Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File:                     A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier:          ujg9YLkcvMAQEYBcjJeqp6mMqkgnqiCMwY5+IHTdRMc=
Subject key identifier:   54:82:81:6B:A6:F0:29:D5:56:A9:D2:22:23:4F:09:87:2A:66:07:EE
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer:       /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial:       019768BBD734EF2F732FAC2AA8F3E43EA725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number:          0272
Signing time:             Fri 13 Jun 2025 10:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:30 +0000
Files and hashes:         1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: UjQqoB6wOeogh38imEzeREKW6Lb/a3wigxcxsBM9ZOw=)
                          2: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:d7:34:ef:2f:73:2f:ac:2a:a8:f3:e4:3e:a7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
        Validity
            Not Before: Jun 13 10:00:30 2025 GMT
            Not After : Jun 14 10:00:30 2025 GMT
        Subject: CN=5482816ba6f029d556a9d222234f09872a6607ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:54:86:d4:9c:09:e5:55:b4:05:b9:b7:75:
                    09:4c:79:9c:c8:26:61:43:08:65:66:2e:5e:70:27:
                    9b:c7:4b:7b:91:a0:17:f2:25:c6:db:e0:60:ce:ab:
                    0b:c9:0e:51:bd:9b:a1:c9:9e:8a:9b:69:33:5d:5b:
                    56:6d:fc:de:f5:60:79:29:c7:cc:81:cd:e4:b4:5e:
                    6b:23:3c:d4:53:e0:f5:de:06:73:38:97:46:16:a7:
                    88:bb:7e:ad:a1:6e:73:39:fe:d2:39:97:e8:5b:2f:
                    f6:21:2a:10:21:0d:a4:db:13:ab:ce:da:ca:09:f7:
                    b5:5c:84:3c:eb:9a:53:65:40:3a:76:8d:38:4a:a4:
                    3e:2a:d7:a9:68:84:01:45:8b:fc:e8:a3:ea:71:67:
                    ee:eb:8a:87:b2:ea:6e:e7:ff:8b:19:4e:0b:08:1e:
                    02:a1:2f:a2:05:12:1c:2f:2f:50:1d:6f:d3:ca:da:
                    4b:57:11:49:b5:3e:6a:cb:20:d0:30:31:5f:91:4e:
                    8f:1f:f2:dd:c9:1f:c3:31:08:9d:34:69:46:39:c9:
                    4c:13:75:ed:b0:bb:e2:dd:95:39:c9:ef:96:c7:2f:
                    d5:d1:9a:0f:8a:56:13:7e:dd:a6:13:85:54:af:48:
                    91:b9:3a:26:fa:20:55:63:d4:7f:9d:9b:0b:7e:b3:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:81:6B:A6:F0:29:D5:56:A9:D2:22:23:4F:09:87:2A:66:07:EE
            X509v3 Authority Key Identifier:
                keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:32:90:4f:c7:1c:40:d0:c0:c4:4f:6a:11:5b:3e:43:26:fc:
         4a:57:74:f4:60:7d:20:53:27:c3:0d:cf:01:d5:f9:37:29:a8:
         1d:96:67:46:15:a3:f3:e4:1b:c2:61:5e:11:16:f0:cc:a4:c0:
         e6:4d:7b:dc:9b:42:a3:7a:58:fa:63:22:54:b9:fd:69:a2:df:
         b0:ea:72:9c:3e:80:9f:41:cc:03:83:c5:5f:a7:48:9a:67:7a:
         62:84:5c:83:72:94:c3:30:86:32:7b:03:72:68:0a:83:e1:63:
         de:98:70:d4:a2:8f:7f:1a:a9:10:dd:0f:63:1b:55:ae:a6:82:
         df:a3:39:b2:19:3f:7c:b9:a6:90:30:e4:7e:99:cb:e6:91:e7:
         bb:98:f1:90:21:24:df:e2:f6:93:f3:e7:17:52:70:2a:c3:cc:
         c2:c5:3e:36:ec:9c:35:c8:54:10:a5:e6:da:10:1e:f4:1e:7f:
         66:9b:59:fc:81:33:4a:d3:7c:36:51:f8:39:da:53:da:3a:40:
         61:4e:72:71:d8:97:cd:a7:83:89:b5:41:61:98:35:ab:a2:d1:
         89:02:8d:da:4b:a1:64:14:58:6c:93:e0:e6:c1:d3:0b:c3:34:
         7b:00:46:a4:40:1b:a0:9f:df:98:e4:90:2f:12:be:a6:65:a1:
         e3:29:88:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:28 2025 by rpki-client