Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
File:                     Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json)
Hash identifier:          6bclvjiWlbgc0Yz/JBPHKMiNLBa/k9S4Ifd/TCk6RwA=
Subject key identifier:   ED:FC:D7:98:7D:87:6E:17:49:55:3C:DB:F5:12:07:06:BF:D8:DE:FB
Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Certificate issuer:       /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Certificate serial:       019776AE8398ADA371742DCC8EE4A83893AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
Manifest number:          08E0
Signing time:             Mon 16 Jun 2025 03:00:37 +0000
Manifest this update:     Mon 16 Jun 2025 03:00:37 +0000
Manifest next update:     Tue 17 Jun 2025 03:00:37 +0000
Files and hashes:         1: 1hk2beP_0noowMbOmNtoNb3trEI.roa (hash: yPaUkjXMWXPL0Y518Fz9alSB7qRK1+1Dm8ayCL/j/eg=)
                          2: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: uIgsxwnAl8mi4Z1dTqelS8OAWDWI0HhIvagLM+FhSFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:ae:83:98:ad:a3:71:74:2d:cc:8e:e4:a8:38:93:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
        Validity
            Not Before: Jun 16 03:00:37 2025 GMT
            Not After : Jun 17 03:00:37 2025 GMT
        Subject: CN=edfcd7987d876e1749553cdbf5120706bfd8defb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:79:24:a5:b5:9e:c2:c2:c3:6e:5c:db:28:
                    5a:7f:28:27:46:6c:c4:08:95:38:33:2c:da:82:6c:
                    81:fb:3b:23:89:3b:6e:6c:f2:10:37:66:55:ce:9a:
                    b4:b1:bc:6f:b1:57:1e:1f:6c:27:80:6f:65:e8:7e:
                    33:4d:ce:42:4c:d0:e4:a6:7c:fc:86:07:1f:5a:69:
                    4c:98:4c:ac:de:ba:8d:a8:7c:06:e9:fa:0d:f3:18:
                    7b:f8:3e:ad:a7:3c:8d:29:dd:c9:c0:7d:d6:90:67:
                    df:59:5e:a2:99:23:b8:fd:2f:00:e9:d9:e6:17:0f:
                    ba:35:e3:85:f1:1d:57:0e:f7:d9:d2:ab:6a:a4:8d:
                    62:79:83:a5:d4:65:00:2d:4a:f8:1f:e8:14:7d:4f:
                    75:cc:01:32:a9:b3:fd:de:43:b4:50:fc:04:8a:19:
                    7a:0c:60:8f:88:df:a0:b6:ae:f4:11:ad:db:03:3e:
                    d0:35:fb:47:49:c5:a9:5c:9c:4b:ee:30:f1:7b:f3:
                    77:f6:02:29:22:fb:6e:e8:27:1d:48:3f:4a:a8:14:
                    3e:26:08:a5:76:2b:91:c1:09:d7:ef:7a:69:b0:46:
                    f2:c6:32:74:49:e6:ce:ce:61:f7:0a:5a:86:1c:2a:
                    08:7f:9d:b4:47:53:44:bb:12:dd:e2:38:d8:91:d8:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FC:D7:98:7D:87:6E:17:49:55:3C:DB:F5:12:07:06:BF:D8:DE:FB
            X509v3 Authority Key Identifier:
                keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:46:5c:83:1c:a0:02:e5:8c:da:6a:9e:ca:35:da:f1:ec:
         1f:24:43:ed:c2:5f:0a:d8:ed:a4:87:3e:fc:d5:ec:b4:ca:de:
         77:83:74:4a:ca:1a:c9:2b:17:53:75:8d:87:54:2e:cf:d5:14:
         0d:f8:f2:d0:77:a6:da:63:15:a5:4a:b1:5d:fd:88:44:bf:fc:
         ed:3a:1b:4b:4d:39:cf:61:fb:c3:13:e2:63:ab:23:01:da:45:
         de:ea:d6:36:cb:0d:b8:05:fb:f0:b5:5e:06:59:9f:72:f6:54:
         25:f9:8b:e3:ec:a4:2a:91:44:46:92:74:71:55:58:bd:7b:19:
         5e:51:71:74:38:07:31:a0:ce:2b:a7:4b:e5:90:cd:cd:b3:d9:
         a6:60:c2:59:3a:66:a2:95:25:14:b7:1c:34:9f:e2:bf:7f:ff:
         d4:7a:a1:39:42:df:11:95:fc:7a:c3:17:7d:e6:1e:f3:30:14:
         b6:b5:45:61:38:eb:14:17:9a:02:90:11:d5:da:c8:77:d1:0d:
         29:99:0a:07:0a:53:6a:ee:24:5b:2a:ed:fa:aa:dc:19:66:56:
         98:69:cd:1c:c2:22:11:99:5d:fc:ea:1a:f8:80:9a:96:ab:af:
         e5:be:7a:c8:d8:7b:e5:cc:1c:54:e3:ab:d8:d2:6a:82:c9:27:
         b1:99:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:16:12 2025 by rpki-client