Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
File:                     Aleh_L8udaLhA0ynSg6XJiO7xJw.mft (raw, json)
Hash identifier:          pwvPRg1X3iK07G5Af0K4J5MyjPIB2+U+8q7ZlgFyOWM=
Subject key identifier:   93:4E:21:B2:38:82:45:C9:1C:ED:1D:81:9F:8C:38:9D:C8:D4:9C:8C
Authority key identifier: 02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C
Certificate issuer:       /CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
Certificate serial:       01976D06FE5A8096990496C75066DC065DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
Manifest number:          02F1
Signing time:             Sat 14 Jun 2025 06:01:04 +0000
Manifest this update:     Sat 14 Jun 2025 06:01:04 +0000
Manifest next update:     Sun 15 Jun 2025 06:01:04 +0000
Files and hashes:         1: Aleh_L8udaLhA0ynSg6XJiO7xJw.crl (hash: bOy+utagJ7JQFmPAarANC2Z/7oWIoSB4oxC7oxPNHKo=)
                          2: uyn_U6sylrn5wTqRGzlqSQ4TKtg.roa (hash: fhFG1UXX8cmMfDAY924tzYfk7fne+/jmPzGgnROSYrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:fe:5a:80:96:99:04:96:c7:50:66:dc:06:5d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0257a1fcbf2e75a2e1034ca74a0e972623bbc49c
        Validity
            Not Before: Jun 14 06:01:04 2025 GMT
            Not After : Jun 15 06:01:04 2025 GMT
        Subject: CN=934e21b2388245c91ced1d819f8c389dc8d49c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:cc:2e:72:e2:38:3f:af:6f:55:15:70:d2:
                    cb:41:5f:50:6a:52:74:ae:db:87:16:cc:d7:59:90:
                    f0:48:e8:bb:42:00:05:50:0c:91:d8:a8:f3:4c:ca:
                    1c:c0:95:95:f7:02:c0:6c:91:6d:96:4e:46:57:bf:
                    40:a1:0d:05:44:cd:07:3c:9f:62:6e:63:05:6b:04:
                    69:e0:4d:a3:31:ac:10:aa:6a:9b:94:b7:4a:12:43:
                    b5:53:09:05:9e:15:e8:c0:8e:a9:8a:5b:a3:24:14:
                    04:4b:1f:76:96:5a:70:fc:d9:62:41:3f:95:ba:28:
                    a2:f9:67:e7:1a:08:44:1d:68:f2:ba:00:0a:37:a8:
                    f2:52:b1:dd:cb:80:3d:61:95:8e:9e:ce:4f:ce:fa:
                    93:5d:eb:0f:b7:2d:4c:60:40:9f:71:7f:a8:af:e8:
                    ce:11:0f:f7:b9:73:c8:17:54:b6:f5:9d:bd:f4:9c:
                    8a:15:f0:77:44:2b:72:6f:06:37:27:b8:5f:e6:dc:
                    39:5a:e7:b8:3e:c0:0f:79:4c:9a:a7:ce:ab:8d:8b:
                    09:b8:69:4a:25:be:83:49:cf:71:0a:92:3a:be:3c:
                    b5:d0:57:2a:48:00:ec:f9:aa:ed:86:c7:9d:5b:df:
                    c3:d2:8b:41:e1:0f:45:08:3b:b5:fa:a1:70:3b:ed:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4E:21:B2:38:82:45:C9:1C:ED:1D:81:9F:8C:38:9D:C8:D4:9C:8C
            X509v3 Authority Key Identifier:
                keyid:02:57:A1:FC:BF:2E:75:A2:E1:03:4C:A7:4A:0E:97:26:23:BB:C4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aleh_L8udaLhA0ynSg6XJiO7xJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Aleh_L8udaLhA0ynSg6XJiO7xJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:c4:f4:a1:7f:c3:2f:8f:09:fb:2c:65:79:d6:a4:4d:78:7e:
         cc:e6:cf:81:68:dc:a3:63:b7:18:30:9b:c1:ab:9b:52:ed:d6:
         e4:f4:cf:24:18:6e:ea:27:f5:90:2c:88:54:8e:13:a6:f7:45:
         89:db:00:bb:49:df:bd:99:7a:2b:f2:b9:33:8c:52:cc:bb:c8:
         24:c4:06:7f:c3:95:90:7c:d4:6a:39:8a:f7:8b:39:7e:e5:bf:
         31:cc:99:ed:db:59:ca:6c:4e:18:0f:37:32:62:11:25:6a:bd:
         3e:c0:35:c5:3e:b8:77:a8:0e:f2:2b:fa:0f:c9:cd:0e:38:53:
         47:bc:be:30:55:bd:f6:2b:1c:69:5f:97:11:ba:13:08:7f:7b:
         20:2c:11:7f:48:c9:ae:b3:9a:ee:0a:99:cd:76:12:32:8a:7c:
         08:90:75:01:65:85:bc:f1:c8:05:4e:0a:d7:bc:73:14:51:74:
         69:1a:dc:55:c5:e6:d3:c7:bc:15:68:90:9a:6c:26:2d:97:28:
         68:bc:3b:6c:9c:ed:de:50:ac:6e:62:fe:8d:cf:49:25:d1:01:
         4c:17:1c:11:99:7c:44:c9:d8:8c:2f:19:9b:ca:ac:8c:00:aa:
         9e:2e:86:d9:88:2f:e2:ca:f3:6a:02:97:b8:ad:bf:5b:75:89:
         95:d6:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:20 2025 by rpki-client