Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File:                     awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier:          uvkG/jgo9/qh7+dAX99XhEet4lH8x7HiKGO6jnoljc4=
Subject key identifier:   C1:BD:02:86:E5:C8:95:DB:0A:87:7B:08:49:A2:3F:10:33:C9:D2:5C
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer:       /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial:       019751FD4DE5BEBBE6EFADF148CEAA1D55C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number:          1582
Signing time:             Mon 09 Jun 2025 00:00:44 +0000
Manifest this update:     Mon 09 Jun 2025 00:00:44 +0000
Manifest next update:     Tue 10 Jun 2025 00:00:44 +0000
Files and hashes:         1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: iSqMMDfjNNycsgE6VHDrXWTL98bHHt48ITuUzGIcnJo=)
                          2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:fd:4d:e5:be:bb:e6:ef:ad:f1:48:ce:aa:1d:55:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
        Validity
            Not Before: Jun  9 00:00:44 2025 GMT
            Not After : Jun 10 00:00:44 2025 GMT
        Subject: CN=c1bd0286e5c895db0a877b0849a23f1033c9d25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:88:8d:ea:ee:ab:7b:56:a9:92:48:5c:11:
                    71:44:74:c6:ff:da:f9:22:c1:de:8c:42:ad:eb:3b:
                    c8:0b:cc:34:58:75:61:8b:d1:f3:1e:33:38:0d:0d:
                    06:f3:5d:af:70:7e:e2:87:b6:8b:41:a2:52:a4:81:
                    a3:b6:78:ee:af:f0:71:ae:f0:38:27:e8:56:da:46:
                    37:54:b7:ab:50:b0:ee:1f:00:6a:5d:8e:25:8d:db:
                    81:f8:70:d6:95:2f:0c:92:b8:86:07:66:65:7a:96:
                    83:2f:06:11:10:6d:8b:6e:e3:70:30:e8:c6:af:2d:
                    53:3f:11:d4:5d:3a:ce:bc:7c:53:ed:5b:d5:a9:11:
                    58:1b:05:ec:ca:53:42:4d:d2:df:43:0e:37:d0:fc:
                    63:40:f8:e0:2a:4f:7f:2e:0f:7d:08:3d:ce:13:31:
                    cc:72:58:98:51:0a:a1:b7:2b:1e:a2:69:de:ef:ae:
                    e4:a9:1f:43:7c:3e:1e:5a:2c:ee:93:55:31:42:ae:
                    72:0a:ac:87:fb:bb:9f:f7:93:c0:b7:75:7a:31:81:
                    68:ad:2f:c0:85:2e:d0:63:c7:a3:17:bb:7c:c0:ab:
                    9b:07:5b:6a:c1:c1:20:69:0f:85:91:3b:c3:42:07:
                    2a:fa:a2:a2:1e:8f:d7:18:0e:a2:80:49:d3:ef:e2:
                    2f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BD:02:86:E5:C8:95:DB:0A:87:7B:08:49:A2:3F:10:33:C9:D2:5C
            X509v3 Authority Key Identifier:
                keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:59:c1:41:4d:ca:16:95:56:6d:5e:5b:3a:eb:ce:31:0f:
         e1:07:1c:0d:38:b0:ae:4a:f8:ca:e7:b9:1f:27:bd:5c:ac:b5:
         74:39:e9:eb:09:40:fe:fc:9a:b4:2f:63:93:42:80:27:14:c5:
         26:34:5f:55:ed:3a:94:f6:33:a1:4f:2e:a1:a2:14:a1:a1:a7:
         bb:0f:d5:74:c6:33:8c:d7:77:e1:bb:15:4c:a0:45:b2:e2:bb:
         2f:d3:91:45:c3:50:94:13:56:49:f3:8a:fc:0c:28:3a:30:52:
         d5:b0:94:8e:c1:32:48:05:a1:7b:f1:f1:ca:48:af:03:db:61:
         de:82:95:81:39:34:96:03:e8:06:b4:d1:55:8c:c6:3c:37:61:
         e1:24:80:a9:23:89:87:ba:e7:23:ab:0e:80:0b:3c:1b:4f:2b:
         73:1a:00:21:4d:ec:96:bb:56:14:ae:b1:f2:f9:59:c0:58:fd:
         0b:61:14:4e:5b:40:4d:0a:78:56:8a:f9:48:74:02:86:50:74:
         67:29:b5:e1:b5:70:b4:0e:fb:9f:bc:d7:d3:f8:f2:45:b1:03:
         7e:05:33:90:a3:95:8a:df:2b:14:83:77:15:17:45:cf:ef:b1:
         6a:92:34:2f:2a:19:58:89:a3:40:15:42:9e:4f:0b:1b:02:51:
         58:82:2d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:18:36 2025 by rpki-client