Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
File:                     A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft (raw, json)
Hash identifier:          3zgo8OeQGgOyFhWAjmYBaFZDzRtHs0pju3ztlBaLQYo=
Subject key identifier:   FE:FB:E0:06:33:31:40:4D:CA:32:17:4C:FB:A5:C0:D2:FA:E7:8D:EA
Authority key identifier: 03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
Certificate issuer:       /CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Certificate serial:       01977F440DE3D9B482029C03F923A8A402A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
Manifest number:          152B
Signing time:             Tue 17 Jun 2025 19:00:55 +0000
Manifest this update:     Tue 17 Jun 2025 19:00:55 +0000
Manifest next update:     Wed 18 Jun 2025 19:00:55 +0000
Files and hashes:         1: A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl (hash: +wNBK6u1V8Bu82dDVZjZbFZyDqDi43L3h1Fm2mMQgwY=)
                          2: HE3ngXhibuMNnlUTqhNdyzJzI7E.roa (hash: vbHlj5WYFjRLuQiS72fylFam6l6ufmPPLhOlt+s0Jhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:44:0d:e3:d9:b4:82:02:9c:03:f9:23:a8:a4:02:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
        Validity
            Not Before: Jun 17 19:00:55 2025 GMT
            Not After : Jun 18 19:00:55 2025 GMT
        Subject: CN=fefbe0063331404dca32174cfba5c0d2fae78dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:67:b8:0b:bd:af:5a:e7:6c:d2:f2:a8:b1:
                    d3:be:bf:14:59:07:84:fb:ca:97:46:da:55:81:62:
                    b0:1f:ce:b9:4d:e5:8b:fc:81:8b:4a:41:48:fe:3d:
                    5f:c4:e6:71:22:7e:be:6a:84:40:fa:10:49:a5:17:
                    41:9c:2d:66:a4:19:3d:d6:e0:35:58:bf:90:d5:ab:
                    bb:15:27:4e:7a:a6:ca:c8:83:94:fd:17:c4:5f:1a:
                    1e:27:2d:93:a5:92:90:6a:44:18:46:b3:02:41:68:
                    81:1d:32:2d:54:b3:eb:f7:fe:b0:6d:49:a5:35:5b:
                    5a:30:5b:24:44:1c:12:44:3f:ca:f7:b1:64:db:33:
                    c4:36:19:2b:c5:7d:2e:d7:17:6d:49:eb:c8:30:9e:
                    eb:97:f5:bd:14:cd:dc:73:03:f6:2e:88:cf:d3:ef:
                    c2:89:05:ea:0c:2f:d5:e3:52:39:da:fe:a2:25:7f:
                    60:d2:d5:15:80:c4:54:f5:89:86:e0:86:b2:ce:f3:
                    ff:6d:c4:48:a5:d6:34:88:14:44:44:6c:f0:13:26:
                    54:98:3a:38:71:92:62:87:2b:1b:ee:e8:aa:83:2e:
                    2e:bf:c6:72:4b:c7:8a:82:ba:e5:19:f9:be:f2:05:
                    6e:2b:ad:f3:e3:0c:7e:00:66:f9:f5:f4:f5:49:2a:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:E0:06:33:31:40:4D:CA:32:17:4C:FB:A5:C0:D2:FA:E7:8D:EA
            X509v3 Authority Key Identifier:
                keyid:03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1b:06:ad:bc:92:5a:a7:71:0d:01:69:ad:ba:7d:f5:68:2b:
         82:c5:94:54:37:cc:33:5e:a9:aa:21:e6:59:36:7c:58:e5:c3:
         0a:53:fb:81:0f:4d:c4:ed:b4:5b:0a:74:4f:79:78:e4:d4:a8:
         72:2c:c0:89:49:5c:5f:89:b8:84:6e:f8:76:d3:d1:84:64:ff:
         95:67:77:af:24:4b:60:b9:4c:4b:f0:03:f6:ad:d0:8d:66:59:
         7f:d1:24:70:48:b0:4c:b1:cc:6a:91:d6:a5:cf:17:0c:b7:e0:
         be:6c:64:7e:45:9e:10:27:17:fe:ef:ff:3c:7c:83:56:dd:ae:
         8b:e9:57:72:06:14:81:93:11:eb:fb:c3:07:a9:e8:30:2f:63:
         a0:e8:5a:a8:c1:71:09:cb:71:7d:66:ae:ed:43:86:e6:06:15:
         41:68:d2:e8:10:c6:88:72:6c:0b:09:41:91:2b:34:bc:98:f4:
         82:2d:d7:57:0d:7f:f0:c9:c6:ee:b2:d3:2f:72:50:68:56:1a:
         2d:0d:f5:88:92:a4:0c:e7:df:ba:a6:37:47:37:fd:85:08:28:
         6c:a5:4e:df:ff:de:af:5c:37:99:90:17:87:e7:5c:b3:72:2e:
         94:8b:a7:e8:32:9b:ef:9e:c4:cf:38:f3:5c:34:b3:04:e1:35:
         f8:8f:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:09:18 2025 by rpki-client