Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          Ey2SJPgHrjIvQwJmKA7hJYMEwqdIR+qHpVXBGu7yJkQ=
Subject key identifier:   CD:AF:CB:78:AF:DC:4C:50:38:3C:23:98:48:18:E7:03:F4:6D:1D:15
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       01976960B31058835528D3317B14DA7DBEDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          1593
Signing time:             Fri 13 Jun 2025 13:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:34 +0000
Files and hashes:         1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: f38gOkcUz3Sr9uxKQyMuyhltG6MbgdLgX3pxY1VhHRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:b3:10:58:83:55:28:d3:31:7b:14:da:7d:be:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: Jun 13 13:00:34 2025 GMT
            Not After : Jun 14 13:00:34 2025 GMT
        Subject: CN=cdafcb78afdc4c50383c23984818e703f46d1d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:be:78:19:6e:fe:82:70:77:5b:82:5f:31:
                    c4:49:d6:23:94:70:4b:c4:8f:50:19:9c:09:47:c7:
                    a8:b3:78:54:20:00:2d:43:67:e6:92:1b:06:1a:72:
                    6c:a2:37:91:bd:f5:14:63:2c:b5:0e:a7:14:c6:b2:
                    35:2c:39:d0:a5:cd:d5:a1:0b:8b:14:9c:15:f9:64:
                    39:dc:4e:02:72:8e:b0:99:37:41:e7:0c:d7:7d:26:
                    c9:c4:f1:72:d4:fd:b3:b6:57:1f:1e:ad:5e:5b:3b:
                    cb:18:cd:23:ac:62:fb:b8:01:99:0c:47:6d:af:ef:
                    76:99:9e:de:fe:a4:ec:bf:66:3b:4a:ab:79:b8:9e:
                    cd:a2:7a:ed:6c:a9:f2:f7:64:4b:89:f2:e3:34:58:
                    48:7c:54:8e:47:5f:c6:36:58:b8:cc:53:95:4b:85:
                    70:a4:34:88:e7:54:51:41:30:86:d8:a1:d1:c9:0c:
                    43:86:73:ef:30:33:e6:69:cc:f9:32:d6:26:55:8f:
                    ac:63:07:ee:6c:5d:25:5d:1e:fd:a2:f9:5a:68:e7:
                    a2:c3:87:64:30:a8:13:c7:6c:4c:32:c7:a2:90:e4:
                    3d:3c:32:8c:16:87:40:e8:6f:9f:b1:33:c1:11:0a:
                    b8:d7:6b:a0:5f:11:ba:93:bc:fa:85:f1:05:b0:d0:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AF:CB:78:AF:DC:4C:50:38:3C:23:98:48:18:E7:03:F4:6D:1D:15
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:49:e6:fd:e2:54:eb:63:b8:0b:46:9a:10:05:10:12:d7:43:
         27:29:ce:27:4d:3a:e6:03:94:bb:38:aa:08:03:39:7e:6e:0b:
         ed:d2:68:70:50:af:54:e4:b2:d7:30:e1:6a:32:b9:8a:a6:77:
         17:29:79:0c:66:2b:64:4f:5b:9d:cc:f2:27:ed:d3:59:c3:d5:
         71:07:65:45:8c:9b:7b:85:91:60:05:49:15:db:d0:e4:6d:57:
         3c:31:2f:55:83:6b:92:09:9a:21:e1:bd:d8:31:33:5d:c2:15:
         26:c0:48:7f:8c:e7:35:bd:ae:16:1f:87:05:6f:2d:aa:50:e2:
         ea:c2:23:e2:10:da:3b:24:37:a0:78:e3:c0:ce:c4:24:5a:17:
         31:51:5d:b7:fc:6e:c1:75:97:4a:6d:f6:27:ba:33:18:5e:a3:
         3d:74:ec:42:34:13:ef:71:3f:16:c2:05:bf:2d:32:b5:5d:34:
         86:fe:b1:88:95:d9:d5:05:36:62:98:16:58:66:aa:12:80:bf:
         4e:ca:a7:fa:7c:2e:b0:16:e0:c9:f5:88:75:a2:7b:be:50:03:
         ae:77:5b:6a:fc:c6:32:60:8a:b7:b1:4a:19:d3:16:ad:e7:8e:
         23:a8:b5:c2:25:f9:45:d1:bd:4e:dc:54:cd:cb:bd:6e:6d:8a:
         7d:15:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:08 2025 by rpki-client