Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File:                     QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier:          0an11nSi5tBBGyuWOeOpY+3QdLjGnbWwbLnh3lH46Ws=
Subject key identifier:   17:F6:F1:E1:E2:F6:B9:1D:AF:F9:47:8E:01:77:74:88:91:50:CD:AB
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer:       /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial:       01976EF534E1352DFE061AAD4EBF031D31A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number:          0E68
Signing time:             Sat 14 Jun 2025 15:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:52 +0000
Files and hashes:         1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
                          2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: TqLGYV8ve2Ca48ZptSQOsCqia3alPgC442uLqOZ4nqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:34:e1:35:2d:fe:06:1a:ad:4e:bf:03:1d:31:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
        Validity
            Not Before: Jun 14 15:00:52 2025 GMT
            Not After : Jun 15 15:00:52 2025 GMT
        Subject: CN=17f6f1e1e2f6b91daff9478e017774889150cdab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:a4:a9:eb:42:88:af:0e:07:5f:b3:d9:92:
                    12:7d:8f:fd:e9:f7:aa:4c:88:06:7e:7c:d9:36:fd:
                    74:79:09:01:e8:51:dd:74:8f:90:8f:df:8c:ba:c2:
                    f0:e5:62:f2:ff:cc:5e:11:09:b7:cf:b9:47:9a:f7:
                    db:d8:c5:c2:8e:c1:c7:68:09:00:62:eb:9b:c0:be:
                    cf:e2:b8:ac:34:c5:32:09:07:af:d6:d2:57:2f:cf:
                    48:73:94:e5:7c:19:f9:c5:cf:30:33:7d:19:ed:4d:
                    c2:4d:14:d9:b5:b7:b7:ee:8d:17:2a:58:4e:21:d1:
                    76:88:98:30:d9:c4:64:fd:24:52:cd:10:0e:47:7c:
                    0d:92:14:a7:c9:27:36:11:75:d2:42:fc:18:3c:e8:
                    df:bc:a7:a1:ef:3f:d7:65:a5:83:2a:dd:43:0b:79:
                    1c:76:1f:64:aa:ea:92:47:a6:23:32:50:08:37:42:
                    09:a5:0f:e0:fb:38:9a:49:b2:ac:34:cd:ac:02:3f:
                    f6:f1:59:40:c8:9e:0a:01:f1:00:57:ed:52:bd:24:
                    b6:47:ea:57:8c:ca:9e:8a:cc:00:a8:d1:09:7b:17:
                    6a:36:ef:3f:2d:60:78:e9:b5:77:99:58:52:32:ba:
                    5f:fc:3e:c1:39:f3:9e:ea:63:55:14:16:ee:81:f9:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F6:F1:E1:E2:F6:B9:1D:AF:F9:47:8E:01:77:74:88:91:50:CD:AB
            X509v3 Authority Key Identifier:
                keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:84:f2:87:fb:64:d3:a7:e6:28:67:51:60:b8:e4:2c:bf:8a:
         a1:87:ab:35:3c:26:fc:d7:cb:84:aa:45:10:9c:b8:1f:e3:c1:
         95:87:04:64:4a:46:ad:7b:75:20:3c:a6:d6:14:6a:42:83:f2:
         97:26:3d:68:7d:00:4d:62:f3:e3:d9:c6:c2:84:e7:6f:4a:b9:
         93:65:fe:11:a2:82:64:b2:44:d8:89:f2:24:78:a6:a4:09:8f:
         c9:f5:d5:39:e4:18:88:52:1f:33:36:63:01:0c:aa:87:98:62:
         4f:5c:5b:63:cb:e5:7c:1a:be:c7:cd:0f:2a:88:c8:1a:7e:e4:
         3f:98:fc:d5:3b:12:86:78:80:94:6d:a7:97:6b:68:ae:6f:e1:
         87:67:c1:26:79:47:c3:14:f6:d4:6b:68:72:e5:cc:8e:91:ca:
         ef:88:92:ec:ff:03:89:73:0a:2b:3b:65:46:f9:a8:f7:e6:96:
         24:7c:3a:56:8c:4b:2c:54:99:21:17:c4:be:4a:59:77:f7:6e:
         6a:24:de:a6:7c:b0:0b:05:1e:36:d0:41:dd:ef:f2:ed:7b:98:
         5a:5c:55:a9:5f:4d:df:29:0b:88:f5:9e:6a:7e:29:a2:da:40:
         c3:0b:30:32:5c:7e:06:a0:56:4c:f9:22:89:e2:60:bf:30:f3:
         66:53:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:38:05 2025 by rpki-client