Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File:                     AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier:          Mt1bo5TTEA7q7itYwnEyPKAC6muWkJ06tKtTgIhr8RE=
Subject key identifier:   D1:9E:C1:F7:41:B1:B0:85:66:F8:9D:1E:6B:10:22:6E:BF:85:A0:B1
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer:       /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial:       0197B58DB0588262CB83CF5EC7F60595C787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number:          07D5
Signing time:             Sat 28 Jun 2025 08:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 08:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 08:00:51 +0000
Files and hashes:         1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: Au94tcHeN4vVSkPCMuEzn/Hrib5XtlPflN+3JmPiP8w=)
                          2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:8d:b0:58:82:62:cb:83:cf:5e:c7:f6:05:95:c7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
        Validity
            Not Before: Jun 28 08:00:51 2025 GMT
            Not After : Jun 29 08:00:51 2025 GMT
        Subject: CN=d19ec1f741b1b08566f89d1e6b10226ebf85a0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:f5:7a:45:c1:91:3a:c1:c1:17:3d:7e:ea:
                    b3:5d:50:e3:d5:73:41:7d:c9:ff:cd:ca:e5:0c:23:
                    08:11:c8:94:a8:c7:d4:87:b2:d6:30:10:79:8a:cf:
                    83:04:13:64:3f:e0:66:4c:87:f4:4d:5c:1d:db:c8:
                    f2:01:87:e2:fe:7b:c7:25:25:bf:24:4a:a1:1c:eb:
                    c5:a8:16:97:70:6d:43:24:0f:65:ed:47:e3:f2:31:
                    e3:08:27:0f:ea:2c:90:da:43:00:8f:be:24:58:3c:
                    8d:de:fc:14:fb:07:9a:30:d6:b4:73:c7:a8:94:3a:
                    f3:b4:b9:ea:91:08:01:8f:10:d2:f0:e5:a8:b8:5f:
                    ac:6b:e6:eb:ab:ec:66:9b:df:34:04:82:83:16:31:
                    8d:9a:23:a3:e5:3e:c6:9b:1a:e8:d6:d6:46:2b:cc:
                    73:5b:0c:9f:61:3f:c7:61:32:aa:22:f7:b7:5e:b3:
                    f9:d5:a4:cf:37:7e:e6:be:53:f3:13:5c:73:6e:d8:
                    27:d2:31:ee:b6:3a:1b:03:2b:3f:37:52:0e:89:de:
                    c7:58:c9:67:82:a3:93:56:2e:e6:47:49:c7:81:d3:
                    a5:96:4d:70:90:84:c4:3a:7b:b6:1e:15:2e:c9:2e:
                    47:93:d5:b3:3f:f4:3a:ef:8f:63:3d:b5:01:97:69:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9E:C1:F7:41:B1:B0:85:66:F8:9D:1E:6B:10:22:6E:BF:85:A0:B1
            X509v3 Authority Key Identifier:
                keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8d:87:f9:63:29:d4:4a:a0:4b:19:b3:22:4a:b4:9f:d2:5a:
         63:52:b1:92:85:6d:68:a6:c5:1f:42:2f:ee:b9:a0:69:d2:26:
         35:4f:c4:a1:f2:aa:b3:2e:f5:54:db:7b:6b:3d:dd:c5:2d:9d:
         88:7d:bf:45:c8:7f:76:0c:78:2e:3e:9e:be:20:b9:28:99:73:
         4f:bf:7d:cc:89:4f:73:c9:6e:49:11:31:66:38:3b:cf:04:7a:
         c4:bb:0c:2d:d4:0a:04:7a:78:c0:64:b7:f5:51:83:60:e7:f7:
         47:f9:f2:bf:e1:de:36:0e:0a:ab:09:af:9e:b7:a9:61:11:d6:
         25:18:7d:cd:0b:10:de:07:92:24:73:f3:38:90:bb:9a:12:bd:
         c3:40:9c:3a:9d:ca:b1:b7:d4:49:ab:2e:f1:32:dd:0d:89:df:
         74:a1:bd:fe:56:19:f2:74:84:82:54:41:3d:e9:25:21:5e:ca:
         85:be:65:b1:01:f6:03:49:66:17:38:1b:16:98:df:ea:84:82:
         70:fb:34:c0:b5:7f:7c:67:43:ee:25:14:91:46:0d:b0:65:fb:
         69:2d:66:74:97:55:de:1a:6d:3e:ca:d1:b9:6b:66:24:5e:5d:
         b4:33:60:2d:36:43:48:70:df:e6:4a:1f:bb:f6:7f:70:cf:20:
         e2:14:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:29 2025 by rpki-client