Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
File:                     AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json)
Hash identifier:          CmSoVK+zt+NBvS8fxRLEg8GiC3xdiq0/pbVJ0bN7iVA=
Subject key identifier:   DA:C5:5A:80:90:79:19:EF:DB:38:CF:D7:FC:27:D1:14:22:9D:69:37
Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F
Certificate issuer:       /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
Certificate serial:       0197B88EEB10BEFF68B4335900AAF025224D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
Manifest number:          06AE
Signing time:             Sat 28 Jun 2025 22:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:03 +0000
Files and hashes:         1: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: 0IhatZIgjf/CW0fVXUWDOW1srq90r7PQeWwAygWhy1Q=)
                          2: ejcizS9O97cOz2tmfObTCZwdW-4.roa (hash: wllgRCbw1IesItOzWT+KT7KXRGHhzCz/LBiRwpHauW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:eb:10:be:ff:68:b4:33:59:00:aa:f0:25:22:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f
        Validity
            Not Before: Jun 28 22:01:03 2025 GMT
            Not After : Jun 29 22:01:03 2025 GMT
        Subject: CN=dac55a80907919efdb38cfd7fc27d114229d6937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:f7:b7:61:a3:4b:40:65:81:c4:71:b1:21:
                    13:61:88:dd:3a:f6:6f:1a:03:cf:ef:83:72:d3:57:
                    3e:15:9e:52:fc:49:0a:17:36:5e:e9:8e:09:26:a8:
                    91:15:f8:2c:60:1a:c6:07:f8:b7:0b:6f:ab:90:bd:
                    82:ce:c1:89:5c:64:14:a1:27:69:f8:4a:a1:48:8f:
                    83:e5:f3:6a:a8:0d:00:5b:ff:fc:ca:3c:27:0e:71:
                    0b:0f:82:c3:e9:fb:18:89:a8:5f:7d:34:97:66:fe:
                    46:02:2e:dc:68:74:70:07:73:68:b2:fe:34:c5:78:
                    c3:e1:0e:50:3c:99:15:f7:29:2f:e8:c7:18:b4:3b:
                    8e:ad:8d:9c:e2:58:ba:ba:e3:be:df:51:8b:f5:1e:
                    46:62:b3:c6:f0:34:cf:81:22:b2:64:48:de:92:42:
                    6a:d3:ac:eb:ab:86:d9:1c:2f:78:ce:cb:a6:13:f0:
                    a8:f5:ee:e2:35:a9:3c:a1:a6:b4:3c:06:4a:d6:d0:
                    ee:9c:32:49:f1:4d:b8:26:37:1e:f5:96:6c:b6:05:
                    68:1e:15:94:e0:bd:33:71:1d:54:ec:5b:42:7e:f8:
                    b4:cc:f0:b5:8f:50:cb:e1:12:f2:c5:68:75:1b:72:
                    0b:f3:bb:a3:6e:0a:6a:fe:bd:2d:58:6e:a2:32:0c:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C5:5A:80:90:79:19:EF:DB:38:CF:D7:FC:27:D1:14:22:9D:69:37
            X509v3 Authority Key Identifier:
                keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6b:d4:b8:52:22:96:31:d0:7a:77:a1:42:2f:5f:86:eb:8a:
         25:e5:94:fe:03:77:f9:b7:f2:43:a3:05:b1:ea:94:8b:7a:e2:
         ec:67:88:14:e0:e6:0b:a7:a1:57:ec:14:35:b3:90:5e:e6:37:
         97:7c:a2:71:aa:6a:c2:a0:12:e9:2f:fe:bf:ea:d1:77:f1:00:
         61:bb:57:33:5a:9b:70:ba:c1:14:03:1a:23:53:10:f1:b7:e9:
         93:6d:09:b9:13:21:8c:02:af:93:c5:f8:70:b6:25:a7:87:c7:
         61:03:0b:e9:9b:59:30:c1:73:25:0b:b0:d0:0f:a7:a3:a6:28:
         9b:b5:19:dc:a9:dd:ab:81:95:b2:ed:a4:91:48:e2:61:8a:fb:
         3a:be:44:b3:31:8c:47:c7:50:8d:03:fe:2b:a7:90:ab:8c:0e:
         e6:48:88:db:f9:f4:2f:fa:2c:22:2b:90:98:ac:f7:3f:6b:e8:
         ab:93:22:46:55:f3:7c:eb:2e:4d:7d:da:e1:41:d6:c8:00:ea:
         59:fd:2b:d1:aa:97:c3:c0:b5:c6:3f:cd:f5:4b:d0:3d:14:99:
         42:de:b7:7a:14:0c:c4:e2:44:98:eb:23:95:8c:92:7e:eb:f6:
         81:88:0f:5a:e0:c4:d0:e7:03:6e:0d:3a:9a:4f:b0:94:c2:cf:
         aa:de:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:11 2025 by rpki-client