Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
File:                     AsxpFHam54lbDkVhFkRPkZN78B4.mft (raw, json)
Hash identifier:          ZP5fvC25PMT07P42DmIl0eXTB9jkgw6/2tvgrKiMvvM=
Subject key identifier:   C7:97:38:A4:08:C0:E1:71:7B:55:18:87:31:32:E0:AA:7B:E4:77:ED
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Certificate issuer:       /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial:       01977978A40343A810E284716966B66DF774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
Manifest number:          1599
Signing time:             Mon 16 Jun 2025 16:00:38 +0000
Manifest this update:     Mon 16 Jun 2025 16:00:38 +0000
Manifest next update:     Tue 17 Jun 2025 16:00:38 +0000
Files and hashes:         1: AsxpFHam54lbDkVhFkRPkZN78B4.crl (hash: Z+kmDwQ7VQ/zM9nV5zLLY0h6GM/7x/6/ACBEt56fJQI=)
                          2: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (hash: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=)
                          3: glbAf6IutJeA1wA9zcIVkw-1mp0.roa (hash: ESJ6dYFBwvP8YpbvVt0/saN/BWXL7V+r0E/HCTFScAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:78:a4:03:43:a8:10:e2:84:71:69:66:b6:6d:f7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
        Validity
            Not Before: Jun 16 16:00:38 2025 GMT
            Not After : Jun 17 16:00:38 2025 GMT
        Subject: CN=c79738a408c0e1717b5518873132e0aa7be477ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:94:42:0e:a1:6f:2d:23:2b:3a:8b:7e:88:
                    4f:74:5c:21:67:dc:3d:10:f6:1a:65:bf:bc:77:c1:
                    c9:e9:53:10:32:fc:67:48:86:57:5d:cf:93:a6:f9:
                    90:ba:c4:02:1a:ca:ba:8d:3b:e6:e8:61:96:e3:c1:
                    5e:72:0a:3f:b4:b0:f0:bb:8f:a3:8f:fc:b8:8f:b2:
                    c5:ae:88:dc:ba:6d:91:e1:74:26:ca:11:53:d8:51:
                    d4:f1:69:9d:88:af:63:9c:30:c8:6d:17:a9:b2:f9:
                    2d:e2:03:eb:a0:60:d3:d5:ab:ec:0b:d3:c7:66:e2:
                    f2:c6:29:4c:a7:cb:25:10:b4:a4:63:09:5e:4d:14:
                    a1:ea:c2:0b:21:7e:c9:f2:28:9e:d4:74:9e:52:08:
                    21:e7:b4:51:b6:1f:24:1c:b0:06:92:5f:0a:52:b1:
                    a9:b8:5c:19:5e:f6:2d:88:05:34:83:94:d9:a9:38:
                    b7:d0:84:2b:3b:5d:46:f2:46:bd:22:88:dc:bf:75:
                    ff:57:b3:48:aa:09:4e:1f:63:65:f2:c4:6b:7e:ed:
                    bb:5c:9c:2b:83:a4:02:d0:f0:49:d1:93:67:f4:c4:
                    eb:1b:ed:29:e2:e8:69:00:fd:f9:3b:76:dd:fc:47:
                    11:64:c8:2e:5b:de:df:69:41:83:18:0d:e8:27:cf:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:97:38:A4:08:C0:E1:71:7B:55:18:87:31:32:E0:AA:7B:E4:77:ED
            X509v3 Authority Key Identifier:
                keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:73:73:49:52:fe:2d:86:7c:3b:30:23:9d:5d:2d:7e:2c:44:
         ae:3c:e8:90:de:45:7f:07:ed:ec:f4:d9:62:6c:a2:93:6e:40:
         39:f7:f0:3c:5c:f1:fe:a7:d0:a1:8f:87:7c:18:db:b5:b7:ec:
         80:d4:5f:35:8e:a2:8b:af:d5:ab:a9:c8:08:72:58:ea:9d:ca:
         9d:35:c9:8a:c6:cf:5a:e1:de:0e:af:16:ef:d2:67:a5:32:a7:
         ef:d6:2e:4b:15:c1:b4:64:7b:2d:f0:1c:a4:e2:de:29:c5:84:
         d2:ef:81:94:8c:e6:5a:73:4c:35:73:8f:b4:e0:38:49:3c:f2:
         96:fd:dc:95:6d:7d:37:67:cd:b8:03:82:44:85:ce:f6:5b:e4:
         06:7d:1a:41:0d:f4:85:22:df:3f:68:eb:f1:a2:ad:af:b3:f7:
         5f:c6:0f:a3:80:0b:7d:72:bb:66:e4:d1:fb:cf:1b:e7:35:c8:
         06:9a:a1:d7:f4:84:a3:2c:7c:1c:a6:61:15:7d:14:b6:83:a7:
         5c:b5:89:81:52:02:57:fd:ac:ad:97:41:1c:03:c5:c8:9b:ac:
         c7:d8:93:7b:8e:84:5f:fb:ad:97:2c:e4:62:87:fb:30:2b:df:
         dd:7e:f7:92:c5:46:05:1a:89:eb:4b:cc:56:5a:09:b4:26:aa:
         32:ce:6a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:30:51 2025 by rpki-client