Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File:                     HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier:          rAbsyTYdVDj/bAa4X6rmqYqo8zmiouGStAjaIunFrQ4=
Subject key identifier:   58:85:F1:97:F3:4D:A4:38:25:14:81:3F:33:61:06:15:FB:93:24:C8
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer:       /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial:       01976961776EF24E754A06006A188B505500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number:          0C20
Signing time:             Fri 13 Jun 2025 13:01:24 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:24 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:24 +0000
Files and hashes:         1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: E96c7HSdNTH3OZo3c6GJt+E4MKlkhOskuZsRN8qneas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:77:6e:f2:4e:75:4a:06:00:6a:18:8b:50:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
        Validity
            Not Before: Jun 13 13:01:24 2025 GMT
            Not After : Jun 14 13:01:24 2025 GMT
        Subject: CN=5885f197f34da4382514813f33610615fb9324c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:c3:c7:29:07:ea:c4:35:4e:33:51:c1:89:
                    c4:73:55:a7:bb:5a:cb:bf:81:f4:ea:41:cb:44:8d:
                    0d:23:28:55:ac:9d:0d:95:85:6d:13:05:b7:c6:d8:
                    b3:a8:8c:d8:20:15:0a:2d:83:59:24:75:fd:fd:82:
                    84:56:b8:38:ad:a7:d7:f2:27:74:d4:dc:58:87:df:
                    b0:66:9a:03:1e:d6:03:ac:e3:db:d5:6f:6f:b4:e2:
                    31:a5:ea:88:ac:fc:5a:a6:63:1a:3a:54:bd:3c:1a:
                    c7:f0:f0:b4:e8:05:f0:ef:68:a1:f2:57:7a:6e:54:
                    9b:d6:17:25:d9:e0:61:06:82:f5:83:81:19:99:94:
                    6e:28:7e:b0:f9:6a:21:55:87:ea:34:71:e1:e5:44:
                    9b:1d:3d:27:3f:5d:90:17:d5:37:d8:80:a9:1e:9a:
                    ac:ec:df:83:8e:ea:25:71:11:09:90:48:53:49:a8:
                    7f:d4:c4:ef:c1:48:56:e5:c6:d6:d1:e4:14:5e:1d:
                    6f:a3:12:9a:62:a9:15:a6:9d:97:f0:78:9c:22:f1:
                    38:e5:d5:d0:71:4e:51:b7:2b:b7:45:31:ab:ca:95:
                    3a:8b:56:df:89:34:99:99:95:0a:eb:0e:d5:31:60:
                    fc:32:71:b5:c9:f0:d7:00:51:e9:a4:43:3e:a2:85:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:85:F1:97:F3:4D:A4:38:25:14:81:3F:33:61:06:15:FB:93:24:C8
            X509v3 Authority Key Identifier:
                keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c1:e4:c9:c5:54:f5:57:83:16:eb:15:9c:19:a2:3d:96:0a:
         68:05:3c:8c:a4:00:c6:56:e0:64:df:01:5c:91:8d:a7:75:05:
         1c:75:c4:5f:7b:c3:4e:80:55:85:b2:39:4f:17:78:d6:65:47:
         03:2d:cc:0a:b0:6e:a3:c7:af:f5:07:01:ea:3f:dd:0b:92:a0:
         75:c5:bc:b5:1a:b2:4a:bc:a5:91:26:e8:26:9b:96:75:45:52:
         61:c0:10:8b:a3:bd:49:3e:c7:67:b5:c4:ae:55:c5:ce:4c:25:
         29:12:d4:35:29:6e:1d:a9:d5:67:f3:d2:01:69:01:4a:e1:70:
         23:5d:2a:87:34:da:e1:84:ab:05:8f:23:2e:c3:25:38:05:2e:
         65:9c:52:cd:d1:30:c2:9d:45:7b:19:bb:97:d1:46:db:6e:fb:
         58:78:65:1a:64:3c:de:8e:7a:49:c4:b1:0d:5c:6e:f2:ce:b4:
         98:b7:22:e7:e3:6d:63:1d:b2:9b:fe:49:fa:f5:99:a7:1f:a6:
         43:65:14:8a:eb:a5:86:22:29:04:b5:51:3f:a5:c3:52:e0:54:
         60:c9:c8:59:21:05:9b:e2:07:80:e0:ea:ae:0d:a6:52:ee:71:
         9d:7f:68:30:88:86:4c:85:a3:68:84:3d:90:0c:bc:fc:37:66:
         49:4b:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:16 2025 by rpki-client