Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          1dXd4IfseRfs4iwctfoU+eeDbpWyYoaXf60B8cWc8nc=
Subject key identifier:   6A:C5:56:C3:79:79:04:8D:1B:E0:BF:5C:D7:86:82:3E:52:5B:C8:9B
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       01974E8E4CFF34C0FC7850F8DD213FDE669E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0969
Signing time:             Sun 08 Jun 2025 08:00:38 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:38 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:38 +0000
Files and hashes:         1: 3qRTh1P9OF6YOqHXqOqHDoBD8eg.roa (hash: nQAh302ZIgG0KfyPwfrx+gnhB19jlHvyVNBKKuKcDas=)
                          2: ArCJqTzX_sEk_DHHySgQMJUeLC8.roa (hash: c2rd+JdXNOMDPKYRrrcQLA7xUjenlWywhht/2+icFHw=)
                          3: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: dQHvx9ucCkfm21o86nyFBaIuRpbBewJjX16pP0RRsiQ=)
                          4: qpS5E6zN7Za0_vE5y0g_cgWncv8.roa (hash: pquZUL+QWeP5wqagKXvKjrrNKaLrKYUyFpeUGLpB5cY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:4c:ff:34:c0:fc:78:50:f8:dd:21:3f:de:66:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Jun  8 08:00:38 2025 GMT
            Not After : Jun  9 08:00:38 2025 GMT
        Subject: CN=6ac556c37979048d1be0bf5cd786823e525bc89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:e9:64:be:50:d1:b5:22:39:fe:d4:47:b3:
                    88:da:d5:11:2b:14:c3:49:57:ca:1f:35:50:d8:95:
                    82:a3:e4:d3:1d:4a:99:b9:72:ba:80:6b:d6:15:b7:
                    f9:e0:81:0a:d2:5c:de:a4:d0:0a:33:0e:7b:30:bd:
                    6e:14:43:c6:9b:a6:a8:27:db:11:ee:90:64:e6:1a:
                    e4:8c:87:66:4b:c3:c9:ac:4a:62:81:80:0d:c6:e6:
                    67:2b:52:9d:92:60:21:13:12:42:1f:f2:05:19:6a:
                    5e:87:0b:fd:16:ff:bf:e7:79:bb:99:3c:39:0a:29:
                    cf:27:95:1f:c8:28:e8:ef:5e:25:7a:6d:72:5f:f2:
                    a8:40:36:fc:e7:14:fd:27:74:51:8b:19:f5:8a:ce:
                    35:b5:c4:2f:2b:71:11:4d:36:45:e5:da:0d:7d:05:
                    87:54:b2:98:42:e1:cf:3d:b1:89:5d:36:de:46:4b:
                    3b:4c:8e:09:26:fb:52:5b:93:53:72:43:e6:72:8a:
                    84:47:f3:6c:49:da:c7:9b:72:c1:04:39:19:91:d7:
                    e6:57:f5:b5:40:bb:b9:25:ee:3e:01:31:6d:d8:3c:
                    67:fc:8b:8e:74:cc:77:48:82:1c:8f:6b:44:37:9e:
                    75:50:d1:05:b4:0e:0d:9b:a3:d1:df:77:0a:eb:ea:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C5:56:C3:79:79:04:8D:1B:E0:BF:5C:D7:86:82:3E:52:5B:C8:9B
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d3:c1:de:e0:eb:12:88:af:a7:9d:80:f3:5f:f6:03:8c:05:
         a7:ed:b8:c6:c7:49:19:0d:55:13:5a:e8:84:bb:50:02:e1:fa:
         5e:04:09:a0:8c:34:a1:f5:5a:3b:a6:d4:37:ec:13:f1:7e:a9:
         e0:32:05:be:dc:2a:06:a7:3c:1e:20:3b:51:25:f4:1f:0d:34:
         cd:23:bc:90:c6:2c:3b:ad:6f:c3:50:f9:c8:19:d0:51:cb:1b:
         34:8f:d1:b4:63:8c:33:8a:7f:56:98:26:67:85:d4:1e:fc:69:
         bd:58:1c:2a:f7:0e:59:58:07:01:5f:8e:62:4c:74:cb:d6:a3:
         6b:bc:e4:27:eb:c5:98:9b:c8:7b:83:56:03:15:5f:06:61:0a:
         64:8a:18:4f:e8:38:77:03:d8:ca:94:71:a1:89:75:f1:33:a1:
         65:4f:3b:d3:b4:2c:fc:41:dc:00:a5:82:6d:10:86:4f:e3:84:
         42:27:8c:98:a5:e2:73:b7:ff:0f:50:ad:aa:ca:02:56:56:d8:
         8f:73:56:84:aa:3f:97:96:ba:15:fb:04:b6:c1:67:8f:ce:ad:
         c4:9c:44:33:75:71:ad:06:c5:f7:86:d8:ba:55:53:6b:09:0b:
         c6:eb:fe:12:bc:70:40:7e:ec:af:4d:fa:f8:73:63:dd:54:3f:
         47:ef:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:16:12 2025 by rpki-client