Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File:                     Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier:          FQ2Dqwfy1sz/cZv4dDjHLioyyvxe8rTtpBzhPWKx6MQ=
Subject key identifier:   1C:60:FA:EA:6C:6F:F7:95:B7:79:EC:F3:CE:C5:7C:AF:9C:D8:A8:28
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer:       /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial:       0197741B9F42E857688F8188DF1DFF51AE64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 15:00:56 +0000
Manifest this update:     Sun 15 Jun 2025 15:00:56 +0000
Manifest next update:     Mon 16 Jun 2025 15:00:56 +0000
Files and hashes:         1: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: NkRlSIr+C0lxLbFvfY6+CKPyvRrYBNW8988AjCLOy2M=)
                          2: _k0OxqJ8CNa2nq6tzt4bUNoG6Sg.roa (hash: TBT+FD53tM1tzuAflJ2lZOj8tykRjtKXY5Xc3IXyQAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:1b:9f:42:e8:57:68:8f:81:88:df:1d:ff:51:ae:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
        Validity
            Not Before: Jun 15 15:00:56 2025 GMT
            Not After : Jun 16 15:00:56 2025 GMT
        Subject: CN=1c60faea6c6ff795b779ecf3cec57caf9cd8a828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:a2:2c:8a:d1:87:79:87:8c:8c:a6:07:51:
                    b7:78:78:28:8c:e7:e5:42:1d:aa:1e:45:55:0e:d0:
                    20:35:6d:6a:10:21:8f:49:70:58:4c:c4:30:42:e3:
                    de:2e:69:87:57:7a:f1:65:e3:d1:9f:a0:ec:63:0d:
                    bb:60:e1:9c:2f:8e:4c:fd:8f:07:b2:01:b2:2e:95:
                    64:6b:85:d3:f9:d0:89:d8:cc:eb:c4:d9:c1:26:f1:
                    81:ba:17:38:7a:29:50:14:9f:a7:85:1e:dc:08:73:
                    68:aa:ca:3a:e6:83:c5:91:1b:91:a0:2b:76:ac:4b:
                    36:93:c4:a4:22:49:b9:17:c5:74:1c:03:de:c9:9e:
                    54:dc:d7:0b:6b:69:09:79:07:2a:ed:e4:34:96:00:
                    c0:fd:57:f7:b8:2c:e1:74:26:fb:d9:dc:a3:82:66:
                    af:09:56:1d:39:3a:59:71:e0:ab:e5:5e:77:f0:7a:
                    a0:f1:1f:ea:93:4b:3a:7c:fa:29:e8:e8:e3:dd:04:
                    b0:a8:94:4a:ff:8b:fa:d9:be:6e:e2:fa:15:a9:35:
                    d0:64:1b:f3:2d:4f:80:3d:0c:39:06:16:6b:11:b2:
                    29:93:00:77:64:47:09:01:74:30:6b:0a:63:7c:f7:
                    96:fc:05:0f:a1:ce:d4:ad:4a:0e:4b:1f:a1:d0:80:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:60:FA:EA:6C:6F:F7:95:B7:79:EC:F3:CE:C5:7C:AF:9C:D8:A8:28
            X509v3 Authority Key Identifier:
                keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:87:38:b6:f7:d8:42:68:4e:3f:75:c6:2a:20:f8:d8:5d:6d:
         e4:f8:4c:86:b9:93:61:e5:65:15:72:a4:f2:74:7b:c2:03:77:
         0b:55:fb:ca:3f:39:78:05:aa:0f:13:f2:bf:6e:f2:9f:90:03:
         27:38:2b:91:ef:d8:af:b8:2f:4e:95:5e:1a:a5:2c:29:90:47:
         2e:3b:78:11:6e:ff:9a:36:fe:ff:95:5b:df:3c:ad:35:59:7d:
         89:db:2c:f9:44:47:4a:8f:f0:66:83:6f:68:36:d3:a0:e4:51:
         3f:f3:3f:f7:96:ca:07:d1:3c:a6:b7:12:8f:b6:8b:1a:d4:11:
         18:e7:bc:5f:22:64:28:71:c0:11:28:ff:62:b3:33:99:2a:15:
         fd:52:a7:1e:d6:e4:da:9f:8d:f2:35:89:11:62:55:d9:0a:5b:
         43:4f:62:37:98:d1:5e:9c:bb:aa:37:77:64:00:7f:fc:a7:11:
         21:76:f2:3c:c0:81:51:95:b3:e9:0a:0a:74:c4:2b:07:ae:c9:
         a1:ff:85:39:f8:80:a8:f6:03:28:af:67:3f:b1:0f:a2:27:cb:
         95:14:aa:fa:8b:ed:ee:24:88:73:bc:a8:c7:ee:93:38:96:f1:
         3e:4d:fd:02:ca:67:0f:7d:68:77:69:d2:5b:cf:fb:d5:cf:fa:
         95:11:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:45:07 2025 by rpki-client