Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
File:                     adA-sSuz_i5OlkUcnMPvjunTtfU.mft (raw, json)
Hash identifier:          TutIBRTEED4k+icosbACroZY5t/qIKka9zN2Ysx7LpI=
Subject key identifier:   AE:68:EF:52:D4:4A:08:C7:7E:B5:A7:AE:05:50:F4:FB:4E:B4:68:3A
Authority key identifier: 69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5
Certificate issuer:       /CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
Certificate serial:       01976D3E9FA2D47BC5FEBC7788C3D2E94839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
Manifest number:          121F
Signing time:             Sat 14 Jun 2025 07:01:50 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:50 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:50 +0000
Files and hashes:         1: adA-sSuz_i5OlkUcnMPvjunTtfU.crl (hash: Sv+RLkxSSMbyDilrhqqdL8uIzjwsm7u2w7D38lGaq0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:9f:a2:d4:7b:c5:fe:bc:77:88:c3:d2:e9:48:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
        Validity
            Not Before: Jun 14 07:01:50 2025 GMT
            Not After : Jun 15 07:01:50 2025 GMT
        Subject: CN=ae68ef52d44a08c77eb5a7ae0550f4fb4eb4683a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:ec:06:23:23:51:40:0f:f4:3f:25:22:f1:
                    8d:db:94:89:2a:c3:a4:f3:98:cc:49:19:d4:69:01:
                    08:7e:43:ad:61:28:ad:42:0b:a2:79:96:20:ec:39:
                    40:3b:4b:a5:80:1b:1c:14:1d:f9:4f:02:b7:32:6d:
                    c4:bc:2e:04:fb:87:56:cf:3c:fb:0d:4e:e2:71:05:
                    54:7d:00:68:97:b8:50:58:41:69:48:23:87:ff:63:
                    51:d0:d7:0b:03:5b:a8:83:06:e4:f2:c7:a5:0f:dc:
                    f8:78:c6:53:c3:f9:7d:d7:99:ca:28:5c:0b:00:b7:
                    38:11:14:b0:aa:b1:34:50:d5:55:26:9f:14:da:c5:
                    32:dd:22:08:d9:1d:c6:98:6e:ab:a5:9a:3a:34:c8:
                    61:83:6d:53:93:24:46:ef:5c:34:fc:e7:48:bb:f3:
                    be:c6:cb:63:65:74:b1:b8:52:2a:32:38:13:42:6d:
                    f7:9b:9e:15:ad:27:2b:8b:03:b9:30:05:8a:db:4f:
                    da:11:49:02:3d:95:b8:7b:90:d8:19:71:03:52:75:
                    75:17:7c:fc:8c:93:4c:dc:f9:58:4a:98:8e:dd:d8:
                    4f:25:30:9c:6a:cb:6d:6b:fe:1c:78:d3:ed:e9:39:
                    00:63:a4:bb:9c:d1:f4:4a:3c:02:eb:9e:04:fe:9f:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:68:EF:52:D4:4A:08:C7:7E:B5:A7:AE:05:50:F4:FB:4E:B4:68:3A
            X509v3 Authority Key Identifier:
                keyid:69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:b0:7b:10:ae:ee:56:47:60:4d:cb:c4:4f:79:92:10:74:
         1b:ce:f8:c3:1f:80:61:f9:53:cd:cc:3b:fa:ad:22:03:0a:2f:
         cc:8d:4d:b9:cf:44:4d:87:2f:54:0c:5f:a2:33:70:f1:bc:81:
         5a:a5:52:1d:41:f4:41:2a:8e:e1:53:9c:83:38:17:00:09:4e:
         7c:91:63:20:d5:2d:c8:19:49:3c:b5:aa:03:87:98:f7:53:32:
         6a:df:5e:dc:fb:00:4b:e9:fd:bb:b6:14:26:ba:b6:95:17:c2:
         0a:15:80:61:86:20:f5:99:53:50:ce:d5:a6:86:27:78:ab:56:
         be:6e:f2:3c:9e:00:46:19:1b:6c:ba:c2:a7:7b:1c:0c:f8:6a:
         74:43:b0:a3:23:8f:ae:a5:87:75:c1:ad:a4:e5:dd:29:14:fc:
         20:bd:a4:85:bd:91:12:1f:1f:94:dc:9e:8c:65:0f:f5:a5:b9:
         05:60:32:5f:86:21:07:93:95:af:dd:28:8b:0e:08:34:0b:5a:
         7f:1d:b9:d4:3c:dd:28:e7:ac:5a:f5:cc:75:1e:69:13:bc:6a:
         a8:2f:58:9f:b2:64:c5:6e:3f:b0:7d:e9:0d:c9:b9:10:a5:08:
         9c:cf:c4:ce:d4:00:fe:f8:9d:37:ea:db:6e:7a:94:0a:fd:29:
         50:9f:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:48 2025 by rpki-client