Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File:                     aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier:          FV4zF/p/wchp5gUvicGSBUQE40nVP09kH0ckBmg407M=
Subject key identifier:   61:71:CF:3F:FF:45:8E:4C:46:FD:55:9E:82:57:1D:6E:88:5B:93:82
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer:       /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial:       01974AE8B5FF192658F421FC367C805DB552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number:          1587
Signing time:             Sat 07 Jun 2025 15:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:54 +0000
Files and hashes:         1: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: WtHE0lH74CJIUH/iq5mZUGbSbrLeG3g4deUQ8uWOWzM=)
                          2: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=)
                          3: paZxOmMKFpQKe-8Kne9bRfBeDj4.roa (hash: Ht8nkuSK3tnDGTAuNZ2+oouOY3eOWnt0ge3I9SzF5BY=)
                          4: tQhpXUNnvGff6XvuqvOKpCTzYwY.roa (hash: Hc4QZ0VrOY7vtGnelWFhq1jyckc5D//hAbmROwzCFcg=)
                          5: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:b5:ff:19:26:58:f4:21:fc:36:7c:80:5d:b5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
        Validity
            Not Before: Jun  7 15:00:54 2025 GMT
            Not After : Jun  8 15:00:54 2025 GMT
        Subject: CN=6171cf3fff458e4c46fd559e82571d6e885b9382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1b:63:7c:9e:14:8a:c2:5b:54:30:64:c2:ab:
                    f5:9c:76:77:a4:29:9b:bf:7f:bb:cb:f1:95:50:03:
                    5d:05:3d:39:78:a8:38:a7:08:e7:b8:17:18:84:65:
                    4f:16:07:2a:7e:81:ec:c9:c4:28:00:5f:8e:12:d7:
                    32:2c:f9:b5:91:15:ce:29:98:97:13:9d:af:46:93:
                    76:8f:f9:69:f3:25:00:06:7d:f9:15:cf:33:ce:69:
                    53:ec:21:56:fa:2c:41:ac:e2:f3:4b:da:bc:9b:6d:
                    47:b3:d4:74:7f:55:e6:35:9c:f3:61:fd:85:43:da:
                    fd:c3:ee:87:09:19:40:5d:0c:89:f5:3a:8c:e7:38:
                    99:ae:49:a9:a4:b6:e2:eb:a7:f9:ba:87:8f:fb:33:
                    f3:75:30:d4:26:9d:1c:39:ef:66:a9:40:30:60:96:
                    47:ab:b7:49:7f:3e:74:94:c8:ef:21:63:bc:39:fd:
                    39:1e:6d:84:65:78:bf:b2:c1:70:32:13:c7:3c:48:
                    ec:9b:de:db:03:56:fa:ed:a4:aa:f1:ac:9f:e6:25:
                    65:c9:5b:32:dd:80:3c:3b:44:db:80:93:7a:0d:c6:
                    95:5b:fb:9f:29:e8:43:7f:7b:8e:46:82:a0:0a:d5:
                    fd:3e:5e:f5:3f:44:9b:8a:31:30:e9:26:24:f1:dd:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:71:CF:3F:FF:45:8E:4C:46:FD:55:9E:82:57:1D:6E:88:5B:93:82
            X509v3 Authority Key Identifier:
                keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:a2:86:a5:13:f8:fa:b5:2c:4e:77:4b:c3:c8:50:91:11:
         79:68:88:d7:d9:75:98:e1:20:a4:c9:d1:e0:40:da:25:28:75:
         e9:47:55:38:fd:ce:a1:f1:be:27:0d:71:b7:96:6d:12:38:3a:
         81:26:44:99:98:df:90:6e:64:4f:5a:af:97:9b:ae:e1:5e:06:
         aa:e4:87:3c:b3:65:57:1f:3b:a0:dd:d2:3a:ae:9b:20:e5:8a:
         b2:8b:c0:e0:50:ca:b4:c4:b0:fc:18:75:d3:ef:6e:21:7a:bc:
         83:d4:d8:c3:25:6e:ba:35:75:0c:56:a1:7c:b9:6d:9c:67:d2:
         d3:14:f3:3e:06:a5:25:a0:2a:82:c9:d0:c1:7d:2f:64:9b:1f:
         0e:20:07:85:d7:f5:12:7f:ff:fc:23:93:68:5b:ae:bd:9f:21:
         f8:d1:f0:62:53:eb:b2:cf:a7:0b:ee:83:6d:c6:ab:da:5b:fb:
         a8:ed:bf:16:64:35:08:ea:9e:45:9c:4b:8e:1a:9e:d3:2c:88:
         f4:40:94:a6:a6:88:de:ae:9f:1e:ed:16:3b:b9:1c:4c:56:75:
         dd:25:72:1c:de:b2:ca:47:27:4b:4e:49:fb:64:9c:e0:7f:81:
         86:7b:d6:8b:7f:cb:80:73:09:7f:1a:10:17:c6:35:4e:ab:a6:
         ed:62:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:10 2025 by rpki-client