After : Jun  8 06:00:36 2025 GMT
        Subject: CN=569b5d3df9e3bdce4916d622011f25e8b3041a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:1b:fb:18:40:0f:ad:84:bc:44:a5:68:2d:
                    0d:05:d2:69:39:f3:f3:7f:69:f9:71:6a:50:0a:13:
                    d8:bf:b8:35:19:41:d5:66:5b:c7:60:0e:00:60:fc:
                    0f:4a:9d:b9:5e:be:57:ab:75:4a:49:21:a2:42:9d:
                    0b:fc:21:4c:46:84:23:9c:aa:95:8d:46:21:75:27:
                    ad:d8:4f:89:dd:d9:72:cf:bf:ea:79:72:6f:2f:8d:
                    75:a8:44:16:79:e7:8e:f2:44:6f:d5:df:19:3f:b2:
                    ce:93:c2:79:4c:ec:c5:5f:e6:ce:74:58:3f:ba:ad:
                    22:ef:c7:14:2c:08:6f:89:46:0b:8d:9c:c4:1e:4f:
                    58:bf:cd:fe:43:e7:82:11:ca:3a:7c:e3:41:a2:80:
                    7e:16:c8:a3:3f:5c:ed:f8:e0:3d:bc:9f:dd:ec:3a:
                    5b:15:64:45:b8:26:14:7a:4e:f3:c1:4f:0d:f5:20:
                    dd:2e:6e:d9:a6:e6:8e:cc:87:5c:55:35:84:47:3c:
                    3b:a1:a8:1a:e6:df:6f:fa:d3:f1:37:51:db:87:0d:
                    b1:ba:0c:11:fe:70:fd:ea:1a:c7:e5:44:6d:8c:a0:
                    4b:a9:a8:52:fa:46:cd:84:57:e1:9b:68:a3:f8:ee:
                    a4:aa:50:3b:c3:ce:76:5f:ee:71:1d:fa:53:63:ed:
                    dc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9B:5D:3D:F9:E3:BD:CE:49:16:D6:22:01:1F:25:E8:B3:04:1A:67
            X509v3 Authority Key Identifier:
                keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3e:87:bb:0e:eb:18:fd:5d:a5:02:01:46:dc:00:d9:be:53:
         4e:9a:82:b7:e4:e9:59:5c:5f:97:31:4e:9a:e7:ca:e1:38:15:
         60:c2:7e:79:f3:25:0d:42:f7:c7:56:45:f6:06:df:ed:22:cb:
         ec:1d:81:01:98:3b:bf:26:c3:ec:4d:63:7a:be:f2:39:46:3f:
         01:fc:66:46:76:65:b1:7a:e2:a4:5c:d1:ac:d2:fd:dd:ca:d3:
         96:85:f0:05:a7:2e:8f:0d:c1:b0:44:6b:65:89:d5:6e:6e:be:
         02:e2:cd:11:60:c9:a8:4d:05:3b:c0:69:db:80:48:76:69:59:
         64:2d:90:72:a6:aa:be:49:cf:c3:0e:00:61:88:fd:82:20:78:
         ac:a8:f0:53:4a:50:06:bd:1a:b0:e5:59:98:f0:20:c1:2b:92:
         19:72:7b:de:84:b6:30:d9:f8:1a:a9:04:3a:6d:44:04:5e:89:
         60:92:ab:da:dc:8a:3a:bb:58:d9:ed:69:63:b3:e6:d4:cc:22:
         58:76:3d:5e:42:d3:f9:3f:f3:3b:71:fc:e1:59:9b:d9:45:6d:
         3c:f2:d7:a4:27:fd:69:43:d0:03:8d:47:8e:68:37:e7:69:7b:
         f6:47:82:13:ac:65:79:7b:83:34:11:5a:e1:d8:ae:5d:61:c1:
         80:11:f0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:55:51 2025 by rpki-client