Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
File:                     A6QSK0og8cymB4qR2ai7HAP7n80.mft (raw, json)
Hash identifier:          WuoOuCbW7cOo3eZBP8y5fdF84x9o+VJXXsKkCH4qR+s=
Subject key identifier:   C1:D6:E3:94:08:82:24:B0:89:29:A4:4C:FB:F0:A9:0E:72:A1:81:CE
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Certificate issuer:       /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial:       0196C3F0DDDC6268F331F67BC803363C95EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 10:01:04 +0000
Manifest this update:     Mon 12 May 2025 10:01:04 +0000
Manifest next update:     Tue 13 May 2025 10:01:04 +0000
Files and hashes:         1: A6QSK0og8cymB4qR2ai7HAP7n80.crl (hash: sdQOuMUNH3dG0zYLtzJz4sC/9lYzOhyHV2qUTcXrHmI=)
                          2: j-WIU7L2E8S8heDN9-EX8jcj-qg.roa (hash: 5/cHSfnAktTRmViDSglDJdChSdXmQUsSiRJP6avGvpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:f0:dd:dc:62:68:f3:31:f6:7b:c8:03:36:3c:95:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
        Validity
            Not Before: May 12 10:01:04 2025 GMT
            Not After : May 13 10:01:04 2025 GMT
        Subject: CN=c1d6e394088224b08929a44cfbf0a90e72a181ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:ea:56:75:af:0f:a4:66:3a:ee:e0:75:0b:
                    cc:b4:34:be:06:e6:09:ae:80:0b:b5:03:11:92:fc:
                    96:00:e6:53:f7:a2:78:4f:11:89:08:df:66:2f:ce:
                    b1:c4:d8:b5:34:f2:2a:db:fa:04:3b:07:dd:db:2d:
                    5a:4c:0c:85:af:fb:3a:12:b9:46:46:76:8f:91:29:
                    b0:60:cb:2a:44:9d:16:51:5c:9f:5c:09:8a:0a:05:
                    e4:82:1b:c6:e1:a3:7f:34:e9:88:e5:6e:37:51:ea:
                    88:62:06:e5:90:99:5a:35:27:3e:8c:fa:0e:5a:fe:
                    a4:87:ce:2b:8d:b3:a6:7a:e6:f5:94:56:d5:5e:6a:
                    37:c6:cf:9c:ff:1f:06:01:fc:34:df:f1:9d:7e:28:
                    83:83:89:6a:e5:28:f9:da:a9:df:5b:6e:21:3d:54:
                    53:1c:39:06:4e:39:ee:07:26:4b:22:4d:56:bd:6a:
                    2c:7a:b6:fb:74:55:87:a8:27:bf:4b:04:06:ea:df:
                    5c:7c:ce:80:b0:42:3a:b1:bc:09:74:ad:d5:c1:93:
                    0a:00:ac:aa:8d:b1:ec:ac:90:47:7e:31:3c:77:ae:
                    f2:3f:fe:11:c8:e9:93:00:ed:0e:19:18:1a:98:b8:
                    76:18:7b:0d:f8:f7:f4:21:21:6d:62:d7:9d:ea:4a:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D6:E3:94:08:82:24:B0:89:29:A4:4C:FB:F0:A9:0E:72:A1:81:CE
            X509v3 Authority Key Identifier:
                keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:19:28:19:78:22:c1:df:b5:f9:07:46:dc:b4:67:d4:7d:fe:
         d3:fb:1e:82:1b:82:ee:29:63:6c:17:e5:3b:40:43:1c:c3:be:
         1b:57:dd:95:e7:ff:2b:96:55:d7:47:bb:1b:2d:f7:5e:ca:d5:
         b8:05:f6:48:c1:4d:f0:8e:04:82:c6:ed:fe:59:97:24:82:e0:
         50:cc:2f:78:1c:b4:e6:a6:e1:df:5a:64:e2:66:04:e6:de:eb:
         10:89:1a:ee:83:f6:36:ee:52:75:d5:6c:d9:27:2c:30:28:9e:
         7f:5f:f4:a9:cf:fd:e2:6d:91:66:ba:98:d9:cb:b2:ed:62:20:
         54:23:17:88:ec:7d:cc:09:4f:7c:aa:8c:fc:1e:01:2e:14:8f:
         3f:43:01:80:a3:8a:c2:7d:bb:7b:f2:79:37:6e:86:19:b5:9e:
         da:dc:2d:49:49:ef:a5:2b:4a:17:0a:31:23:6e:2b:cf:fb:29:
         c2:cd:33:e2:b8:36:20:05:9f:b9:fa:fc:99:af:38:66:5a:05:
         40:1c:8a:0e:4b:b1:de:01:a2:d4:b5:2d:9d:1a:5c:ea:06:de:
         9b:59:49:57:5d:3a:03:82:14:ff:ff:05:d8:6f:c7:02:98:0b:
         f2:1c:32:dd:5e:c6:8a:4d:47:66:17:a1:00:d4:3a:1f:ab:b7:
         45:e1:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:53:00 2025 by rpki-client