Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
File:                     AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft (raw, json)
Hash identifier:          aQWo6szspWe2sL425Zy2bGrIMFGniQ86oFTn5j/ra50=
Subject key identifier:   B4:76:69:B5:35:4D:DD:6E:41:A9:1B:95:35:5C:94:0C:7F:BD:1C:FE
Authority key identifier: 00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
Certificate issuer:       /CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Certificate serial:       01974B56407CE8ABFD74288251C4571A8814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
Manifest number:          0AFE
Signing time:             Sat 07 Jun 2025 17:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:33 +0000
Files and hashes:         1: AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl (hash: x1IYl0MYriKwYnYcoHIXi7u+GhEVbMoBPtDVCCXXwCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:40:7c:e8:ab:fd:74:28:82:51:c4:57:1a:88:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
        Validity
            Not Before: Jun  7 17:00:33 2025 GMT
            Not After : Jun  8 17:00:33 2025 GMT
        Subject: CN=b47669b5354ddd6e41a91b95355c940c7fbd1cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:ce:34:0b:99:31:59:8f:9a:79:09:b3:79:
                    d8:f2:a5:b3:dd:a3:d1:a6:02:c3:9a:4e:2e:dc:9d:
                    46:1d:07:64:38:91:0e:c1:72:3f:12:9b:42:9e:45:
                    a2:f9:b3:34:96:f9:b3:c7:99:85:11:ca:1f:70:95:
                    41:42:fd:86:34:dc:61:ee:db:63:83:d5:a8:6c:c4:
                    68:e4:ed:cc:ab:7d:7b:b9:f7:ad:22:9c:ba:e4:31:
                    10:00:8e:68:e6:6e:1d:de:95:5a:22:de:3c:0e:dc:
                    b7:4d:84:e0:46:5c:af:2b:b8:80:93:30:d6:21:4c:
                    d4:34:cb:1f:37:e9:34:de:65:d5:e9:47:b9:30:cf:
                    d9:f1:ed:e3:09:f5:b6:ec:a7:48:ae:16:e2:6d:05:
                    f4:b2:01:ed:4c:98:03:3e:0e:d6:1c:97:9c:45:29:
                    8c:ff:46:63:c0:6d:28:77:0c:2a:61:f4:87:00:c6:
                    c2:a9:79:66:9d:36:ac:83:48:e6:a0:1f:d6:8b:a8:
                    bf:db:cd:41:00:12:e2:8b:92:c1:ea:f4:21:85:7d:
                    3c:71:df:66:00:7e:00:df:24:9b:2e:1b:94:f9:86:
                    b0:09:61:4e:33:83:65:92:7c:79:11:2f:c0:d3:cb:
                    e1:e6:a9:c1:d1:3e:16:47:6d:e3:da:fc:ac:85:2b:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:76:69:B5:35:4D:DD:6E:41:A9:1B:95:35:5C:94:0C:7F:BD:1C:FE
            X509v3 Authority Key Identifier:
                keyid:00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:47:9e:f0:a8:29:7e:55:11:3f:ad:56:45:ab:5d:6c:0b:32:
         80:91:17:0f:48:87:c9:2a:f7:c4:f0:e6:2c:dd:71:41:11:26:
         43:34:7e:8d:fb:c5:4f:69:dd:8e:96:6e:c8:a8:6c:09:5d:92:
         8c:03:69:64:d5:3e:22:bb:ff:6f:d7:27:1c:6f:3b:0e:0a:f3:
         42:07:df:04:65:77:a4:cc:64:2e:86:be:e3:42:e9:68:0d:14:
         fe:10:02:02:f4:ca:a5:e9:c9:4f:6c:1d:1e:84:4d:77:61:50:
         84:cf:7a:d1:16:b6:07:f1:ff:1b:87:a4:16:5d:ab:3b:9d:ef:
         5f:53:ca:95:1b:0d:3b:90:1c:37:a0:33:48:8e:55:03:58:73:
         94:08:40:82:05:f6:c7:ee:be:a6:0b:22:cd:a7:6a:c0:5d:d8:
         0c:63:34:59:69:65:c8:ae:92:29:9b:49:ce:56:f0:ae:ce:e3:
         81:81:a6:63:23:bf:ca:05:97:a0:e4:0e:42:62:0d:44:62:b5:
         49:b8:02:86:00:ea:28:d4:af:6e:1a:d8:1d:a9:37:9c:9e:ee:
         3a:9f:9a:e2:47:08:0f:8e:eb:19:12:a8:b2:9f:24:12:06:bf:
         dc:1d:56:3d:31:19:5f:68:6d:b0:84:80:d9:0c:7f:19:1c:e8:
         1e:5d:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:44 2025 by rpki-client