Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File:                     pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier:          d8FiXptN3NUxyr0Dsafl4flnkWNepYlXtHV1rROiUtE=
Subject key identifier:   05:30:DA:8A:E4:BF:03:9C:43:6A:C9:32:61:B3:DD:DB:87:3B:BF:84
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer:       /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial:       019768BC03F7FE79CAD2147C669AF9CEC463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number:          0CA6
Signing time:             Fri 13 Jun 2025 10:00:41 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:41 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:41 +0000
Files and hashes:         1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
                          2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: btNL4zEMY04m6H1M16pWrnzS1fL0ij8P7yO0cCEZAXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:03:f7:fe:79:ca:d2:14:7c:66:9a:f9:ce:c4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
        Validity
            Not Before: Jun 13 10:00:41 2025 GMT
            Not After : Jun 14 10:00:41 2025 GMT
        Subject: CN=0530da8ae4bf039c436ac93261b3dddb873bbf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:4c:59:3d:f9:a1:8e:1c:a0:39:7d:f7:4a:
                    b2:b9:95:a5:41:7e:ac:c5:9c:36:b1:d5:e9:b6:7f:
                    a3:f2:4a:66:37:30:f3:c3:8e:7c:a3:b4:73:a2:7e:
                    fd:f9:08:cf:be:e1:45:49:16:86:d9:a0:f1:41:60:
                    48:a3:a9:2a:8d:fe:15:e0:2c:4b:05:97:77:66:64:
                    aa:26:8e:70:4b:80:b8:1f:10:46:c8:f6:5f:92:e7:
                    18:2a:76:b0:c6:68:57:54:d5:fd:9b:ee:5f:08:41:
                    9d:d3:cf:f4:c4:a2:2d:4b:2d:c5:0f:2e:59:a4:3a:
                    51:d1:7c:7b:0e:70:fc:c7:6b:d8:3c:45:8f:31:89:
                    6c:d0:d4:bc:f5:aa:95:0e:ec:4c:7b:65:a9:53:08:
                    1d:e3:be:0e:3b:b8:4f:fb:53:19:4f:5a:a5:a4:e7:
                    9b:3f:96:a3:ba:94:85:c1:06:5f:ef:4b:43:a0:27:
                    a5:1f:64:27:c6:b7:de:b3:aa:4d:20:5a:15:f1:8b:
                    94:53:e2:da:02:9b:32:99:99:8b:da:26:45:e8:36:
                    9f:24:31:c5:70:1a:05:d3:85:44:cd:91:e3:85:b0:
                    97:e6:81:d3:68:5e:16:5b:1e:f9:2b:2e:cf:2d:7e:
                    b7:fb:27:6b:bc:31:5c:a1:b1:ef:ee:a4:97:ef:9a:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:30:DA:8A:E4:BF:03:9C:43:6A:C9:32:61:B3:DD:DB:87:3B:BF:84
            X509v3 Authority Key Identifier:
                keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:f6:83:d2:14:4d:b4:85:9e:b0:2c:e8:67:01:4e:08:3e:d7:
         dc:db:36:b8:83:df:f4:97:8a:b3:22:f8:c3:54:b2:55:be:66:
         51:7f:10:73:35:04:55:72:a1:ee:89:46:48:de:4f:42:8d:04:
         3d:7e:1b:9e:78:df:02:23:00:2e:73:ba:1b:37:b2:41:21:59:
         c3:33:63:0e:c2:e8:6b:cd:d3:33:12:c8:ab:20:7c:fd:c8:c3:
         7c:59:85:61:98:91:20:17:2d:53:3d:e4:6a:c3:95:f3:d3:cb:
         d7:2a:35:8d:fe:da:7f:5e:5f:f7:81:b3:2a:67:ff:70:a8:1e:
         9a:a8:1a:6a:79:47:9f:7c:41:d6:f0:bc:67:37:ef:bc:03:09:
         f5:9d:25:f2:5b:75:0c:56:eb:ad:41:9c:88:85:50:16:da:c9:
         9c:31:af:5a:d1:60:31:f2:17:7c:5c:8a:47:ce:e6:80:e8:94:
         5d:ad:56:68:a3:1b:d4:c0:c7:1c:3e:5f:0f:47:af:11:7e:bc:
         53:1a:a4:fd:df:72:71:bb:b3:0f:64:f0:bd:b9:56:b4:81:2e:
         db:5d:4d:1b:43:a5:46:b8:c9:4b:25:5a:68:63:fd:ab:f7:ca:
         3a:22:32:a7:bc:e5:ce:c2:3f:47:e7:03:b6:75:e2:e4:18:d3:
         ce:2d:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:07 2025 by rpki-client