Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
File:                     rqVXfKLwuifftTsIjifG2Uty7_c.mft (raw, json)
Hash identifier:          ci3dnoB8QEGjqMVeCR6WwqcONcSKXLRwW9HiBTr6rp4=
Subject key identifier:   41:74:7D:03:22:15:1C:4B:2A:09:60:29:19:C8:F7:93:46:26:6A:2E
Authority key identifier: AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
Certificate issuer:       /CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
Certificate serial:       01976F2C1731CAEFB560A073761DC81BE262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
Manifest number:          0C84
Signing time:             Sat 14 Jun 2025 16:00:49 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:49 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:49 +0000
Files and hashes:         1: rqVXfKLwuifftTsIjifG2Uty7_c.crl (hash: MSZB4cWyMgLB+JIO0oLsmLwSVtOIWcafW7DDEv8QuvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:17:31:ca:ef:b5:60:a0:73:76:1d:c8:1b:e2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
        Validity
            Not Before: Jun 14 16:00:49 2025 GMT
            Not After : Jun 15 16:00:49 2025 GMT
        Subject: CN=41747d0322151c4b2a09602919c8f79346266a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:99:c6:d7:77:cf:83:cb:27:b0:e8:c9:c9:
                    06:c3:4d:f9:ec:f5:82:59:68:6e:21:f9:86:c0:d0:
                    a5:88:ab:da:23:99:3b:2e:dd:33:a9:7e:a5:05:ed:
                    12:f7:07:f8:8a:58:57:6b:5c:52:5b:34:e7:51:92:
                    65:72:f9:fa:c6:46:32:05:0d:1c:1f:5a:8e:3e:bf:
                    66:06:9d:77:44:74:e0:ec:01:81:14:02:4c:cd:18:
                    9c:21:52:69:fa:6f:95:95:ab:7e:3f:14:75:96:d7:
                    9f:97:c6:1a:7b:cd:32:4c:28:af:6b:29:b2:56:3d:
                    9a:6b:38:6f:de:a1:7b:c8:1d:a1:66:7f:88:57:74:
                    29:e5:98:34:39:e6:0b:1e:89:30:9d:f0:c7:81:e1:
                    c4:15:1e:aa:87:a7:14:ab:4e:a7:0d:e8:e6:3b:9a:
                    35:8d:29:0e:08:ea:dc:5d:f3:3c:46:5a:1f:c1:02:
                    3d:0c:a4:4a:bf:42:96:a3:43:ec:75:be:fc:05:34:
                    16:ad:db:99:ba:eb:19:57:80:24:74:e6:48:3b:9a:
                    a0:be:53:69:ad:c5:a3:c1:a3:a3:3e:30:13:26:d3:
                    94:d5:bd:18:76:25:e8:2d:0e:a8:5a:55:04:67:ca:
                    ea:33:89:2a:53:88:09:da:ef:3d:4a:b6:bb:47:8c:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:74:7D:03:22:15:1C:4B:2A:09:60:29:19:C8:F7:93:46:26:6A:2E
            X509v3 Authority Key Identifier:
                keyid:AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:66:0a:69:92:82:e7:4e:32:ba:4e:5c:f8:b0:08:b1:e1:
         9e:99:29:79:4e:ad:c9:9c:9a:fd:dc:90:87:aa:73:c0:0f:3b:
         d2:05:06:af:38:a3:8a:c2:b3:8b:1d:8e:96:71:1e:43:79:a5:
         d0:a5:ba:f1:7d:f4:e9:5c:6e:17:6b:70:21:b5:06:47:09:7e:
         3f:b1:aa:93:15:cf:c1:ed:b6:a1:b3:d0:ef:83:af:64:07:de:
         94:8b:90:86:6d:58:5f:10:92:77:3b:89:31:62:ab:1d:1d:01:
         ea:fe:58:12:69:d4:7b:78:0f:d7:90:62:09:d9:30:d7:81:8d:
         97:f2:f6:5d:75:df:00:9a:cc:14:81:be:82:a9:bd:ad:43:bf:
         b8:e6:9b:c0:d9:a7:c0:0d:f6:6c:e3:1f:77:be:fa:21:ed:98:
         3e:ee:79:1e:4f:db:2b:fc:ba:ee:82:f5:9a:7a:85:8f:84:c4:
         94:eb:36:58:b1:37:b5:55:1a:19:48:6f:f8:cc:68:ab:5d:68:
         68:91:ab:85:e7:69:ea:d8:36:45:79:e1:34:f0:27:e2:45:05:
         64:ba:67:62:fe:5e:7c:0f:10:db:ba:7f:1a:77:8f:a4:e3:8f:
         b1:7f:56:86:b0:ec:c6:a8:2d:8d:bd:1a:48:1b:a8:9d:23:63:
         81:14:c3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:06:38 2025 by rpki-client