Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
File:                     AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json)
Hash identifier:          +SKIwMus1JP1TT2Ppx3R4AmTvFjg7buTcYpIrTR9rAw=
Subject key identifier:   08:3F:F0:3D:2B:42:D6:C0:04:9B:7F:47:49:F3:46:CE:D1:CE:16:6A
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Certificate issuer:       /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial:       01976DABC56CF54ED1992298193580FECC23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
Manifest number:          1425
Signing time:             Sat 14 Jun 2025 09:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:03 +0000
Files and hashes:         1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: P5PmILZJfXJ1q37oQzN7KRsj+2P1neTpwxEtSd8MqJ8=)
                          2: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (hash: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:c5:6c:f5:4e:d1:99:22:98:19:35:80:fe:cc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
        Validity
            Not Before: Jun 14 09:01:03 2025 GMT
            Not After : Jun 15 09:01:03 2025 GMT
        Subject: CN=083ff03d2b42d6c0049b7f4749f346ced1ce166a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4b:38:fd:bc:07:ff:ab:e0:dd:53:65:7f:e3:
                    cb:8a:9d:04:e2:85:5f:22:1f:44:5f:c1:16:59:b8:
                    ac:1b:3f:7c:ef:05:07:d9:80:c9:4c:3f:bc:0d:5e:
                    76:0e:50:e0:44:cd:b1:b5:a7:b4:29:3f:cf:02:a8:
                    35:95:bf:4e:b1:df:3c:78:e5:68:b1:21:71:60:b9:
                    bb:52:01:a9:a1:e0:b5:c4:9c:26:d6:95:3c:e0:2b:
                    6d:3d:cd:21:33:b9:48:71:4f:a3:36:c4:51:d9:91:
                    d4:f9:d1:71:64:fb:32:3b:74:63:fc:53:10:e6:b6:
                    b2:c4:3c:cf:4e:99:91:34:78:c6:87:92:eb:eb:5f:
                    29:4b:50:cc:9b:32:67:32:d0:1a:72:d8:4b:28:52:
                    ef:f1:39:bd:eb:d9:e1:e0:9b:39:f7:ce:bc:cc:32:
                    8f:ea:12:5b:7e:c3:9f:e1:87:7c:b1:f2:bb:8e:fa:
                    37:f7:91:53:15:df:54:b9:d8:d0:12:51:94:bd:17:
                    66:56:39:72:d5:82:91:aa:62:f1:51:ba:97:5c:3f:
                    28:29:bf:3f:f8:22:05:61:05:39:ea:23:0a:00:50:
                    c4:a1:42:bb:5a:b1:17:56:39:2b:fe:ed:84:74:6f:
                    35:49:8f:0c:24:64:7f:5f:11:26:c3:ff:67:99:d2:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3F:F0:3D:2B:42:D6:C0:04:9B:7F:47:49:F3:46:CE:D1:CE:16:6A
            X509v3 Authority Key Identifier:
                keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:10:9e:ad:29:ef:ab:1b:4a:01:af:1b:37:52:fe:37:75:28:
         24:de:07:50:37:81:d6:b9:98:1a:b7:f7:7d:65:ad:1a:b8:9c:
         01:01:f7:fe:04:f9:70:b1:67:03:39:0d:d2:e1:1c:e2:6f:8f:
         4e:49:62:01:ff:aa:e6:9c:62:f4:fa:ce:a9:53:c1:28:1f:af:
         e9:17:9a:36:61:b7:ba:38:ac:a6:b4:86:e1:b8:45:39:a0:a9:
         6e:70:8e:80:95:71:84:42:c4:f2:7e:bd:28:b8:3a:6d:7e:53:
         43:58:1d:bd:6e:be:5e:01:5e:4e:9b:77:8a:ad:9a:5f:01:bc:
         1c:44:e1:66:ab:49:37:6e:37:94:bc:c6:30:42:69:d1:1b:86:
         cb:90:b1:45:ea:7f:fe:6f:5a:42:d3:1e:92:68:46:6d:06:da:
         a2:68:9e:04:f6:8a:01:7d:55:9e:a0:aa:91:24:56:5c:d7:e5:
         a5:00:65:df:f7:d3:05:ff:3c:f6:e9:66:8e:a1:48:b3:d7:9e:
         b6:29:c8:a2:d8:b9:bb:ff:6e:cc:66:1c:91:78:28:19:c2:d0:
         9a:91:5a:20:e5:c8:b2:96:60:32:16:ca:80:ed:32:6b:12:b6:
         95:43:45:d9:2e:10:be:1f:70:a2:db:b7:0b:4b:5f:cc:8d:76:
         6f:16:9f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:59:23 2025 by rpki-client