Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File:                     Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier:          p++Gfq4WRK8BHhUPRqu7K3zsGPnL2ErPtJJ8GZ04Tsk=
Subject key identifier:   AD:98:B3:5A:96:30:9D:77:DA:CD:9F:BC:BC:CA:3C:A3:6E:84:4B:02
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer:       /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial:       0197801FB2B8D77E52A23966A0385CF47976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number:          14DE
Signing time:             Tue 17 Jun 2025 23:00:50 +0000
Manifest this update:     Tue 17 Jun 2025 23:00:50 +0000
Manifest next update:     Wed 18 Jun 2025 23:00:50 +0000
Files and hashes:         1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: 0HWTuyf+vNimtA/msOoyVo9mMnUa4ewgdL7HH2bOZLI=)
                          2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:1f:b2:b8:d7:7e:52:a2:39:66:a0:38:5c:f4:79:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
        Validity
            Not Before: Jun 17 23:00:50 2025 GMT
            Not After : Jun 18 23:00:50 2025 GMT
        Subject: CN=ad98b35a96309d77dacd9fbcbcca3ca36e844b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:0f:c4:62:08:0d:9b:35:e8:4d:f1:38:52:
                    ab:78:07:ba:af:c8:e5:c1:1d:5a:e4:13:b7:e1:04:
                    78:5c:6e:5c:8f:62:46:69:87:0f:7c:96:35:d0:39:
                    2e:52:bf:16:71:7c:c7:6f:f2:cc:56:3f:d8:11:8b:
                    f4:27:34:00:d8:4d:a0:28:99:8f:72:97:a3:b8:01:
                    5b:d6:93:ae:d1:4b:ab:ce:72:cd:bf:63:9e:db:cf:
                    3c:61:b4:0d:8a:00:74:ba:6d:22:b7:6b:62:da:2f:
                    3d:2c:eb:56:7c:5e:61:98:9c:30:90:56:c8:1e:9b:
                    f9:e1:91:19:01:13:ce:a4:5b:53:71:b7:4d:eb:5d:
                    16:6e:a5:42:33:73:6d:81:2e:ea:48:7b:a6:68:14:
                    54:0e:a0:28:f3:d3:5a:6e:70:e9:27:9d:63:68:22:
                    a5:4b:bc:e6:69:a5:92:08:1a:1f:70:7b:42:5c:31:
                    e8:ff:d3:6f:40:69:90:ca:09:48:c2:0b:81:10:6b:
                    39:38:db:77:00:67:65:b5:aa:db:5b:b8:2d:b4:0e:
                    aa:af:59:d1:e8:28:5a:23:ed:be:49:c1:6a:c2:c0:
                    c4:2a:21:da:61:31:1f:17:2a:f3:34:83:8c:1c:2e:
                    af:ca:43:2f:8e:3d:74:65:be:8b:77:89:33:1e:88:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:98:B3:5A:96:30:9D:77:DA:CD:9F:BC:BC:CA:3C:A3:6E:84:4B:02
            X509v3 Authority Key Identifier:
                keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:4e:fb:68:4b:0e:85:57:9b:dd:70:6a:ca:0d:40:62:94:
         30:52:22:1c:0a:83:3e:37:55:9c:14:65:e5:3e:78:ff:e3:bb:
         09:1f:5e:e1:cf:f4:bc:3a:c4:ac:f3:07:d9:ab:d4:e0:f2:af:
         0b:c8:1b:6a:86:1d:e8:78:b9:a4:de:08:e0:80:5b:27:03:8a:
         d0:6f:6c:11:86:34:fd:6e:a7:ae:ef:24:36:08:23:e4:51:50:
         ca:0c:52:f7:c1:77:91:d0:30:fd:d7:4b:3c:09:ca:6c:5f:e2:
         a9:f4:b5:0b:ad:77:6e:60:f0:f6:42:fa:9c:f1:da:7e:d3:ef:
         ad:3d:23:be:38:de:0c:70:4b:03:a7:7d:c3:99:0d:9f:b7:cf:
         26:ac:b8:ff:5a:10:d7:b8:69:df:f1:c1:a7:f6:b8:73:38:6a:
         43:e6:00:82:69:fd:ba:2f:a0:55:b2:48:2c:98:c0:8b:3d:e0:
         9d:34:50:7d:33:95:c2:9b:6f:4f:57:e8:b3:3c:df:5c:34:5d:
         38:d0:a2:66:c2:9f:fb:6f:9b:eb:2e:94:69:55:b7:97:71:38:
         71:09:99:68:5c:59:37:cd:70:de:03:86:fd:0f:39:92:8d:ae:
         45:04:c4:c1:05:63:f0:6a:63:b4:08:c3:c7:38:34:b0:4c:71:
         09:3c:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:18:13 2025 by rpki-client