Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File:                     cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier:          izADSS9pVC95tWvZvZJrOsW3qlnoXmuslawO0kYsmfU=
Subject key identifier:   A9:55:82:3D:37:1B:05:8A:A2:D7:DC:14:D8:FD:19:D0:0E:8F:FA:4C
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       01976C2AC77E351DF483CD798E399925F93C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number:          0F24
Signing time:             Sat 14 Jun 2025 02:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:32 +0000
Files and hashes:         1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=)
                          2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: I4ENPIczXHAX3sfT77CRrRIMZfJ/TiQCusNST+aeDhk=)
                          3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=)
                          4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:c7:7e:35:1d:f4:83:cd:79:8e:39:99:25:f9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: Jun 14 02:00:32 2025 GMT
            Not After : Jun 15 02:00:32 2025 GMT
        Subject: CN=a955823d371b058aa2d7dc14d8fd19d00e8ffa4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:60:d3:45:4f:64:98:a5:27:fa:b2:10:80:
                    7e:ca:31:34:0c:fe:97:2f:7d:34:fe:db:a0:2a:b6:
                    01:f2:3b:0b:34:bd:db:6d:85:1f:00:00:6c:20:9a:
                    02:eb:bd:04:eb:54:2c:d8:fd:c7:18:a4:81:cf:10:
                    27:4d:e8:82:31:e7:e0:38:e9:34:87:93:2f:1a:8b:
                    bd:df:d1:53:23:37:96:97:90:c7:02:16:96:2c:b9:
                    7d:49:97:5d:a6:85:38:14:96:4e:09:13:d4:51:72:
                    9e:9c:dd:75:09:00:3b:b2:89:a2:85:56:f8:14:48:
                    42:f5:d5:03:75:1b:fb:00:14:05:31:a9:e5:79:1a:
                    93:d1:84:13:46:9a:7d:af:78:60:ba:0e:88:89:56:
                    7c:96:ca:08:0d:63:a3:13:d5:a1:ed:8c:e9:2a:92:
                    5e:ff:b7:40:a0:18:39:df:78:b6:53:a1:1f:b9:8d:
                    71:4a:1b:b0:25:b4:36:4f:e1:90:19:bd:04:09:25:
                    9f:60:bd:82:3c:64:4d:b5:52:71:7e:64:a0:2d:b6:
                    10:45:1f:e4:70:55:d7:95:7e:e3:4a:51:ba:98:d7:
                    15:fa:84:d2:08:9b:4d:8e:1a:81:96:bb:cb:33:a7:
                    e4:5a:7f:fd:6b:7a:4f:64:4e:e9:b4:4c:5b:36:a0:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:55:82:3D:37:1B:05:8A:A2:D7:DC:14:D8:FD:19:D0:0E:8F:FA:4C
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:ed:a8:f0:3a:41:9b:7f:8d:c5:30:be:fe:7d:bb:17:61:
         0e:bd:98:41:57:46:bf:2c:45:07:64:f5:69:d4:0a:89:63:dd:
         8d:dc:96:2e:b1:60:50:c2:55:fd:47:28:98:1b:c9:e5:23:6b:
         1c:52:2f:a8:ac:e3:ff:6f:ec:0a:00:84:16:0b:3d:0d:2f:c3:
         b0:73:95:75:60:ce:46:8c:f9:ad:51:23:c2:80:fa:94:35:26:
         39:fb:a4:e2:fd:92:a5:dc:d4:c5:7f:eb:ab:d5:0c:a7:97:86:
         e4:91:34:0a:af:8d:63:9c:14:0f:a9:6b:4a:f3:53:64:c6:40:
         9c:a1:5f:5f:2c:2b:34:9d:82:4e:d9:5c:5a:e6:c0:3b:fb:9c:
         e8:37:a1:46:80:31:80:99:9e:ed:9f:19:49:07:20:2f:5a:8c:
         c9:d1:c7:9f:67:8f:5b:c9:1c:5e:ce:dc:8a:7a:03:8a:27:91:
         11:e4:e9:74:cb:5c:8d:df:f4:34:39:8a:1b:3a:0a:dc:cc:dc:
         43:e2:a4:68:4d:7b:4a:c5:b6:b0:81:74:b9:b6:e7:90:c3:d3:
         66:7e:1d:df:86:d6:5a:f2:d4:99:fb:6b:44:80:43:72:af:be:
         4f:c6:79:86:60:a3:7e:16:8d:f8:0d:5e:ec:ec:4a:50:f5:0b:
         df:aa:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:56:08 2025 by rpki-client