Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File:                     rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier:          iDPfRACeSshP4AUeDcdXdC9IP7tHibtgeMEtsJ2nFYs=
Subject key identifier:   3E:ED:38:8F:FA:F0:13:49:94:34:6F:AA:54:EF:D3:4E:FB:5F:C6:6D
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer:       /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial:       019771BF6D85E174BA417B0B5E6CEC2A7DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number:          56
Signing time:             Sun 15 Jun 2025 04:01:00 +0000
Manifest this update:     Sun 15 Jun 2025 04:01:00 +0000
Manifest next update:     Mon 16 Jun 2025 04:01:00 +0000
Files and hashes:         1: JwcsFNQrZCdoPIC0dUAZcHysppo.roa (hash: FF/t/K7QA2jOU+o41VoGD+jy9dDqvhlPL/hHJRA3zzM=)
                          2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: NVHYslNtIKi08LgjcL/06Wo2VKxiqmOTrOC88/DYmMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:6d:85:e1:74:ba:41:7b:0b:5e:6c:ec:2a:7d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
        Validity
            Not Before: Jun 15 04:01:00 2025 GMT
            Not After : Jun 16 04:01:00 2025 GMT
        Subject: CN=3eed388ffaf0134994346faa54efd34efb5fc66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:88:88:4b:92:59:e5:dc:a4:ff:10:e1:d0:
                    dd:1f:b0:e8:bf:cc:9b:7a:d7:67:f1:c9:be:3a:e4:
                    74:29:8c:e7:9f:6b:9e:82:a8:7b:d6:a4:ad:4c:6b:
                    74:94:d8:f8:63:31:ec:a2:6f:0e:c2:50:66:3d:9f:
                    f1:b5:c8:c4:46:04:c3:ab:5c:50:b4:9c:b5:51:bb:
                    f0:e8:20:17:fe:b4:29:5f:a9:35:ed:8c:fd:40:13:
                    6a:d4:f4:d4:2a:36:80:51:0a:4d:0b:0c:b5:40:a7:
                    d4:18:85:90:42:f5:91:89:b8:cf:79:f7:26:c3:45:
                    0c:5b:29:b8:3e:2d:52:c7:c7:ca:f6:f2:6b:b3:00:
                    0c:b1:ef:80:96:91:66:4a:e9:dd:ce:f8:36:e9:5b:
                    a7:6e:7b:f7:fc:81:c4:18:65:7c:68:e9:2c:6b:17:
                    5b:c0:3f:4a:c8:4c:cc:e8:95:46:64:e5:4a:27:3e:
                    7f:9e:29:d2:65:c3:85:db:65:2c:40:a3:08:82:c0:
                    20:fc:d0:9b:d0:7a:7c:b0:f7:b7:a2:63:49:1e:f8:
                    64:c7:ce:f4:74:c3:af:35:46:88:6c:8b:c3:18:77:
                    7a:fb:6e:0c:84:97:84:ad:89:41:8d:86:5c:bd:49:
                    26:4e:8c:e1:b6:cb:f6:b5:90:5f:4b:d1:67:81:d5:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:ED:38:8F:FA:F0:13:49:94:34:6F:AA:54:EF:D3:4E:FB:5F:C6:6D
            X509v3 Authority Key Identifier:
                keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:42:8e:69:03:b8:a5:98:de:d6:ec:2a:00:a1:18:32:e2:ad:
         eb:a2:e5:b5:d6:83:7e:1c:a8:90:37:00:19:0b:4c:e9:20:fe:
         9e:07:06:1c:80:9a:02:f1:24:0f:70:90:fa:29:36:c5:58:82:
         a9:20:a4:29:b7:a0:13:85:20:5e:a4:c6:51:fd:63:14:ae:12:
         f6:80:58:39:1c:04:33:c6:1c:8b:af:10:3b:59:e8:88:3e:a9:
         09:de:06:18:9b:83:0c:09:5a:c7:76:2c:ef:56:a7:e8:1d:45:
         65:3e:41:ab:8d:12:ab:9a:65:f7:c6:3e:cf:51:7f:15:81:ee:
         c2:9a:7b:ad:bf:70:8e:2a:e7:0f:12:8c:67:7f:85:f1:0a:03:
         be:25:ea:37:31:62:f9:34:23:a0:1a:5c:4b:b1:ae:43:3f:d0:
         3c:ab:02:a7:b0:e6:f8:dd:d6:d7:b0:da:66:cd:6d:d3:17:48:
         01:8e:9d:f1:3b:ec:5a:95:71:f7:85:3e:3f:ee:4f:07:6d:73:
         fe:e8:81:bc:6f:a8:df:91:2b:ae:76:fd:cb:9e:64:04:0f:a6:
         10:1d:6f:40:c6:8e:09:c5:e5:f7:5d:16:5e:52:e1:ec:6a:14:
         12:81:92:14:ad:0c:bf:77:8a:f6:aa:32:12:d4:13:06:03:d4:
         75:5c:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:11:53 2025 by rpki-client