Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File:                     aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier:          EASq/60WBTZs0OEUkD0xb8Li5qZOiVoI786HFY6/Fz0=
Subject key identifier:   8E:60:E1:35:AB:1A:6A:E9:63:27:2D:95:29:AF:F4:52:98:F2:C4:17
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer:       /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial:       01974A7B64E369580B375DBF1DC0BC05F95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number:          0C53
Signing time:             Sat 07 Jun 2025 13:01:30 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:30 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:30 +0000
Files and hashes:         1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: LT5yEFwSDF1gwFT7XGbqhzNSM0RO8oNtLMzGV0yn2g0=)
                          2: cQgNKWK-mfm6f4cfHvy3mXBeUkc.roa (hash: Eznu0WnXIaaF/obgJMif142Kzoju4lKJjzxlXuNlG4c=)
                          3: mShmo_W6HwOVfRB9AY5LNAbBfho.roa (hash: 6BJcHM6l3PuBUi+3plKY0AbWfl02EmVTYEtLpT66zmM=)
                          4: qnpsS1IYjsvMaOko98oEnyZdTNQ.roa (hash: I8xfQRtglbJjeOJDoN+r4tmjRQM6wlmlXVGeos6jp20=)
                          5: sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa (hash: CHsyF/lbu540pUgLNegSNWtBQrKxYJGXewEQkJ4NBLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:64:e3:69:58:0b:37:5d:bf:1d:c0:bc:05:f9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
        Validity
            Not Before: Jun  7 13:01:30 2025 GMT
            Not After : Jun  8 13:01:30 2025 GMT
        Subject: CN=8e60e135ab1a6ae963272d9529aff45298f2c417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:bb:51:20:2c:15:25:e4:94:74:bd:51:ab:
                    3e:5c:75:53:af:06:f1:1e:11:76:f0:35:76:38:b1:
                    60:36:be:9b:a3:1d:50:72:d3:f3:1c:28:f4:ab:9b:
                    45:be:d4:77:b3:a3:97:ae:d8:58:bb:72:02:cf:64:
                    3e:4f:25:48:55:cd:05:e2:2d:ce:87:22:6f:0b:92:
                    33:f8:0a:ef:f8:18:ca:1a:a6:d4:df:ee:b9:85:e8:
                    a8:7b:70:ca:57:d4:25:29:32:28:74:96:a1:9b:f7:
                    92:dd:de:ea:c5:ce:19:e7:52:e7:59:4e:10:dc:0c:
                    6a:56:5a:ff:6f:e5:3e:a1:d5:0e:7a:e4:12:68:d5:
                    c1:36:80:0c:99:d4:b8:f5:c3:e4:a9:a9:a6:a6:e1:
                    e8:c7:02:0c:d3:62:7e:a7:6f:ae:98:ff:42:6d:46:
                    9e:92:2d:e0:ea:0b:a4:6a:57:45:a3:27:48:23:b5:
                    a3:f6:e3:0d:f4:ac:7f:52:db:12:96:02:f0:6e:29:
                    f3:95:87:27:98:ac:cb:34:85:39:66:67:de:ab:9b:
                    b9:9d:96:ba:95:86:ff:8f:93:7d:da:75:fe:e8:cc:
                    fe:62:c7:1c:3c:f8:80:79:ed:48:04:82:67:5b:d7:
                    d7:db:15:37:4b:b1:8d:ed:46:39:fc:cd:50:52:1c:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:60:E1:35:AB:1A:6A:E9:63:27:2D:95:29:AF:F4:52:98:F2:C4:17
            X509v3 Authority Key Identifier:
                keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ed:3f:5e:12:91:26:be:0a:cb:2a:f1:dc:1e:7d:0f:94:10:
         c4:ee:6d:01:9e:80:bc:ff:d1:4a:01:07:8f:4e:c7:8c:44:27:
         f4:12:15:c0:f9:e5:76:d6:a8:3f:84:9e:bf:e9:ca:a7:ad:d9:
         21:40:9a:43:ee:54:4d:5d:82:e8:8c:e2:e5:e8:90:fc:59:1d:
         48:7b:9c:cb:d1:29:42:0d:fd:51:cf:aa:df:f6:b0:6f:8d:4c:
         0f:29:6e:38:29:e0:47:fe:99:0d:8d:28:6b:86:0f:1a:b8:81:
         c7:1c:f0:20:81:57:42:1f:1d:14:11:7e:1e:72:4d:af:31:c2:
         cd:5b:2a:4e:2b:c7:6d:c8:15:2b:47:f9:51:2e:d3:4e:f7:dd:
         d6:fb:1e:8e:9c:ea:1c:9d:3c:ea:25:e5:cc:9a:1b:56:b8:20:
         d6:9f:d8:8c:e9:46:60:eb:bb:bd:35:bd:48:49:24:3c:b8:a7:
         c8:66:78:23:14:f4:45:e3:f4:69:88:07:6e:2b:c2:e7:eb:f0:
         d4:78:62:20:86:81:24:47:c3:0a:03:38:14:e8:ea:9e:04:00:
         54:00:61:43:d3:93:70:39:55:63:51:2e:f6:83:88:74:06:d0:
         bf:37:7a:2f:f0:3e:e3:79:f8:f6:06:00:ce:3b:21:9c:a1:21:
         64:e5:42:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:15 2025 by rpki-client