Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File:                     A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier:          IQVSatizEe70k0l49vKLDq3LA5RGhBcSG0HFCC3/uMw=
Subject key identifier:   0B:EC:93:01:A3:AA:CF:1F:25:67:85:6C:A8:E5:88:17:B6:6A:35:4C
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer:       /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial:       01976026E565A53209B7E0425932D725DD94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number:          02B3
Signing time:             Wed 11 Jun 2025 18:00:51 +0000
Manifest this update:     Wed 11 Jun 2025 18:00:51 +0000
Manifest next update:     Thu 12 Jun 2025 18:00:51 +0000
Files and hashes:         1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: XZFS7i+QB5jcCnhJ1sWE2hR+DiX9CWtJJLbXNSVMQwU=)
                          2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:26:e5:65:a5:32:09:b7:e0:42:59:32:d7:25:dd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
        Validity
            Not Before: Jun 11 18:00:51 2025 GMT
            Not After : Jun 12 18:00:51 2025 GMT
        Subject: CN=0bec9301a3aacf1f2567856ca8e58817b66a354c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:47:fd:af:1d:65:9d:30:c7:12:73:f2:1c:
                    70:a3:2b:67:d6:5d:be:3c:21:27:38:41:e6:1e:54:
                    f2:f5:e2:1a:91:78:aa:b4:fc:19:e7:2f:8a:ca:c1:
                    9c:d5:05:d9:18:70:80:3a:0d:d0:41:59:6e:3a:13:
                    05:b9:3d:e4:d6:12:73:56:40:92:95:d7:dd:1c:ab:
                    80:07:5f:f5:fb:84:9e:e1:11:da:80:60:6d:1c:12:
                    f5:21:2a:c6:02:71:0d:c1:bf:c9:1e:84:1c:0b:52:
                    62:dc:cb:06:c2:dd:2a:7f:f8:9f:7b:f9:9e:74:b2:
                    86:06:50:9e:09:e2:c6:b8:44:06:5e:3e:0b:e8:fc:
                    2b:12:c5:ed:75:d1:bd:0e:2f:33:3f:58:3b:c1:74:
                    fa:9d:9a:c8:95:a9:ed:0a:14:ec:57:74:40:d9:86:
                    cd:a5:0c:e6:9e:3b:1a:f2:51:b1:81:79:39:02:76:
                    58:b1:57:8f:3e:34:28:4c:58:3d:07:30:f8:c0:fb:
                    92:34:c2:31:92:68:9f:20:19:56:f9:9d:0a:d3:d0:
                    1c:79:4c:ff:a3:18:ab:f4:96:64:3d:0b:74:b8:18:
                    21:a8:50:39:65:c4:e4:19:61:a9:d1:26:7b:48:d7:
                    63:9d:3e:3b:20:9d:bd:a9:4a:27:21:e1:89:13:4d:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:93:01:A3:AA:CF:1F:25:67:85:6C:A8:E5:88:17:B6:6A:35:4C
            X509v3 Authority Key Identifier:
                keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:4d:23:c9:7c:f0:53:94:d7:9c:00:2a:ec:81:9a:21:a2:
         bb:28:4d:d9:6a:8f:58:04:b0:db:5d:36:47:ca:48:01:28:fb:
         d8:81:80:fb:24:5c:d0:04:6e:cc:93:0a:cf:84:07:74:d7:b5:
         e2:39:07:c3:a8:ff:ec:4e:07:89:b5:5c:23:eb:2b:c5:aa:0d:
         ae:60:4b:04:9e:b3:d7:10:d5:ed:95:e4:02:9e:67:13:79:c8:
         e8:6b:33:52:e9:50:73:c2:31:2e:61:2e:0d:ad:78:3c:5e:11:
         04:34:da:e1:10:5a:71:7a:93:f0:1e:88:ab:6f:9d:35:e3:9c:
         70:d8:53:c7:9b:85:28:94:2c:c5:39:09:8a:60:dc:5b:07:54:
         98:47:91:1a:62:a6:31:ac:b3:e5:d5:ac:48:25:6a:6e:b8:b4:
         8c:f4:79:45:e2:8d:31:d5:74:43:f7:cf:28:4a:1a:5b:c2:8d:
         7e:2b:b2:5d:21:1c:e2:be:62:bf:70:20:11:01:96:fa:b8:96:
         a4:8c:6d:76:94:e2:98:eb:c2:c3:68:a9:ac:33:74:35:ae:12:
         af:a7:0d:46:35:17:ed:e8:81:3d:41:a1:09:69:19:cb:10:09:
         fb:13:9d:51:50:66:0e:e3:95:a5:de:7e:87:34:9c:5d:1a:4b:
         8f:e1:32:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:14:05 2025 by rpki-client