Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File:                     qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier:          9YSUVNAMVy5ja3NLmQPLT9VIxpiSA9QU+KwsGTtrOsg=
Subject key identifier:   B6:A2:FD:E6:D6:37:A3:0B:01:3F:EE:67:7A:AE:29:44:A4:89:58:F7
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer:       /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial:       019779425D8555C2F0A8F9240069C2DEF95A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number:          0863
Signing time:             Mon 16 Jun 2025 15:01:21 +0000
Manifest this update:     Mon 16 Jun 2025 15:01:21 +0000
Manifest next update:     Tue 17 Jun 2025 15:01:21 +0000
Files and hashes:         1: ea2Y-dwaT445EGlgfXN8R70YRos.roa (hash: hFopTbVTP9tQkxA8ISdrfSlJKlSYxul+sHm5GKjmi5o=)
                          2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: Qgl8oTnLKNBxwysDAvypjOH3Tdh9lE9sMbTnngvTLBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:42:5d:85:55:c2:f0:a8:f9:24:00:69:c2:de:f9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
        Validity
            Not Before: Jun 16 15:01:21 2025 GMT
            Not After : Jun 17 15:01:21 2025 GMT
        Subject: CN=b6a2fde6d637a30b013fee677aae2944a48958f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:a9:c9:29:89:e8:f1:d2:9d:a5:02:fb:c6:
                    43:38:a3:a3:86:55:7e:83:c6:2e:52:d8:f6:e1:95:
                    f2:70:62:97:3c:1e:cf:66:02:97:74:d3:c0:16:3f:
                    a3:a0:dd:e6:db:48:8b:95:bf:32:64:43:8a:b5:1f:
                    f1:b6:fd:19:34:e7:99:7a:97:2c:f5:9b:60:53:b2:
                    7f:d5:ae:0c:c4:89:6b:41:c1:b4:3a:2c:5d:90:56:
                    40:b7:9a:b9:d4:e7:15:c2:b9:49:ec:98:26:64:16:
                    a5:e5:95:f8:b2:7c:07:78:1b:73:b0:78:23:95:2e:
                    1c:80:7e:ff:92:54:fd:82:e1:d3:a5:a1:ac:24:ca:
                    7f:06:04:d4:13:d8:58:7a:54:10:6e:84:37:a1:bf:
                    77:58:93:0d:7d:4a:06:a8:6a:af:70:06:9c:da:7a:
                    7a:df:29:12:1a:c6:7b:0a:40:2f:56:71:53:ee:4d:
                    4f:ad:5b:2b:b9:b6:ce:f8:c8:18:65:8b:18:cf:c9:
                    ae:e0:2f:a6:95:87:af:f7:95:53:00:9b:bc:5e:a5:
                    64:17:ff:01:88:b9:a4:09:78:82:46:01:37:38:9e:
                    77:21:88:70:12:c6:81:31:68:5c:fa:98:54:49:e6:
                    e2:9a:2d:ba:84:23:b2:88:f9:84:72:5d:19:cf:0c:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A2:FD:E6:D6:37:A3:0B:01:3F:EE:67:7A:AE:29:44:A4:89:58:F7
            X509v3 Authority Key Identifier:
                keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:46:b7:52:1e:32:59:01:f9:fc:64:59:ac:91:95:51:8f:61:
         fb:76:71:ae:e8:2d:14:af:30:51:34:12:19:95:71:00:11:28:
         86:c0:8a:6e:d2:0d:8b:56:cd:cf:82:58:24:86:b5:a8:0f:f0:
         21:da:ba:37:40:b2:83:ff:c0:0d:3c:c6:97:f3:ea:1a:2e:c5:
         95:33:06:7d:2c:8d:86:ee:8f:3c:e7:52:e2:04:b7:95:82:63:
         95:de:93:2b:b5:1d:63:db:35:76:43:dc:97:ec:1b:b1:e5:8f:
         c1:2c:94:52:ef:06:82:32:98:6f:de:ea:e3:6f:51:2f:ea:aa:
         2b:d8:66:ff:ab:67:18:f0:c3:8e:ea:24:e8:84:ed:f7:cc:ee:
         15:5e:f0:05:fb:ac:57:f1:10:15:39:c3:93:43:0b:3a:a1:f2:
         a3:c0:0c:5d:f7:2f:5f:54:d1:9f:b3:6c:28:5a:63:28:cf:f2:
         ca:5c:a9:e5:db:b6:9e:d1:fd:b3:c3:94:03:4e:30:8a:b6:28:
         b4:f9:b2:73:f6:c4:53:a4:6d:d2:e6:1a:3e:e7:8d:c1:67:3f:
         58:eb:45:43:db:3f:d7:9d:aa:4c:0e:90:87:ad:08:66:f5:b9:
         c0:92:81:28:71:30:61:79:86:11:d9:d4:5f:56:3c:59:38:fd:
         3a:2a:ca:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:35:21 2025 by rpki-client