Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File:                     Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier:          yOSuqidMiKa3Wh2EVnfBqp3tMQyiOl9/eOVQ3dENsDY=
Subject key identifier:   3D:51:BD:62:7F:79:5F:FE:64:DE:26:4D:1F:50:D1:23:E6:61:3A:C2
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer:       /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial:       01976AE161E5E9E9A3A684F1B347A7A8C9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number:          14D9
Signing time:             Fri 13 Jun 2025 20:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 20:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 20:00:44 +0000
Files and hashes:         1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: wmYRyzJTJcH/MztAJ+k+ujSWMn3IGhEQIiMmKKXuLPU=)
                          2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:e1:61:e5:e9:e9:a3:a6:84:f1:b3:47:a7:a8:c9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
        Validity
            Not Before: Jun 13 20:00:44 2025 GMT
            Not After : Jun 14 20:00:44 2025 GMT
        Subject: CN=3d51bd627f795ffe64de264d1f50d123e6613ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7e:56:7a:53:64:3e:7f:48:58:c1:1d:f0:15:
                    d0:cb:b3:8d:2e:45:b2:cd:7d:95:40:8d:72:37:f4:
                    af:8f:5b:a9:41:45:2a:03:a0:44:7f:88:26:e7:8f:
                    a4:b0:a7:b2:7e:97:2c:3a:ea:56:2d:b5:5b:ed:f9:
                    19:e5:cd:0c:62:df:63:9e:41:3f:bc:fb:9b:c0:57:
                    f4:64:39:a4:fd:1e:90:86:02:b5:95:75:d0:d4:89:
                    27:48:4f:38:0c:cd:0b:c8:50:ba:38:5a:0c:5e:12:
                    95:80:53:27:d1:c1:65:3a:2f:51:34:38:62:dc:cf:
                    03:e7:8d:bf:45:c3:c5:b2:26:6b:8e:82:f4:b0:aa:
                    64:53:5f:a9:f6:9f:0b:d8:13:06:46:46:ba:f2:a6:
                    d4:28:64:79:29:63:00:39:f8:09:c7:11:9d:b1:ac:
                    16:96:0f:55:c4:9a:d9:86:68:3c:1a:85:51:62:92:
                    2e:a4:f4:7f:48:53:c8:81:0e:24:79:60:ec:4c:ab:
                    3e:6b:6b:1b:b1:47:ad:58:2e:9d:03:59:f4:20:18:
                    f2:c8:1a:51:b2:5b:7a:33:bf:9f:df:e7:4d:49:38:
                    1c:26:eb:4d:2e:f5:10:d7:6f:81:07:25:0c:84:26:
                    38:69:a0:1c:7d:cb:3a:f8:4b:b1:8f:29:00:a9:71:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:51:BD:62:7F:79:5F:FE:64:DE:26:4D:1F:50:D1:23:E6:61:3A:C2
            X509v3 Authority Key Identifier:
                keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:ef:cd:26:b2:e7:fb:c3:e6:c6:4a:b6:6b:f2:7e:00:66:
         ea:db:21:a0:8a:fe:a0:90:6e:d5:ad:20:a2:19:34:e1:28:12:
         e4:b1:fc:c2:4d:bf:a9:be:28:9b:68:4c:95:6c:dd:6f:df:d2:
         4e:ce:17:97:c5:12:31:cd:4e:51:e3:aa:ea:fa:2d:19:08:95:
         93:dc:bc:cc:6e:8c:48:4f:7d:29:6b:ee:00:eb:37:85:d0:87:
         f9:37:b1:00:c2:c3:f8:1b:48:65:14:8a:e2:0d:46:0d:5a:39:
         9a:04:d7:85:9b:28:1d:a3:04:3b:df:f1:f5:e9:5a:38:60:01:
         24:e1:e7:3d:d2:54:8e:84:38:18:27:e3:80:22:7e:0e:19:91:
         c9:53:aa:b3:21:1f:5f:06:16:6d:56:69:6f:3a:30:4a:02:e3:
         61:c6:a3:47:42:e8:a5:33:67:32:89:67:dc:05:43:cf:ec:21:
         9a:e6:60:1e:5f:d4:78:b7:c4:f1:5e:8b:60:b9:d0:75:48:a9:
         ae:95:1b:4e:d3:06:4e:27:4a:ec:29:2e:cc:50:f9:6f:53:f1:
         b4:aa:dd:4c:8d:15:29:60:f5:56:4a:08:3b:b7:a1:05:12:2b:
         67:3e:3c:25:47:3b:b3:14:51:0c:b4:90:d1:b8:41:1e:a3:25:
         5b:0a:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 03:11:20 2025 by rpki-client