Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File:                     aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier:          Sa6aVzfMDbKkQFKstk9pSZ0zqo9Bdgbnw8cnWabPjwE=
Subject key identifier:   49:DE:14:D6:6E:93:13:4F:4E:06:2E:0C:6D:89:E1:21:AC:07:CF:0B
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer:       /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial:       01976F2CC61FDC579CD1B0846D4042D90081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 16:01:34 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:34 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:34 +0000
Files and hashes:         1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: XZGp/2NFnMiIHMaVJ2RbDFznfcCGeEuWGaDvsJj/PfA=)
                          2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:c6:1f:dc:57:9c:d1:b0:84:6d:40:42:d9:00:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
        Validity
            Not Before: Jun 14 16:01:34 2025 GMT
            Not After : Jun 15 16:01:34 2025 GMT
        Subject: CN=49de14d66e93134f4e062e0c6d89e121ac07cf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:e2:a1:24:9c:18:4e:c1:a0:ae:03:56:1e:
                    f0:16:86:8c:a9:d5:90:88:6d:c3:1d:09:a5:77:3e:
                    5b:48:a4:36:fa:23:a6:d5:85:92:c7:fd:77:05:6a:
                    00:a5:2d:b7:73:61:59:1d:c2:62:d0:78:a1:0d:e7:
                    83:2a:5f:01:34:0f:64:24:64:2c:de:12:f3:c3:66:
                    43:88:87:04:80:d9:07:ff:89:c5:7e:90:99:55:98:
                    52:14:64:5f:8d:25:e9:48:eb:39:16:26:5b:53:ab:
                    b5:25:b8:90:09:3b:b7:0b:10:97:f2:1c:7c:c1:4b:
                    9b:cf:26:da:bf:61:3a:b5:5d:0b:8a:18:9a:5b:d6:
                    af:b8:af:94:81:bc:36:b4:0b:60:f4:21:0c:72:94:
                    cd:6a:c6:1a:d2:52:84:3a:70:2b:49:8f:02:d2:f5:
                    ef:b6:c8:a9:7b:78:7f:98:0c:78:fe:50:6e:90:f7:
                    3d:9a:e9:f9:67:f5:ea:21:cb:a5:fe:4b:db:ce:d4:
                    ff:b4:11:32:7a:94:20:f2:c8:87:65:9e:6b:35:bd:
                    8d:6a:fc:29:cb:4b:95:56:4c:1b:31:bf:a4:b9:d6:
                    1e:c7:2b:a2:0f:e7:6d:c6:f2:c2:60:14:40:82:e4:
                    90:16:60:2e:7a:27:e9:62:e1:90:df:d3:ec:8f:69:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DE:14:D6:6E:93:13:4F:4E:06:2E:0C:6D:89:E1:21:AC:07:CF:0B
            X509v3 Authority Key Identifier:
                keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:24:d0:0e:2b:a9:d7:7b:1f:59:89:f9:2c:b5:20:c3:90:a0:
         07:6d:fe:15:af:0b:4a:e4:1e:22:08:a8:62:03:fb:f4:b1:b1:
         de:30:e3:05:f1:3a:ee:e3:b8:77:8a:3d:b7:01:31:8c:43:97:
         97:54:e1:69:94:e2:63:8c:eb:50:04:a0:1d:11:4d:a1:c4:0f:
         57:db:d5:e6:10:0e:69:b5:8a:de:63:b0:9d:05:38:f2:4f:e6:
         a5:cb:2e:7c:04:71:c9:9b:71:ab:27:c3:95:b7:52:ff:d3:c5:
         13:76:4c:61:50:80:de:37:38:68:ec:c8:d4:f6:f3:3b:73:86:
         58:24:3e:35:fd:47:63:c1:7a:31:da:09:b4:98:31:a1:c5:8b:
         91:e7:d3:d2:4b:66:0b:a1:05:e5:15:a9:08:2c:17:a8:b4:18:
         b1:7e:ee:9f:af:67:ed:32:58:43:24:15:ec:4e:1b:c8:2a:fc:
         06:41:9d:3a:a2:73:85:db:a4:ca:b9:38:7a:4f:2c:24:b7:c8:
         8b:73:e9:85:7b:b8:e1:54:dc:3d:15:b3:97:86:f4:62:ac:63:
         30:0c:e2:1e:74:3b:14:cb:46:6a:07:26:04:59:8a:f7:bb:3e:
         7a:7f:55:31:90:18:d3:c7:ee:47:cd:c8:6b:1f:4b:21:2b:fa:
         0f:8f:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:37 2025 by rpki-client