Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
File:                     AdAmgGkTiUArPrM15cnIvj6ZMKA.mft (raw, json)
Hash identifier:          xawfn7bPqddwdvlI7ZUlKt6FdWqjZJOmdWzzzX9tLYo=
Subject key identifier:   BB:10:22:09:F9:DB:19:67:F9:E7:02:CE:79:2C:BB:32:1B:FD:5C:41
Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0
Certificate issuer:       /CN=01d02680691389402b3eb335e5c9c8be3e9930a0
Certificate serial:       01974B56121F75B9D043E9225492B865C558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
Manifest number:          12BB
Signing time:             Sat 07 Jun 2025 17:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:21 +0000
Files and hashes:         1: AdAmgGkTiUArPrM15cnIvj6ZMKA.crl (hash: rQnQz3PkEZ1gIsBwtq/aU6mZTI4OWB5KH9uTEMdt954=)
                          2: uZb6h7TLe1-lJihPhirYKpDZ4mY.roa (hash: aDykphD+aoMx3Jh78ZAzXroKL36r82PVvsKm3+s85wA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:12:1f:75:b9:d0:43:e9:22:54:92:b8:65:c5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0
        Validity
            Not Before: Jun  7 17:00:21 2025 GMT
            Not After : Jun  8 17:00:21 2025 GMT
        Subject: CN=bb102209f9db1967f9e702ce792cbb321bfd5c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:41:f6:9d:9f:79:0b:cc:1e:71:aa:9e:73:
                    14:1b:62:37:54:c2:9f:84:ea:26:a9:33:8d:db:52:
                    ca:e1:18:d9:0c:42:d0:6f:fa:c8:99:ea:cb:4f:b7:
                    ca:ef:cf:fb:99:bc:e3:39:b5:87:44:b7:6c:40:37:
                    18:2e:dc:e7:7d:be:60:27:d1:e0:88:80:9a:c1:0c:
                    c3:71:4f:b9:c3:94:77:f8:94:23:94:21:7f:b7:32:
                    2e:09:6f:47:e7:39:8a:75:eb:e7:ee:66:7a:05:b2:
                    9b:14:72:ec:b8:98:b3:69:b2:d5:66:d6:78:7c:d4:
                    ce:7d:3c:a1:81:61:32:d5:26:60:42:68:26:72:fc:
                    79:63:a8:fe:51:95:a6:ef:d8:d2:32:ea:c8:5b:51:
                    43:bf:1b:2c:6c:45:3b:1d:fd:55:af:6e:a6:28:c3:
                    55:f1:eb:f6:b8:10:1d:56:c7:c0:58:c2:1a:ef:28:
                    3a:c2:fd:d0:c1:64:48:ec:9f:12:dd:87:a9:3e:8e:
                    e1:c8:8f:f4:45:4f:1c:5e:63:1d:c5:96:72:3e:63:
                    01:fa:71:8b:84:5b:fb:ff:b9:a5:5c:11:1e:74:5a:
                    34:a7:52:f1:c1:b3:8f:2b:91:58:84:b1:06:bb:84:
                    57:56:be:6c:ef:ae:c4:d1:4a:3e:30:7b:82:00:b8:
                    e0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:10:22:09:F9:DB:19:67:F9:E7:02:CE:79:2C:BB:32:1B:FD:5C:41
            X509v3 Authority Key Identifier:
                keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:30:01:e6:ef:75:34:4f:1d:98:97:79:23:69:a0:a2:d9:ae:
         3b:3a:a3:57:e6:d2:6e:a3:db:2a:5e:9c:95:0e:94:10:53:e4:
         17:d5:55:2f:e8:34:27:0c:45:d8:12:5d:7e:fd:a1:c1:94:2c:
         00:8d:3f:ec:34:9b:3e:8c:69:75:af:5a:17:a8:3f:18:c3:9d:
         02:d7:9e:e6:37:0a:42:7f:31:13:84:dc:2a:93:88:6c:ec:14:
         3e:6f:89:eb:a5:4a:c2:13:14:8b:ec:c8:47:65:13:f1:0f:f0:
         7f:01:82:df:bc:a0:94:e8:5f:5f:6b:44:52:ca:60:25:72:63:
         20:51:84:cc:5c:66:d4:26:28:d3:39:32:d0:67:68:08:ad:6a:
         82:7f:f2:1f:4f:10:17:80:0b:9b:ec:9b:7a:98:a2:89:72:ff:
         3f:60:70:03:e3:ee:32:1f:11:40:4f:85:8a:b5:10:76:fd:10:
         98:4d:e2:3c:86:46:8b:fd:71:f5:52:c1:9c:26:bd:32:a7:c5:
         c8:c4:ad:2e:9c:0f:5b:53:d9:67:bc:84:4a:d5:f6:fc:18:c4:
         41:7b:42:98:cd:89:65:91:f7:3d:71:5c:00:0e:46:83:a8:bd:
         a4:8e:11:a5:8f:4f:a8:9d:dc:d5:1e:02:35:22:63:4e:e1:45:
         1f:2f:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:00:51 2025 by rpki-client