Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File:                     qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier:          IxaWIqbVXGhzydLFQysmqkK9nji5XkeP9w7dd2O8W/8=
Subject key identifier:   CB:E7:1D:B1:D1:11:68:3D:04:63:15:AC:80:A8:1D:99:BE:1A:6C:6C
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer:       /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial:       019776E5D6DF42A1D2AA0C8A4C054528B87E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number:          03EE
Signing time:             Mon 16 Jun 2025 04:01:03 +0000
Manifest this update:     Mon 16 Jun 2025 04:01:03 +0000
Manifest next update:     Tue 17 Jun 2025 04:01:03 +0000
Files and hashes:         1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=)
                          2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: 7gnbxULMZjgXvGCQK96/VkC6t1otim0oLqsHCEcTIeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:d6:df:42:a1:d2:aa:0c:8a:4c:05:45:28:b8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
        Validity
            Not Before: Jun 16 04:01:03 2025 GMT
            Not After : Jun 17 04:01:03 2025 GMT
        Subject: CN=cbe71db1d111683d046315ac80a81d99be1a6c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:32:0d:46:98:ca:ba:d7:54:d7:bf:95:60:
                    f2:03:45:8f:14:7e:cc:64:2f:1d:9e:a3:94:9b:ab:
                    44:3a:aa:43:75:7b:c0:b6:05:15:8c:a0:a4:5f:e5:
                    24:2c:23:00:cf:19:b7:82:8e:5a:3f:93:4c:89:da:
                    0f:b7:ab:3e:a6:25:51:5a:2c:07:b4:ff:28:92:12:
                    4f:75:5f:de:48:cc:21:c6:50:3c:bd:4b:fa:b7:ca:
                    82:ce:5b:b8:7d:ad:50:43:73:51:75:c8:7e:6d:d8:
                    63:8c:e0:30:28:e5:61:14:33:41:1c:6c:f3:8e:68:
                    6f:ac:3f:08:e7:35:2f:d0:be:38:2a:d2:02:4d:97:
                    08:3c:87:36:f0:6e:24:f7:74:e7:43:a4:04:25:ce:
                    13:1d:31:be:3d:ef:0b:92:9e:c7:bb:96:bf:e5:29:
                    8f:5c:a7:4f:4a:4e:12:ca:fc:52:31:4b:0d:17:ab:
                    53:e0:b7:96:20:9a:98:c7:09:79:5c:a8:ee:90:22:
                    3f:16:40:99:50:f5:47:77:d7:0d:aa:fe:47:7a:ae:
                    26:3f:c3:1c:a0:ce:03:f1:be:d3:66:7d:ad:a7:39:
                    52:e3:4f:09:2d:58:44:32:e1:12:38:20:05:79:06:
                    43:b2:4f:df:db:48:19:5e:06:0a:d8:64:97:5e:65:
                    b4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E7:1D:B1:D1:11:68:3D:04:63:15:AC:80:A8:1D:99:BE:1A:6C:6C
            X509v3 Authority Key Identifier:
                keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c5:e7:a6:2f:01:a9:33:ab:42:87:ec:4e:04:d9:46:16:6b:
         27:99:07:46:10:2e:d3:f1:b0:5d:04:7f:ad:bd:f2:87:ba:1a:
         db:3e:c3:f4:19:f4:47:05:32:70:58:2d:57:47:ab:0a:18:91:
         b6:24:29:e6:a2:9d:8f:50:c8:e9:0d:af:4e:cb:43:b1:7b:8b:
         94:06:66:cd:4f:98:ae:e4:75:aa:86:99:fd:a6:45:1d:48:09:
         ba:4a:18:d9:4b:f0:05:d5:f4:bc:e2:b3:3e:98:e6:88:3c:e5:
         33:1c:a1:bb:42:c2:ac:c7:63:3b:1d:c8:01:8f:e5:e9:4f:49:
         00:2e:1e:6e:9f:90:81:86:ad:91:9a:3b:53:01:f2:b8:05:80:
         03:e8:ad:0e:5f:51:4d:f7:b1:d8:34:ff:8b:a4:e4:8b:8c:34:
         9a:54:7c:a7:1a:c2:e0:bf:43:4c:4c:df:6f:32:f9:3f:07:d9:
         f3:43:67:94:a6:78:ea:c6:b2:a1:a7:e6:a2:53:59:69:fd:ac:
         3e:d3:cb:ce:40:a6:a6:73:74:a8:5d:0e:f9:b6:39:ea:23:89:
         01:6d:c6:6a:0b:27:e9:86:6e:41:a0:f0:8a:95:36:e1:b6:a9:
         69:21:12:b2:be:86:ed:e3:63:9a:c1:6f:bf:0c:12:0f:b1:8b:
         14:fb:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:17:52 2025 by rpki-client