Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File:                     AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier:          OKRrBO0e+UPhFGn1ss7NkIl+SMwCR/Lfrih6IUGZt3A=
Subject key identifier:   48:AC:E2:01:59:C0:5F:52:04:CE:6A:F1:05:A0:34:09:45:C9:82:60
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer:       /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial:       019782EA0F0E7AE4E870AF5B989863234A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number:          06E1
Signing time:             Wed 18 Jun 2025 12:01:06 +0000
Manifest this update:     Wed 18 Jun 2025 12:01:06 +0000
Manifest next update:     Thu 19 Jun 2025 12:01:06 +0000
Files and hashes:         1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: H61APBAw8uJRHbDNGXQZb8yzWU+2YsehNd4SOK611qA=)
                          2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:ea:0f:0e:7a:e4:e8:70:af:5b:98:98:63:23:4a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
        Validity
            Not Before: Jun 18 12:01:06 2025 GMT
            Not After : Jun 19 12:01:06 2025 GMT
        Subject: CN=48ace20159c05f5204ce6af105a0340945c98260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:9f:a5:55:71:2c:b5:f9:8e:48:e6:7f:f8:
                    94:03:07:3f:10:40:69:d1:c7:ec:41:62:88:5b:4d:
                    4b:5f:3b:1d:f6:d4:7f:a8:10:a6:be:89:08:d9:2c:
                    8f:c3:aa:4a:94:f6:e5:72:d5:39:07:91:9b:2c:06:
                    c3:4e:92:48:13:16:bf:ae:03:dc:81:00:df:91:e7:
                    14:b7:c6:28:02:2b:dc:6e:f4:80:db:1c:b3:bf:f6:
                    19:0e:2f:5a:82:92:73:57:0f:f3:69:b1:70:2e:60:
                    76:66:48:5e:71:04:23:e7:e5:11:71:82:81:c6:d9:
                    f4:13:a3:6e:5b:25:6b:63:85:e3:73:d7:64:59:95:
                    46:7a:25:18:c8:93:29:04:a1:d1:ed:f5:0f:98:67:
                    13:a3:a0:dc:e7:9e:ad:2b:07:4c:04:5e:76:df:e4:
                    d5:bc:0f:af:01:ee:ac:92:d2:7b:15:5e:c2:62:62:
                    99:5b:29:2b:e4:80:f5:a2:ca:6f:2e:63:4b:85:54:
                    ad:f5:5d:b3:de:e0:13:6f:8e:6e:1d:70:55:ec:6a:
                    1a:4e:53:34:68:c6:cd:8b:c1:a3:72:3f:35:73:de:
                    8c:62:cd:2c:9d:5e:c4:70:5e:0e:64:c7:4d:0b:de:
                    9a:4a:94:1f:9a:77:97:fe:ba:79:3f:6f:fa:cb:67:
                    21:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AC:E2:01:59:C0:5F:52:04:CE:6A:F1:05:A0:34:09:45:C9:82:60
            X509v3 Authority Key Identifier:
                keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:73:4b:56:13:22:75:c9:4f:44:39:9b:a7:03:13:29:95:ed:
         2c:0c:eb:53:89:d9:e8:02:f6:5d:f7:f2:3b:f6:b2:ad:47:19:
         13:f9:49:27:b9:c2:96:be:a1:63:df:3e:8e:83:5e:16:ae:b5:
         7f:97:cf:c6:44:25:23:f5:4b:14:46:9e:1e:71:ec:6c:21:d2:
         38:6c:8c:2f:22:c4:61:61:72:01:1d:f8:1d:56:04:ff:01:99:
         2d:32:0a:8b:61:b7:58:fa:e9:bf:66:5e:5c:8f:07:bb:5f:19:
         00:3f:cb:50:74:16:20:59:11:0d:5a:8b:ae:d8:20:57:47:da:
         1c:aa:9f:54:97:88:cd:19:ef:51:81:8a:dc:a1:68:12:8b:58:
         f0:52:3f:39:a0:1a:d1:fc:e0:94:88:cb:09:5a:47:32:83:52:
         c2:87:80:7e:9f:83:75:2a:85:c2:01:52:78:70:df:c2:5f:5d:
         f8:88:34:33:1a:f9:b0:c7:04:3d:78:44:98:ff:c8:1f:e6:3e:
         5b:b2:45:c7:e9:49:33:7c:76:4f:bd:78:29:24:a4:a5:62:54:
         97:29:b8:ff:28:82:65:b0:cd:f6:2d:ee:b0:41:5e:e9:d6:60:
         4e:88:b4:12:40:cf:2b:ae:58:1b:85:88:14:d8:27:e9:18:a6:
         31:a7:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:28:28 2025 by rpki-client