Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File:                     qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier:          TgBXJFOn6XVCTuq7ZqJc2e2600Ls/N/cBNB1YCG+Mok=
Subject key identifier:   3D:98:01:26:E1:70:A5:33:53:AB:AD:14:FC:D3:3D:FE:F7:23:66:26
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer:       /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial:       019769CF41A4AC1AD60171D91A34CB99EEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number:          0D03
Signing time:             Fri 13 Jun 2025 15:01:19 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:19 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:19 +0000
Files and hashes:         1: llKmEV0JVzIG0_MZWPlP8ygpeC0.roa (hash: jPaOJ8ND+JyHLtdhEIszWBX4EhT8804ihxPfOvX+M6g=)
                          2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: j1SXnGAoIsU6UkRYaKoSRfJOOfnAe8m4j4GXfr+UY3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:41:a4:ac:1a:d6:01:71:d9:1a:34:cb:99:ee:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
        Validity
            Not Before: Jun 13 15:01:19 2025 GMT
            Not After : Jun 14 15:01:19 2025 GMT
        Subject: CN=3d980126e170a53353abad14fcd33dfef7236626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:d5:5e:ab:b9:93:ed:2b:77:48:09:8c:9a:
                    0b:6f:51:66:e2:77:53:43:58:d3:fa:bd:6e:75:e1:
                    34:71:db:b6:bc:70:8f:7c:eb:0d:b3:e5:6d:b4:c2:
                    2d:98:69:fa:10:f4:be:04:01:d8:3f:96:89:1d:b6:
                    e8:97:5f:b1:01:71:bc:4f:d3:5e:3c:01:74:41:79:
                    d4:38:93:6c:4e:9b:ab:13:96:28:09:c0:13:65:5d:
                    5b:69:aa:4c:93:a8:15:18:2a:f2:03:28:eb:c9:1b:
                    9e:2b:97:ba:05:c7:98:89:ab:c8:90:5f:33:22:59:
                    73:c0:11:6c:8e:c8:40:ef:95:40:4d:dc:18:9a:48:
                    ca:94:88:84:b5:b8:7c:ad:8a:63:a5:06:71:ad:67:
                    f5:64:c1:5e:2f:28:d5:77:18:9a:4e:e8:8f:93:0a:
                    8f:bb:65:03:ff:22:5d:f2:3b:07:95:d2:70:1f:9c:
                    e7:a0:ba:2b:7b:d7:77:87:f1:a9:0e:0b:d9:04:5c:
                    92:c8:8e:ac:0c:09:2f:0f:c2:19:bd:04:26:27:db:
                    2a:45:0c:a2:5d:65:af:ca:e3:49:3f:2b:54:a5:d6:
                    98:92:01:33:f9:d6:85:05:f5:e0:fc:97:3e:e5:a7:
                    c1:6c:21:12:b8:86:9a:04:5c:35:5d:4c:a7:8e:c2:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:01:26:E1:70:A5:33:53:AB:AD:14:FC:D3:3D:FE:F7:23:66:26
            X509v3 Authority Key Identifier:
                keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:50:69:77:e2:5f:3c:a6:e4:14:c8:25:eb:f4:36:f2:35:
         75:9f:ce:ce:f6:68:33:06:b1:cc:4e:cc:4f:c1:eb:95:f8:eb:
         42:07:08:dd:54:39:0e:48:6a:7a:dc:1f:af:d3:78:f2:b3:dc:
         81:f8:8e:28:7b:1a:90:5e:60:24:55:07:46:3f:b3:89:a4:67:
         73:34:50:d1:a9:03:67:d1:2e:f1:df:f4:ba:33:13:3e:3f:30:
         c3:a5:01:63:0b:e8:5d:e8:b2:fa:03:b1:6e:c1:2b:8b:70:be:
         bb:ad:c1:fd:ce:d6:68:fe:61:06:8f:69:cd:26:51:12:31:4a:
         d4:af:d0:80:77:5d:8e:9f:5b:b0:de:72:92:b2:43:14:94:0c:
         23:79:79:4a:70:95:05:31:f8:2b:f7:18:32:05:7d:0e:d6:75:
         ba:18:7c:ad:94:95:94:d9:ab:0e:c9:f0:0a:6e:62:d5:ef:aa:
         d5:20:84:0d:d7:1b:5e:58:e8:0a:d5:9f:50:71:f8:ff:dc:93:
         9b:14:55:87:1e:31:71:27:a9:e6:3b:ba:f5:2d:2f:1a:72:01:
         dd:c0:f2:a0:5b:bf:6f:13:bd:8c:7e:16:bf:22:29:f3:3d:b6:
         62:0e:8b:92:e8:2b:6e:7a:5e:44:04:e9:fb:24:a1:f5:ba:0e:
         3c:bb:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:18 2025 by rpki-client