Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
File:                     a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft (raw, json)
Hash identifier:          e+/a8gecN2e0YjvXQJOb0UERv5Tl1Pc3kjt1hJk95hQ=
Subject key identifier:   83:51:3F:3C:A9:E8:EE:A7:9A:18:3B:A6:C3:8C:DF:03:DD:2D:CC:7C
Authority key identifier: 6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C
Certificate issuer:       /CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
Certificate serial:       019749D5BA3D6E3FC14AB2D451A3F1B3BB6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 10:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:32 +0000
Files and hashes:         1: a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl (hash: 0e1bbsMtAzfWPju+1tlWMxckDjhFu5rBoHXJiwH9keo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:ba:3d:6e:3f:c1:4a:b2:d4:51:a3:f1:b3:bb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
        Validity
            Not Before: Jun  7 10:00:32 2025 GMT
            Not After : Jun  8 10:00:32 2025 GMT
        Subject: CN=83513f3ca9e8eea79a183ba6c38cdf03dd2dcc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:c8:cb:f4:51:fb:6b:c2:c0:78:86:77:3b:
                    15:73:7b:e3:9e:c2:82:9f:bf:9f:26:04:29:13:03:
                    53:bd:59:5d:20:2f:60:56:bc:88:12:a2:9f:d2:5d:
                    b9:c2:a6:f1:80:8c:a4:77:38:7e:92:27:b0:a3:4e:
                    c2:f6:c9:f9:99:7c:6a:64:87:b7:f9:da:74:fc:c0:
                    d1:d7:d1:f5:44:9c:51:d8:4d:88:fe:b4:59:44:bc:
                    d7:40:c2:47:15:20:2b:97:f8:be:df:b1:13:36:fb:
                    84:4b:7e:d7:10:11:05:28:fd:d9:0d:02:8c:9d:4c:
                    3b:8f:d4:a9:da:97:30:28:2b:e3:6a:d3:1e:8e:4c:
                    b6:fe:51:dd:f5:8d:f6:b0:8b:5b:38:1e:d3:17:0f:
                    7b:5a:55:85:aa:ac:89:4e:ce:8d:20:7d:06:4a:24:
                    a7:3a:d9:e4:53:76:10:19:6f:15:22:4f:52:4d:e4:
                    e4:c3:68:f1:75:b5:d1:98:28:b8:6a:74:fc:8d:74:
                    1a:ae:ba:26:a5:88:48:6f:21:90:70:6f:3d:aa:68:
                    bf:92:59:c0:dd:5f:d4:a4:9d:65:d9:0d:fe:92:6d:
                    27:fc:11:a5:9e:cc:55:fe:97:fc:ef:a8:54:cf:73:
                    84:58:9b:7a:14:b9:da:ed:cf:e9:16:6b:60:44:be:
                    be:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:51:3F:3C:A9:E8:EE:A7:9A:18:3B:A6:C3:8C:DF:03:DD:2D:CC:7C
            X509v3 Authority Key Identifier:
                keyid:6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:90:f7:d2:2a:d9:15:8f:54:9b:c4:67:bc:1a:a2:7a:c7:
         fc:41:d8:d5:c7:06:3d:05:c0:cd:9a:73:60:86:0c:7a:ea:26:
         b9:fc:7b:69:03:81:29:46:97:08:64:57:ab:59:d7:7d:f9:88:
         48:8d:b0:b3:7a:05:65:77:30:93:b3:e6:8d:fb:5b:18:1c:b2:
         13:3f:61:b1:39:06:ff:8c:b1:05:3c:62:96:2a:dc:87:78:8b:
         43:13:48:64:31:ce:c1:25:de:71:db:d3:e3:fa:06:8d:92:fa:
         f3:aa:45:0f:b6:59:31:54:18:9c:9f:4a:70:7f:e4:54:9d:c5:
         27:0a:34:cf:e0:c4:14:0b:ce:ec:4b:ea:f9:83:2d:18:07:2f:
         5e:d2:45:19:3a:31:db:69:ec:b8:e6:7f:07:07:36:b7:89:d8:
         c3:3f:7c:10:81:b4:85:17:a1:1a:31:1d:31:bb:f8:53:15:7b:
         d2:82:36:62:63:bb:14:32:0b:d2:12:2e:04:8e:ee:e2:15:03:
         f9:0f:c2:34:59:8a:ee:14:53:af:6b:5a:9d:14:d0:45:56:ed:
         ef:df:79:b3:2c:09:eb:c6:10:ce:35:a0:e7:73:66:16:41:01:
         f1:5a:95:1e:dd:b6:b5:a0:33:cb:25:83:22:bc:30:0e:99:2f:
         0a:10:16:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:06 2025 by rpki-client