Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File:                     AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier:          GN7Qvc8TKP1XUFEa4hxfFVWYVD36zftwHKJoC5HqwF4=
Subject key identifier:   2C:00:48:F7:7C:3D:52:AD:BC:04:F0:2C:2D:DA:16:BE:60:B9:32:49
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer:       /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial:       01976D3D95CCBEFF4A5DFFBB76294379B542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 07:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:41 +0000
Files and hashes:         1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: 69qiErNvTNTT/ayza0pqFALn77G8s6RzsM0Xp/i1poU=)
                          2: dL5tLsAU6PWlL4weQ4Up71k3hXA.roa (hash: ZvntQMrxSDwlXP02WdClHLb+VoQxqS4KZZo3fc10HIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:95:cc:be:ff:4a:5d:ff:bb:76:29:43:79:b5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
        Validity
            Not Before: Jun 14 07:00:41 2025 GMT
            Not After : Jun 15 07:00:41 2025 GMT
        Subject: CN=2c0048f77c3d52adbc04f02c2dda16be60b93249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:33:6c:24:9d:3f:44:fd:84:89:e9:e7:87:
                    2c:e7:81:38:04:a5:f1:78:37:fb:7e:ff:d6:43:96:
                    cd:49:b9:63:88:a7:bf:33:fb:f6:05:d9:5f:6c:84:
                    28:75:06:21:a8:e9:18:5f:ee:27:9d:73:1b:1a:eb:
                    44:a9:d2:63:61:f3:9d:c1:89:67:86:03:e5:91:e6:
                    06:f5:d8:80:48:c8:a9:f9:ac:52:11:ed:52:cd:d2:
                    b6:71:75:0b:27:57:cb:4a:65:a7:bf:6f:0a:7a:ca:
                    82:f3:bc:42:d7:13:05:f9:e9:0e:04:48:5b:0f:a2:
                    34:f5:56:f2:0c:7c:4e:0c:45:2a:74:a4:38:44:a4:
                    48:7e:47:9e:7e:b2:0a:65:4b:56:21:6c:0c:ac:ba:
                    19:3c:02:ce:d4:0f:9f:2e:c4:34:ef:a4:11:ff:54:
                    bc:e9:a9:65:c8:1e:66:a9:ac:5d:cb:aa:61:2c:c7:
                    fb:3b:fe:3d:70:98:3e:8e:c8:fd:67:3c:7b:a2:24:
                    51:57:4b:ed:71:2c:52:30:a3:d2:ab:c9:ea:2a:00:
                    70:a8:91:1b:f6:cd:ac:52:7a:50:86:26:c4:3e:35:
                    47:ed:47:09:50:ce:48:d6:b7:2d:56:07:cd:d4:23:
                    19:63:7b:a8:b4:24:2a:fc:70:f6:dc:c9:dc:e7:2e:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:00:48:F7:7C:3D:52:AD:BC:04:F0:2C:2D:DA:16:BE:60:B9:32:49
            X509v3 Authority Key Identifier:
                keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4c:ec:fa:8b:93:fb:f4:55:09:7f:95:c8:fd:66:6b:ac:08:
         7d:e1:cf:2d:9e:ea:45:79:36:ab:8c:eb:37:cc:28:0b:a6:a2:
         81:e2:e7:3a:4b:ba:04:55:04:23:da:3b:ec:4b:3c:0e:58:dd:
         0c:23:ca:ba:4b:d2:f0:74:b9:6a:87:38:51:11:56:36:a7:8b:
         20:9e:4a:d8:bc:f8:ef:58:db:3a:a2:95:1b:c4:fe:eb:91:b1:
         14:25:93:f8:02:a6:26:a3:c2:3b:ca:4c:49:dd:e8:4f:a0:58:
         2b:ce:25:03:eb:7c:69:23:a4:26:65:33:21:88:0a:e9:f1:ad:
         89:cb:f3:bb:e1:77:5d:84:98:7a:d2:11:be:0d:b7:e2:4b:01:
         3f:b3:b3:f4:80:8c:05:32:36:81:ea:83:0a:f8:da:d2:15:81:
         35:18:be:e2:6f:86:77:53:82:7b:fc:71:28:e4:a1:c4:e1:b0:
         0e:c9:85:c9:4a:1c:22:0a:41:fe:02:f3:db:c5:ab:ad:19:a7:
         cc:a1:1c:c9:e2:76:41:50:36:bf:b4:69:da:14:3b:3a:c5:ed:
         8d:c6:81:1f:26:63:f7:22:51:95:63:fc:46:38:25:ca:1b:e9:
         b0:31:74:79:72:6d:80:a2:d5:96:b3:97:12:7a:f2:67:79:ac:
         92:e9:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:34 2025 by rpki-client