Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File:                     Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier:          YYBWWjv3ZDJETD7is+EPkPCWeYMm04VWdT5zdV1tYP4=
Subject key identifier:   A5:DC:A0:D2:53:54:35:39:77:A5:F7:FA:92:91:F2:6D:62:2D:BB:0B
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer:       /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial:       0197474310C20E1B0A29C69CC4D2BDB186D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number:          1059
Signing time:             Fri 06 Jun 2025 22:01:06 +0000
Manifest this update:     Fri 06 Jun 2025 22:01:06 +0000
Manifest next update:     Sat 07 Jun 2025 22:01:06 +0000
Files and hashes:         1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: NbSDIBif5RPYKItJ1j7wCAAozFZxhoYt6U5B0Ya0i8o=)
                          2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:43:10:c2:0e:1b:0a:29:c6:9c:c4:d2:bd:b1:86:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
        Validity
            Not Before: Jun  6 22:01:06 2025 GMT
            Not After : Jun  7 22:01:06 2025 GMT
        Subject: CN=a5dca0d25354353977a5f7fa9291f26d622dbb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:3a:b5:b7:da:5f:94:2f:5e:eb:5d:ea:ee:
                    bd:53:c6:23:6c:71:23:09:30:0f:d9:e3:92:73:ab:
                    9e:2a:0a:37:61:2b:db:54:96:c7:0c:e8:2e:76:c0:
                    92:49:a9:a4:6d:04:a7:d6:1c:18:59:98:2f:ab:32:
                    cf:80:5c:fe:5c:39:0d:48:12:7e:8e:1b:cf:48:75:
                    2d:4e:2d:57:09:a4:06:3e:05:19:93:cb:0f:b4:f4:
                    2a:d7:a4:0f:d7:7f:6c:77:2b:5f:de:3a:61:ed:85:
                    a9:dd:7e:e2:ab:79:22:21:39:3b:87:9f:15:30:cd:
                    0b:31:b3:19:a9:f5:e5:45:3c:3c:fc:11:13:06:3c:
                    ce:50:c3:b5:61:a1:69:29:e5:c6:f0:6f:ae:93:28:
                    34:67:40:ce:67:3f:b1:cb:1c:0e:5d:26:25:e3:df:
                    05:4d:94:16:27:61:d2:45:d4:aa:34:dc:76:bd:40:
                    55:03:ad:d7:d9:a2:d5:3b:e7:59:bc:45:7e:93:cc:
                    61:3e:20:db:98:50:e7:b7:56:c1:7b:94:a8:51:fe:
                    af:57:f5:39:5a:ab:07:73:ca:be:16:0f:9f:d7:c6:
                    bc:5f:29:73:f0:0e:e2:7c:2c:7a:e2:cf:1b:61:c0:
                    d5:fd:5a:17:6c:a9:57:bc:6b:51:e7:62:a5:c2:88:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DC:A0:D2:53:54:35:39:77:A5:F7:FA:92:91:F2:6D:62:2D:BB:0B
            X509v3 Authority Key Identifier:
                keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0e:a9:d6:00:3f:64:ce:e0:e1:bc:56:c8:6e:92:17:13:ec:
         de:03:3e:45:12:0d:2d:bb:ff:87:65:5d:18:7a:cc:74:57:ca:
         98:c4:c2:c9:cc:6a:17:d5:d0:a7:8e:2e:d0:1f:bd:73:03:77:
         f6:57:0e:f4:3f:88:86:2b:ec:f0:ec:7b:40:30:65:8d:da:11:
         3b:5e:e2:a4:1e:b2:cd:41:f1:9d:e6:c5:d3:69:5d:e7:48:9f:
         14:84:1f:8e:b9:83:83:2c:43:89:8b:d2:43:40:6a:a9:97:b3:
         36:9f:37:06:72:b1:5f:48:a0:b4:74:d9:ab:cd:0a:66:b4:5a:
         bc:91:1e:ae:7d:21:3b:fd:37:a2:25:46:a2:f3:1a:30:56:e4:
         09:cc:0c:6f:d2:f4:d2:76:ca:ec:d7:fa:9a:1c:93:a3:ec:7c:
         0a:ba:da:19:3a:85:06:43:ed:23:30:83:f4:16:17:9e:68:5d:
         11:5a:36:5c:65:2d:08:3d:a9:05:4a:44:ec:cc:58:c5:24:c8:
         77:3f:6e:f5:c3:77:cd:07:76:18:ed:10:e4:f0:2b:0d:4a:7b:
         be:6d:e5:fc:05:95:05:27:55:61:3c:50:a7:c7:75:e1:30:65:
         92:4f:e5:ac:d8:9c:fb:0f:f6:93:59:d7:93:cd:0e:a9:1c:42:
         f8:fd:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:29 2025 by rpki-client