Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File:                     q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier:          W7nA7OMvZa58vlC41wm3lpkX6MggkSuFSFCWYY297Ac=
Subject key identifier:   D9:A2:ED:EE:DA:AB:CE:0E:66:2D:62:65:B5:37:83:7D:BC:78:1A:BE
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer:       /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial:       01976BBD9329FDB940E53192499CC39B8224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number:          0464
Signing time:             Sat 14 Jun 2025 00:01:15 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:15 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:15 +0000
Files and hashes:         1: auh_CELZVQItOo9vbdk8bNA5drU.roa (hash: lsZhhuWVu0Ccaib1jj0SXulSIcbRTpNBfg+1fElDPKs=)
                          2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: Gipcuy96DZxKE2DAyiTK0kosQhNr9zlNVplSmvNh+Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:93:29:fd:b9:40:e5:31:92:49:9c:c3:9b:82:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
        Validity
            Not Before: Jun 14 00:01:15 2025 GMT
            Not After : Jun 15 00:01:15 2025 GMT
        Subject: CN=d9a2edeedaabce0e662d6265b537837dbc781abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:63:d7:da:15:c9:ed:53:60:e3:36:99:e5:44:
                    9b:2b:1b:69:e7:d0:d2:a8:3b:6a:70:2d:4e:53:95:
                    c7:82:2a:0e:a4:86:53:65:c8:14:c3:55:99:7a:7f:
                    f4:5b:6d:17:52:b4:b7:45:de:ed:95:ff:41:46:e8:
                    67:f9:bf:e6:99:7a:08:22:4d:99:da:85:68:03:8d:
                    ed:cb:d2:46:74:87:ee:2e:cc:6f:70:2f:d2:65:96:
                    e3:f5:8c:97:98:fe:d3:14:87:5d:59:a1:0f:d3:34:
                    b8:7e:08:18:a6:6f:f6:74:2f:33:c6:64:ec:e0:ca:
                    c7:96:6b:70:0a:35:dc:83:bb:d2:6e:63:35:4d:a2:
                    6b:1c:b7:a5:3d:98:18:65:6b:d0:78:a7:a9:32:16:
                    56:15:5f:8d:02:a2:e6:f1:22:de:db:67:c3:3e:b5:
                    40:d8:62:5c:f1:24:f6:de:d5:c0:c8:62:80:fb:63:
                    7c:57:06:12:a1:1d:fb:aa:24:9f:98:21:8a:85:77:
                    6e:87:fc:c0:74:e0:3c:6c:ae:9a:d8:88:9f:33:45:
                    ac:92:65:3b:21:c4:75:34:fb:3b:02:6f:24:b3:c1:
                    05:aa:9b:c3:73:94:95:6a:fd:6e:7f:97:54:a8:a0:
                    17:0f:45:68:bd:c7:96:3a:82:30:59:5f:96:93:be:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A2:ED:EE:DA:AB:CE:0E:66:2D:62:65:B5:37:83:7D:BC:78:1A:BE
            X509v3 Authority Key Identifier:
                keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:f1:de:ba:bd:95:c9:75:5e:d7:f6:0e:a7:65:b4:0a:b3:
         06:98:a4:ba:3a:e6:d3:60:e3:fd:ac:19:e2:30:6b:b5:2c:fc:
         be:ea:18:bd:a3:ee:15:24:49:d8:08:44:7e:16:13:b8:78:ef:
         c5:54:64:a7:b3:7a:17:34:04:88:c5:73:10:b3:42:71:5a:f9:
         7c:20:26:30:36:e6:ae:6f:48:49:8c:b3:4d:a3:93:a4:89:8e:
         11:15:6a:16:88:3e:4c:69:17:9d:71:34:2c:1b:91:fb:ca:e1:
         27:75:1e:d8:9e:e2:0f:76:0f:3c:80:c5:70:a3:85:08:73:fa:
         83:ca:f9:af:5f:47:e5:60:b8:c5:e7:51:b6:49:59:4b:ed:bf:
         73:b3:ab:b5:87:f0:5b:57:0c:e0:c9:5e:11:13:8b:f0:fe:86:
         c9:d4:2b:0e:80:d6:69:b9:8c:43:0e:56:83:b6:0e:ed:8d:42:
         7e:85:c4:e9:d1:d2:8f:ee:38:10:c7:42:74:8c:fd:04:53:1d:
         e3:1f:ed:fc:e4:79:7b:81:d6:57:77:aa:97:7f:b8:b4:5c:0b:
         e3:ff:a9:7f:d2:48:d5:32:36:d0:c2:9b:6f:52:53:84:b5:3c:
         1a:91:88:50:22:8b:80:a5:bc:ba:fd:93:f5:21:26:b8:bd:3a:
         5c:94:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:51 2025 by rpki-client