Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File:                     rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier:          fOg0qYOg1haWmqlMmo2JcMN0taNPPFWoEk2vs7KBAt0=
Subject key identifier:   A4:37:1D:2F:29:F6:9D:DB:6E:47:9B:12:1F:E3:3B:54:B3:13:1D:7C
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer:       /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial:       01984A0A5C0832C72E1AFA7052EDB8CA4BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number:          C6
Signing time:             Sun 27 Jul 2025 04:00:49 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:49 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:49 +0000
Files and hashes:         1: JwcsFNQrZCdoPIC0dUAZcHysppo.roa (hash: FF/t/K7QA2jOU+o41VoGD+jy9dDqvhlPL/hHJRA3zzM=)
                          2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: +7qHm8/3zdz954efnAaudBIg+1fObQF5COQWKpsZh0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:5c:08:32:c7:2e:1a:fa:70:52:ed:b8:ca:4b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
        Validity
            Not Before: Jul 27 04:00:49 2025 GMT
            Not After : Jul 28 04:00:49 2025 GMT
        Subject: CN=a4371d2f29f69ddb6e479b121fe33b54b3131d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:e8:0d:01:6e:3c:b9:42:57:9a:f8:a5:40:
                    18:90:fc:12:e1:dd:6e:c7:98:81:82:9b:e8:94:32:
                    0c:25:f7:ca:83:a5:8f:31:48:f3:49:04:ec:de:c8:
                    8c:25:b5:45:95:a1:d1:13:af:c4:10:76:79:8a:f6:
                    90:7e:b7:56:f0:c2:46:6a:c6:64:32:c5:b1:bc:ee:
                    fe:d6:b7:5e:a7:69:78:4a:c6:6f:14:73:de:bd:62:
                    9b:78:c1:37:71:14:65:b0:56:95:b8:8b:9e:58:f8:
                    f4:40:0a:da:c7:45:72:b2:90:7d:7d:be:56:5b:6f:
                    9e:77:cb:0d:67:53:39:3a:36:22:35:da:68:57:31:
                    a7:19:30:e4:96:00:73:68:e7:d1:28:fe:9f:61:6f:
                    ad:8b:35:dd:09:d8:db:38:fc:24:14:b7:3c:78:a4:
                    74:70:20:5e:cf:00:78:6e:1b:c4:22:65:24:40:42:
                    ee:45:62:c6:93:a9:74:60:be:c5:84:2b:ea:b5:43:
                    c7:34:ea:e0:d7:a9:62:cc:18:2c:7d:a4:5e:ec:82:
                    c2:73:70:f1:99:b6:06:15:82:6a:4e:2b:8b:b9:ef:
                    79:d5:df:fc:e5:35:87:36:c0:a7:80:a4:e5:14:2f:
                    1a:ad:ae:8c:a5:4d:fd:c2:09:86:18:b8:e5:3f:aa:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:37:1D:2F:29:F6:9D:DB:6E:47:9B:12:1F:E3:3B:54:B3:13:1D:7C
            X509v3 Authority Key Identifier:
                keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:53:e0:b3:b0:7f:2a:28:41:86:a1:18:7a:f5:ec:4f:b8:a2:
         74:12:30:78:19:c1:cf:68:cd:5e:eb:a4:5a:9d:ec:4c:65:12:
         e8:73:2d:c0:75:b3:84:9f:a9:94:c5:cc:e6:8d:4d:b0:c3:a6:
         85:ce:8c:1e:47:17:4b:9b:e7:4d:58:29:20:a0:a1:ee:de:41:
         25:74:71:b0:ba:73:08:9a:79:ab:6c:88:5d:9a:83:50:40:6c:
         ad:4d:12:a3:ea:6d:d4:c6:f4:ee:19:34:33:d3:fc:0a:c1:84:
         99:39:95:be:a1:86:17:ac:65:74:db:9c:7b:2c:6b:89:81:1e:
         60:96:1f:72:f3:e0:1e:ae:cc:5b:fa:ac:e6:2e:e0:4d:ef:c4:
         f4:a0:7d:c2:e4:d3:1a:9d:6c:05:c3:ec:2d:3e:07:a1:a6:13:
         8d:56:e1:6b:82:75:d8:da:bc:ec:74:46:13:28:fd:d2:12:4c:
         8c:40:a9:1a:05:fb:a0:12:81:2d:f0:c3:99:de:1f:9e:79:7c:
         79:e3:ac:1e:94:91:19:26:71:a4:ec:45:ee:7b:41:44:9a:bc:
         4e:2e:2e:49:63:46:3a:be:40:8d:19:cf:29:ca:94:0a:47:ab:
         28:2d:3e:f0:c7:b3:5f:03:3c:80:4a:f3:eb:e1:7c:ca:ab:a2:
         9d:55:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:19:07 2025 by rpki-client