Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
File:                     aszbbJjXIrMtyQDuHdZuUcT0KNs.mft (raw, json)
Hash identifier:          Z3lcRuuiiHiVYtZWHJV/cfLmWX9NIdgwLR/71nMAwZY=
Subject key identifier:   DA:1C:70:23:DE:1C:F6:AB:5E:CF:54:6C:2B:13:73:48:20:67:20:3B
Authority key identifier: 6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB
Certificate issuer:       /CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
Certificate serial:       01974FD81DEEB74A33164B8F5BE69370DE64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
Manifest number:          03A0
Signing time:             Sun 08 Jun 2025 14:00:52 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:52 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:52 +0000
Files and hashes:         1: aszbbJjXIrMtyQDuHdZuUcT0KNs.crl (hash: d30Fbv7AFm4QIyiqKEhnz+gj3gmyiYXUj7Jwr7puAfE=)
                          2: jlBmv3dPRy-aCAm4zGP5hP0eED4.roa (hash: x5w57iUiMtF5F3KiCgNFCVpxtjw/vaZ568ZRMFNq7qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d8:1d:ee:b7:4a:33:16:4b:8f:5b:e6:93:70:de:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6accdb6c98d722b32dc900ee1dd66e51c4f428db
        Validity
            Not Before: Jun  8 14:00:52 2025 GMT
            Not After : Jun  9 14:00:52 2025 GMT
        Subject: CN=da1c7023de1cf6ab5ecf546c2b1373482067203b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:04:fc:25:c5:6c:eb:b4:f2:c0:2a:d5:94:
                    65:34:b0:c9:ee:0f:a1:18:c0:e2:12:c0:51:96:ef:
                    4f:f8:08:23:f3:08:05:4e:a5:a4:35:f3:03:0f:85:
                    62:47:77:a1:65:27:14:73:0d:a7:7a:6b:5d:3e:35:
                    d5:d1:0a:d3:47:35:7b:9b:56:f3:9b:d6:d4:e9:6d:
                    8e:a0:75:55:e5:42:66:58:2a:05:ec:58:50:d7:f8:
                    a7:92:05:89:af:e9:f6:da:f1:69:1e:db:c2:95:72:
                    64:9a:0a:df:80:c2:40:b4:e1:b0:32:a8:32:a7:b6:
                    60:3f:2c:a4:23:b8:2b:26:79:9c:b8:59:9c:fc:c0:
                    65:a9:95:e6:15:8c:fa:03:ca:a1:38:4b:a3:55:6f:
                    e3:fb:39:69:b4:2f:98:7d:66:5c:e3:f7:3c:b2:37:
                    7e:f0:8d:87:5b:dc:69:64:de:54:e4:38:31:b9:03:
                    df:70:da:1b:59:3a:87:7b:a3:eb:af:b6:00:4d:6b:
                    ef:6e:68:25:a0:b2:d3:36:e3:b1:22:7b:93:b0:8a:
                    ee:fe:eb:88:ab:a0:e2:16:cc:ec:db:7f:94:78:35:
                    f5:d5:cd:9b:2a:a8:6a:49:3c:df:68:e8:66:e5:c3:
                    44:15:be:14:22:b8:a4:12:a5:d2:8d:57:a0:7b:f0:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1C:70:23:DE:1C:F6:AB:5E:CF:54:6C:2B:13:73:48:20:67:20:3B
            X509v3 Authority Key Identifier:
                keyid:6A:CC:DB:6C:98:D7:22:B3:2D:C9:00:EE:1D:D6:6E:51:C4:F4:28:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aszbbJjXIrMtyQDuHdZuUcT0KNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/db2307-6059-415f-b8b8-2fe932e7ab44/1/aszbbJjXIrMtyQDuHdZuUcT0KNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:47:43:b2:a2:86:d5:8a:ba:11:c7:fd:2f:fc:67:a4:c6:f9:
         85:1d:d0:1c:48:0d:9b:55:cf:64:7a:5a:9f:7d:c4:f8:45:dd:
         9d:7f:ea:06:5a:f2:0a:2a:e4:5f:d6:5d:2c:75:a8:b0:39:4e:
         f4:b5:4c:58:9b:9e:9d:6f:c8:6d:71:c8:1c:11:b2:65:c2:38:
         99:bb:5b:c7:07:da:d1:af:6c:1d:f0:c7:ff:91:c0:8e:66:d0:
         37:7d:72:c9:8b:3e:12:28:d9:c9:e2:3f:b8:46:99:29:20:0b:
         4e:ec:7b:50:74:d6:31:31:68:3b:fb:9e:94:4c:88:4e:bd:cb:
         e9:0f:b9:11:fb:22:00:0e:8d:30:03:00:02:10:88:05:1e:cc:
         72:8b:71:03:d2:7f:ff:85:a7:55:aa:82:be:8c:ca:38:07:84:
         1c:32:6c:fa:bd:8d:4c:bb:8a:36:68:f0:be:ec:e9:59:c1:1c:
         5f:66:6c:1f:94:8d:a4:86:28:15:86:f8:4a:d0:a5:d7:4a:7e:
         5d:1e:6b:27:56:94:73:7c:8e:bc:42:96:6a:76:b3:71:6f:7f:
         de:df:47:b5:25:45:b0:9c:2c:f1:df:88:f4:31:c2:e2:88:aa:
         99:9b:d6:21:7f:aa:2c:57:85:b2:1b:bd:96:3d:4b:0c:82:77:
         60:ab:0d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:18:05 2025 by rpki-client