Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File:                     sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier:          06fGyO6JrK1wVA+YhapUNBKrA9rrBa2WaCTpre6ca4U=
Subject key identifier:   78:3C:60:78:F8:E4:5C:16:1E:67:19:EA:58:D9:44:9E:66:82:1B:62
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer:       /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial:       0197684EA7EEC313FE942F54E67A1FCD7F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number:          151E
Signing time:             Fri 13 Jun 2025 08:01:14 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:14 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:14 +0000
Files and hashes:         1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=)
                          2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: 6QzSvDoqGMhwBFK7+H5d7lFuzzk779yAaIiYjtIvfOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:a7:ee:c3:13:fe:94:2f:54:e6:7a:1f:cd:7f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
        Validity
            Not Before: Jun 13 08:01:14 2025 GMT
            Not After : Jun 14 08:01:14 2025 GMT
        Subject: CN=783c6078f8e45c161e6719ea58d9449e66821b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:0a:df:60:98:5a:16:6d:20:4b:2d:40:ca:
                    ab:06:be:67:27:70:46:30:7f:78:0d:3c:16:4d:99:
                    02:05:09:91:07:d0:df:4d:d5:9d:8e:7a:7c:96:70:
                    99:5b:10:07:f0:ef:9f:ff:18:6d:69:72:1e:6b:12:
                    c8:6c:b2:9c:8a:09:8f:bd:ef:4d:19:90:e5:d6:8a:
                    76:ee:dd:32:6f:2b:d4:91:a3:8d:2c:a3:96:7c:25:
                    bc:bd:94:ce:c5:64:f0:ba:cc:04:0a:32:9c:a2:cc:
                    5d:97:7a:fc:3a:ec:a9:d7:8f:69:ed:3d:85:89:2f:
                    b1:1f:a2:27:1f:35:c6:01:e6:43:0f:e2:85:09:de:
                    7a:2a:ce:28:03:1b:bf:c4:31:b4:59:6a:0b:e6:66:
                    06:e5:b4:92:2c:dd:db:c0:6f:a3:9e:c9:30:0f:82:
                    b8:35:16:26:8a:c6:3c:84:f5:cb:80:65:e8:1f:58:
                    7f:e8:3e:80:e3:ed:a0:73:c0:44:a6:82:33:74:f1:
                    87:d0:ab:39:d9:a4:e8:5f:0a:65:6d:f1:88:40:2f:
                    a5:36:0f:c5:6a:01:db:04:69:9f:ea:a7:a2:70:e5:
                    f5:78:ff:1c:75:af:d9:39:04:fb:94:f7:04:72:e3:
                    ba:31:b8:9a:b8:2e:55:2c:f9:27:85:a2:b3:8a:1a:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3C:60:78:F8:E4:5C:16:1E:67:19:EA:58:D9:44:9E:66:82:1B:62
            X509v3 Authority Key Identifier:
                keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1d:26:3d:42:9b:c1:a3:04:c2:68:3a:4f:85:61:2c:da:4f:
         b7:08:eb:e5:77:57:a9:10:83:fc:73:85:7c:29:f7:3c:0a:1f:
         e6:8d:99:c5:0b:10:78:11:70:f7:47:85:41:4d:6a:59:0f:20:
         54:4b:8b:8a:0d:9c:c6:89:95:fd:f9:27:90:17:80:2d:33:54:
         fb:84:14:ed:17:14:62:ce:8a:3c:ed:ff:3c:69:07:00:92:34:
         c6:ad:19:18:d3:1d:e8:60:b5:55:9c:4e:0f:4c:af:c7:2f:a7:
         4f:15:98:24:94:ea:e2:a6:f2:5c:3c:c0:c9:ae:21:6e:a4:11:
         f5:f3:91:0d:9a:0e:9d:9c:e2:6f:73:ba:15:a8:4e:65:8d:87:
         a6:69:72:b9:90:ea:be:f8:82:e7:9b:20:e0:ac:82:91:35:f5:
         b3:2c:6f:e5:99:52:5f:4a:46:2c:93:fa:2e:15:73:4a:59:24:
         c1:d5:a7:95:1e:9a:01:4f:b1:d8:7b:03:91:59:8c:44:7d:b6:
         af:e4:e1:90:2e:ef:8a:78:52:ee:c8:3a:ba:46:a6:73:bd:9b:
         8c:20:00:a8:3d:61:2f:1e:5f:72:8d:f5:a2:cb:b0:dd:2a:8e:
         44:99:e7:49:cf:41:d4:5a:25:37:0a:f7:a8:6f:38:2b:0c:d9:
         13:f9:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:48 2025 by rpki-client