Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File:                     qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier:          /imtoXp4f1gxxaGEdU66hGF3INq7/bbpHR+ErInyLbs=
Subject key identifier:   B2:60:5A:89:B8:24:2F:F1:85:C0:A4:B6:64:0E:3E:23:F4:F1:BB:FB
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer:       /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial:       01976D3D5993AEC3E7D6D06D22DAE3149A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number:          1595
Signing time:             Sat 14 Jun 2025 07:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:26 +0000
Files and hashes:         1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=)
                          2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=)
                          3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=)
                          4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: npdDo2OK61mIvBwIXMT9Y/mhYTsxuOwceK01f91nSUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:59:93:ae:c3:e7:d6:d0:6d:22:da:e3:14:9a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
        Validity
            Not Before: Jun 14 07:00:26 2025 GMT
            Not After : Jun 15 07:00:26 2025 GMT
        Subject: CN=b2605a89b8242ff185c0a4b6640e3e23f4f1bbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:3f:da:8f:a7:c6:5d:42:82:b0:77:02:14:
                    6c:c6:44:b8:86:7d:e2:4f:b1:f0:27:97:61:4d:2a:
                    86:51:a9:d7:e9:a7:0c:18:8a:01:94:15:77:17:94:
                    7a:1a:01:c4:02:81:65:e9:e7:0a:7a:e7:1c:2d:19:
                    ea:e3:44:7c:5f:7b:a9:ce:76:fc:a7:ce:4b:6c:6e:
                    03:36:74:67:7a:47:40:10:ed:83:c7:b1:76:04:d0:
                    e6:c4:a7:e2:da:21:46:72:0c:36:4c:be:63:da:85:
                    b2:21:05:69:7b:4b:ba:4e:6e:b2:f9:c7:5e:6d:64:
                    a4:65:4d:06:c2:f4:97:56:77:e0:21:c1:cd:22:c4:
                    90:bb:b0:63:55:db:b8:03:07:ac:e3:82:bc:0f:57:
                    df:5b:3d:e6:77:de:fd:c8:54:27:0d:83:cd:1d:8d:
                    c9:08:9d:58:0e:41:b5:06:7d:3c:40:8e:65:18:64:
                    ea:08:0e:e6:8c:dc:fe:66:4b:5e:bc:72:d3:5a:46:
                    37:b6:52:38:d2:13:38:2b:7b:93:8c:28:69:68:42:
                    f6:97:f3:0b:0e:6c:fc:9a:f0:7f:1a:7d:c8:75:33:
                    b3:74:09:8c:17:60:84:d1:cf:d0:40:6f:04:48:a5:
                    7f:5f:52:35:fb:2c:4f:07:71:de:79:7b:f0:9a:b3:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:60:5A:89:B8:24:2F:F1:85:C0:A4:B6:64:0E:3E:23:F4:F1:BB:FB
            X509v3 Authority Key Identifier:
                keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b5:a8:1e:0b:c3:cb:8d:01:76:0c:89:4e:73:a5:d1:cd:88:
         1f:e3:0d:23:6b:c2:ca:af:fc:a8:40:85:17:13:03:ff:d0:27:
         d1:93:93:d3:37:eb:46:2e:59:16:7b:48:90:e3:67:11:0e:a4:
         7e:37:07:81:5e:96:37:e0:87:2d:64:bf:18:2d:1b:9c:8c:60:
         f4:75:a3:f3:00:91:14:8f:b7:2e:d7:b6:a8:62:32:51:99:36:
         6a:c3:dc:2b:57:48:93:ce:e9:34:54:64:d8:47:5d:84:ab:f2:
         63:09:f7:82:63:ed:84:33:bc:d9:9c:88:fd:bc:99:17:f9:d8:
         45:c7:15:ce:36:22:83:7f:05:68:68:32:b9:6c:31:86:2e:d0:
         f0:3a:37:9e:4a:7f:6b:7b:d4:73:5f:fe:b4:8b:f6:d9:85:7e:
         6b:54:71:54:0a:e1:5d:a2:b9:e0:bc:4a:45:8f:8c:f6:cf:a4:
         a5:30:b7:4c:da:3f:48:64:84:7a:b4:f4:4a:62:54:ea:93:b4:
         be:49:f8:84:20:64:98:cd:b1:6a:ed:78:e5:02:f9:db:fd:35:
         8c:0b:eb:0b:d0:89:bc:a5:dc:38:d3:fd:ef:61:47:93:23:b3:
         e1:ad:b8:cc:d9:45:dc:83:44:66:e4:28:5c:6a:e6:f3:5c:5d:
         30:a2:d4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:21:10 2025 by rpki-client