Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File:                     5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier:          /YVQByoaNKure88dlUjuIvRleHgy1OGq2BilWVMDGJA=
Subject key identifier:   3D:C4:EC:32:8E:06:89:2A:57:0F:7C:95:C1:36:A8:69:E7:EF:47:B6
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer:       /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial:       01977A541D11FFF0358A6F1904E62BD84D64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number:          037E
Signing time:             Mon 16 Jun 2025 20:00:22 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:22 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:22 +0000
Files and hashes:         1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: 3+UpqYHKn2GHFeVv1oxLQNKaf0GMW2GzoXCHgUb9VaQ=)
                          2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:1d:11:ff:f0:35:8a:6f:19:04:e6:2b:d8:4d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
        Validity
            Not Before: Jun 16 20:00:22 2025 GMT
            Not After : Jun 17 20:00:22 2025 GMT
        Subject: CN=3dc4ec328e06892a570f7c95c136a869e7ef47b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:b3:bc:26:9c:99:7f:d0:0c:b8:a3:82:53:
                    ee:6a:7f:e3:ca:d1:9c:96:ed:ed:78:4e:3e:ee:37:
                    fb:31:87:58:da:37:91:a3:c4:a0:a7:cf:a1:21:51:
                    74:f2:14:ca:98:7c:fb:01:9b:d8:5e:4a:b4:e2:7f:
                    e7:03:3e:8a:cc:b0:73:37:5c:42:8e:13:41:7b:1b:
                    9b:d9:00:93:de:87:d0:27:8d:23:41:97:c2:53:0c:
                    0f:0f:dc:64:26:d8:7c:ef:00:34:dd:92:29:fc:c1:
                    8d:53:26:30:48:fe:d1:a0:e2:96:96:c5:34:83:e4:
                    8b:4c:10:1c:7d:f8:bb:38:59:9f:16:2b:1d:7c:2c:
                    6c:33:fe:11:50:43:be:32:9a:9c:f1:96:cd:09:a9:
                    ab:f8:4d:e9:03:a0:ef:44:73:4d:de:c8:08:6d:0e:
                    30:cb:cd:58:ac:9f:b2:e6:97:b4:56:83:b3:f4:c8:
                    ac:d7:68:a5:d0:27:67:7f:49:12:a4:65:d8:12:d2:
                    2f:c7:fa:3d:da:8f:c9:48:4d:0d:2e:f8:bd:4f:d8:
                    f9:b4:d8:e1:21:b3:23:8e:4f:99:db:61:c4:a8:28:
                    92:c1:3d:37:4c:e1:36:18:29:ed:a0:65:18:35:00:
                    fb:c8:7c:fd:18:f3:48:e1:7c:35:cf:68:84:c8:25:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C4:EC:32:8E:06:89:2A:57:0F:7C:95:C1:36:A8:69:E7:EF:47:B6
            X509v3 Authority Key Identifier:
                keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ec:54:86:f4:d5:c8:64:51:26:08:13:e0:18:82:8b:e2:0e:
         15:48:ce:9d:85:1e:87:b7:d4:9f:3b:88:86:ff:83:0b:2d:c4:
         cd:ab:10:9d:52:d5:65:69:ea:34:d2:9d:79:e6:a6:29:f2:56:
         bb:a2:72:41:51:3a:01:6f:21:1f:b4:27:73:b1:bc:bf:e4:cc:
         7a:e9:b8:3c:34:19:92:9c:00:33:f4:fa:d1:01:a7:94:9a:3a:
         d8:38:58:1e:17:dd:af:c6:d5:7b:fb:17:a4:ef:b1:83:aa:40:
         12:0e:61:ec:86:cf:71:cd:db:2e:db:d2:ce:15:ae:07:f1:79:
         d9:56:4e:e6:7d:25:1e:dc:66:73:7a:c7:44:ab:8a:33:89:1e:
         f7:5a:16:c3:2c:6a:af:dc:71:5b:13:37:40:db:7f:aa:72:ad:
         b3:4f:a7:90:62:76:2c:1f:4f:9b:be:1d:7c:9e:03:3f:1e:d2:
         28:96:b7:98:dd:30:69:45:03:80:24:0a:a8:f7:51:d5:5c:af:
         0f:30:9a:a0:b4:90:04:d8:9f:76:b1:fb:14:6d:68:ec:36:e5:
         56:cc:13:66:9e:e4:83:4f:67:73:32:d2:84:b8:72:9f:f7:a3:
         06:53:2e:24:43:bd:33:ca:b1:77:7e:47:de:cf:17:dd:95:55:
         9e:58:40:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:33:44 2025 by rpki-client