Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File:                     Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier:          pD5e473sNe/77SDPgAkHeOz2Jjiu/dpPsXLGg46PNlg=
Subject key identifier:   62:86:87:63:36:B8:2F:28:38:A7:CF:4D:DE:D2:C5:98:A8:C8:D9:77
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer:       /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial:       01976BF426EADF86751608877949F17A974F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number:          106C
Signing time:             Sat 14 Jun 2025 01:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:52 +0000
Files and hashes:         1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: eYcAd5/Kbv/I6JN/lNWNMuh1WWYg6LuFkICwh9AVs88=)
                          2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:26:ea:df:86:75:16:08:87:79:49:f1:7a:97:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
        Validity
            Not Before: Jun 14 01:00:52 2025 GMT
            Not After : Jun 15 01:00:52 2025 GMT
        Subject: CN=6286876336b82f2838a7cf4dded2c598a8c8d977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:02:e7:24:6c:ea:e9:c4:5e:71:ce:fb:5f:f2:
                    15:bb:15:9e:08:13:18:d0:93:47:06:f2:d4:78:be:
                    b7:6f:70:e3:98:68:ec:7e:1b:d9:89:43:67:fd:c7:
                    90:4c:cc:6a:2a:76:4a:7d:da:a3:f0:12:e1:36:93:
                    a7:38:d6:fb:af:48:fd:57:b9:e8:98:96:4b:e2:30:
                    80:2d:6b:41:53:87:54:85:bd:95:05:5f:2b:b4:3d:
                    b7:61:48:39:66:6a:f5:c9:d8:a5:10:49:52:40:81:
                    67:c3:e1:ab:d5:41:50:98:88:51:90:18:ad:04:ae:
                    ad:49:d3:c7:e6:e5:ec:99:3a:3c:56:c4:6a:39:4c:
                    75:5a:8a:34:59:c5:5f:dd:89:f8:9d:23:76:58:a3:
                    b0:2c:93:d8:9a:36:a2:7d:7e:87:92:ec:3c:4f:3a:
                    d9:ec:53:6c:99:95:1a:14:20:66:9d:90:06:18:50:
                    85:d6:6e:09:e0:6b:6d:78:ea:cb:fd:37:da:fa:27:
                    39:7e:83:e8:cc:b9:71:50:0c:d9:26:eb:e9:27:a7:
                    8b:70:56:96:ea:7b:f3:8e:9e:d0:80:fe:03:b4:0b:
                    0e:cc:b3:8f:f3:d3:43:be:01:3d:c2:44:ec:7b:7e:
                    cd:9a:8c:c7:7e:33:3b:5d:51:b1:44:9b:d4:33:bb:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:86:87:63:36:B8:2F:28:38:A7:CF:4D:DE:D2:C5:98:A8:C8:D9:77
            X509v3 Authority Key Identifier:
                keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:74:41:1e:7c:8a:88:01:5b:21:a7:50:06:db:91:5e:4a:5f:
         54:b1:02:03:41:57:3a:2e:4d:a6:0b:8a:cc:c2:ea:bb:ee:5a:
         e5:99:cb:4c:31:7f:45:03:e7:b7:f2:ef:cf:0e:87:7c:02:45:
         23:c5:55:b3:c3:98:63:15:b6:89:5f:8c:65:4e:87:69:ea:72:
         47:4b:c1:95:82:16:cb:4f:14:42:84:4c:60:cf:2a:14:08:b1:
         c7:03:05:c0:c1:4e:33:40:d4:18:b2:e5:5a:fa:88:26:85:56:
         39:a6:85:0e:71:c3:23:89:0f:98:17:18:37:80:54:1c:9a:90:
         ac:cd:75:4a:af:72:d5:61:b8:6e:c5:eb:46:99:b7:d9:86:40:
         99:e6:ec:f6:aa:66:a5:f8:15:63:ba:97:8f:ac:32:47:7b:0a:
         9e:4b:4f:13:75:7c:e7:fb:0a:b7:cf:32:46:0f:ff:9e:e8:f0:
         e3:8b:5b:60:34:13:4f:19:0d:3f:c2:d4:67:e5:f7:9c:1b:93:
         ce:46:2d:e7:3a:a0:3e:4e:be:df:d0:1a:05:29:51:67:5c:8f:
         8e:92:a0:86:0e:0d:54:ca:43:fa:68:cf:85:b9:0f:ef:12:0f:
         43:c9:0e:70:79:9e:6d:8d:f1:7a:98:d7:a0:1a:93:ea:19:29:
         43:4f:3a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:52 2025 by rpki-client