Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File:                     Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier:          QeS0Kwdf/XB9qspI1869ZUVVJdQoZejwmcaoOdLje60=
Subject key identifier:   9E:35:2F:67:CB:B1:A9:AE:A8:D5:AF:DC:75:3D:EB:19:F9:2E:53:4B
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer:       /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial:       01976884EC0EBEA4F7D706F60B10007C528A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number:          079F
Signing time:             Fri 13 Jun 2025 09:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:30 +0000
Files and hashes:         1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: j0AbAS0eJ5TqF/MZMWCeuDW0UE9rn9oP1ST26VpEnIY=)
                          2: pOmwZuP6Q-BxWvua_azIxnDrtaY.roa (hash: 1Gh5sWhYQZnz90m+gcSVdtSatfk353c30A4J7Tl7xJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:ec:0e:be:a4:f7:d7:06:f6:0b:10:00:7c:52:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
        Validity
            Not Before: Jun 13 09:00:30 2025 GMT
            Not After : Jun 14 09:00:30 2025 GMT
        Subject: CN=9e352f67cbb1a9aea8d5afdc753deb19f92e534b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:82:75:7c:56:bf:4e:b1:33:73:58:4a:dc:
                    ff:58:5b:e8:1b:a2:7b:68:80:e9:04:7e:ad:2b:fc:
                    14:5b:9e:ee:b2:79:7b:34:ed:63:71:98:f1:c7:0b:
                    d2:92:4d:c7:68:ea:49:41:54:07:12:4f:62:d6:d2:
                    dd:e6:13:10:0b:0d:d4:2b:52:c3:5f:66:cf:95:14:
                    42:b4:fd:46:03:e7:ae:cf:3a:aa:00:e7:e8:00:83:
                    a2:4a:50:74:1e:c3:f1:55:b4:e6:35:dc:23:22:11:
                    15:8d:47:75:73:31:0d:4c:f2:44:97:e0:1d:5b:0b:
                    74:c4:28:c3:b1:4f:26:2e:db:b4:84:26:e1:46:3e:
                    f6:38:26:b0:18:af:0e:97:52:43:66:67:b0:68:59:
                    35:3d:4a:21:4e:10:23:23:6e:a7:76:14:f9:24:03:
                    df:60:54:28:c5:e5:3e:21:ad:0b:07:ad:44:6f:d5:
                    a4:65:c2:1e:b9:d9:d1:81:44:c9:5f:6b:87:2b:18:
                    8f:cf:b0:f4:68:5c:6f:24:ff:3e:49:e0:19:17:fb:
                    8b:7e:21:ae:72:8d:ee:a1:03:5d:9c:86:c4:bd:54:
                    f5:ec:67:96:a5:34:30:08:9e:91:f8:f3:d5:34:8b:
                    49:c5:b0:bf:2b:a2:75:b4:b9:ce:ee:dd:d8:fe:15:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:2F:67:CB:B1:A9:AE:A8:D5:AF:DC:75:3D:EB:19:F9:2E:53:4B
            X509v3 Authority Key Identifier:
                keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:4a:97:36:95:91:56:26:25:16:0e:75:e6:ff:22:57:cd:
         fa:ec:97:e6:0f:10:fc:62:56:8f:75:e0:b2:e3:5a:3c:0f:78:
         1a:d2:f4:31:bb:23:41:96:96:04:cb:80:67:5d:4a:5b:70:c4:
         ba:eb:aa:5c:f0:c6:06:04:fd:c3:a0:32:8f:fe:78:84:fa:6f:
         ff:65:3a:dc:1c:fa:47:a8:5c:71:11:49:5d:17:b7:6c:95:e4:
         e5:15:30:5b:2b:9e:ee:6e:9b:bc:08:e9:c1:05:6d:a0:b8:59:
         7a:d3:8f:fd:8c:61:08:cf:49:43:00:01:6f:48:de:5c:80:df:
         45:89:12:79:a9:73:71:62:c3:e4:ad:c3:48:1b:85:82:db:21:
         55:01:b0:11:6b:53:3b:65:5b:7e:e5:a5:22:a8:1d:26:ca:ec:
         1b:83:a1:ce:66:45:a3:c1:7c:b0:23:49:a1:44:73:29:19:d3:
         1a:4c:c3:9e:32:ba:fa:8e:56:f6:52:f3:15:bd:05:42:4f:57:
         7d:63:05:17:ce:b8:32:dd:2c:ba:83:7c:4b:db:05:5d:65:b0:
         7e:1a:f7:fd:5b:12:81:06:e1:25:9f:9a:40:a2:e5:a3:0e:41:
         61:ca:4c:ff:08:06:ff:ff:1e:46:7b:51:e5:3b:74:a2:f4:56:
         4d:25:ce:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:24 2025 by rpki-client