Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File:                     2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier:          D9npjA4ytP47Zqh/9veQTG/yz0xfTDKl/aIFxO4/WBk=
Subject key identifier:   FC:93:04:3F:25:1D:AF:17:C7:E4:2F:04:07:CD:6E:EE:DA:BF:D2:C6
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer:       /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial:       0198499C36AB4BBBED354A17572937C687F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number:          06AD
Signing time:             Sun 27 Jul 2025 02:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:31 +0000
Files and hashes:         1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: YJ55B/GkBqWjcFgt8wWLlxTeb9ajIFLiuDOCA0GH4kY=)
                          2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:36:ab:4b:bb:ed:35:4a:17:57:29:37:c6:87:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
        Validity
            Not Before: Jul 27 02:00:31 2025 GMT
            Not After : Jul 28 02:00:31 2025 GMT
        Subject: CN=fc93043f251daf17c7e42f0407cd6eeedabfd2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:92:a4:7a:48:50:c5:e5:36:7e:2b:40:76:
                    74:32:7d:30:37:9e:21:e5:60:04:e1:dc:b0:91:4b:
                    11:9d:8a:34:c1:58:0e:e5:f9:eb:14:e2:10:6e:e5:
                    5c:57:f3:9e:60:66:1e:ec:5a:2e:01:f1:70:09:22:
                    69:d7:bb:9f:f8:97:c5:15:79:d6:cc:d1:a7:4d:86:
                    d4:3e:10:48:27:d6:93:04:f8:02:58:aa:93:c6:15:
                    3d:20:0d:95:34:b1:7b:06:fc:97:b7:96:60:af:48:
                    f5:88:6b:11:39:26:8d:4c:f9:4d:00:e5:3a:0c:1d:
                    47:8d:89:d9:b4:0c:5e:75:83:ca:b2:92:1e:6a:ef:
                    1c:5c:5a:69:14:05:22:1d:72:c5:d1:f4:a4:1a:44:
                    7f:ce:80:bd:45:c2:03:52:48:c0:48:24:16:4f:a2:
                    e9:84:d6:76:bd:2a:f8:3d:92:fb:a8:6a:12:1f:8c:
                    cd:22:b9:f8:a7:2d:2f:cd:34:b5:63:a8:df:3d:0e:
                    21:0b:25:23:76:33:b0:06:36:03:ad:98:42:4a:35:
                    8a:94:97:7b:98:21:90:b8:a1:5f:c1:3e:29:e3:36:
                    a4:ae:70:d2:a6:d4:73:ae:05:11:d2:3e:d9:7a:20:
                    c4:42:ae:e7:4f:03:98:1d:23:fc:b7:f5:87:19:ed:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:93:04:3F:25:1D:AF:17:C7:E4:2F:04:07:CD:6E:EE:DA:BF:D2:C6
            X509v3 Authority Key Identifier:
                keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:dc:1c:ff:83:f8:17:92:80:5f:17:e1:41:dc:02:c9:36:
         c7:ae:4a:5f:a8:db:ad:26:0d:e6:fe:29:16:e8:76:fd:d3:e9:
         81:af:0f:c2:a8:4b:14:2a:57:66:32:e0:fc:c3:ff:7e:9c:cf:
         f7:f1:56:ea:a7:78:31:a8:06:35:ed:60:02:7f:3b:c9:5f:6f:
         74:0d:cd:ac:ef:01:65:ae:cd:e5:5d:df:a8:24:6a:65:7e:af:
         99:a3:d4:03:33:0b:fb:9b:55:50:95:79:13:ec:4d:9d:50:24:
         47:25:a9:75:2b:f0:ea:d7:02:b8:bb:26:1e:a0:80:ed:1b:e9:
         a4:12:9c:48:8d:3e:7c:22:95:53:82:33:b1:6f:8d:59:a1:7a:
         c4:20:85:06:06:78:36:8c:97:9b:6f:2a:0e:2d:1f:11:15:54:
         f4:b3:ff:cb:30:f3:1c:ca:ab:9d:08:21:13:2f:e5:09:6d:c4:
         24:8a:60:01:5f:53:0c:52:23:c5:43:c8:e2:ff:05:6e:c2:b4:
         61:5f:22:43:f6:7e:7c:a8:6a:3f:c7:40:fd:f1:f9:ca:ea:d1:
         41:ef:52:19:e8:1a:07:30:3c:2b:4d:b9:60:44:da:b3:8d:75:
         7b:b7:f9:7f:5d:f5:c2:9d:0c:35:4f:44:08:20:21:23:3f:35:
         a8:15:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:25 2025 by rpki-client