Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File:                     qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier:          g+Y7JH04WpU3h8EfJ10Oud3KqrbNWBdmFkbTj5Jq8bo=
Subject key identifier:   07:81:C2:6E:3D:14:F1:E5:68:9B:09:1F:49:9B:EC:93:12:46:1C:94
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer:       /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial:       01974B1F84EA8143E0C55E6EC017DABA1142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number:          0609
Signing time:             Sat 07 Jun 2025 16:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:46 +0000
Files and hashes:         1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
                          2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: X5ZDvR9gHq8Av9iUihPQvEV+edav9Xho/RGksjCp/ZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:84:ea:81:43:e0:c5:5e:6e:c0:17:da:ba:11:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
        Validity
            Not Before: Jun  7 16:00:46 2025 GMT
            Not After : Jun  8 16:00:46 2025 GMT
        Subject: CN=0781c26e3d14f1e5689b091f499bec9312461c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:5e:a8:65:81:cf:fe:ea:cb:ce:95:42:18:
                    52:9b:4b:9f:ec:d0:62:38:7d:60:cc:82:11:43:c2:
                    39:46:ae:06:58:33:0e:29:42:c6:69:6c:ec:b9:8e:
                    01:87:00:79:4c:87:e2:b1:67:25:90:a7:c9:72:9c:
                    96:0f:90:00:ca:62:d9:ff:c3:5f:3f:8f:31:68:8f:
                    21:05:9f:7c:a4:53:d0:ee:89:7d:79:53:ab:17:65:
                    ea:ee:ee:cf:fa:99:fe:cd:91:13:09:e5:14:5c:42:
                    dd:57:7f:47:04:9f:04:02:7f:de:5d:7a:0d:03:7a:
                    56:4b:21:90:d4:81:c5:6f:e4:c3:3f:de:50:0f:9c:
                    12:af:22:a1:8e:95:f8:a9:ca:ec:44:22:14:87:ee:
                    de:f2:3f:f6:75:ca:99:f6:1c:05:30:88:bc:bf:cb:
                    20:87:e0:92:e3:6a:ae:b6:5f:a6:e7:4d:5e:52:24:
                    f7:ad:ee:0b:56:f8:1c:c9:a9:14:2c:a0:fe:f4:e7:
                    5a:e6:5f:7c:48:22:8e:ea:24:68:69:42:13:8d:ed:
                    df:b9:61:32:89:3a:b5:3c:4c:cc:26:60:29:02:ba:
                    eb:db:64:39:0c:42:99:db:f5:67:b2:72:0c:42:d0:
                    ad:64:79:32:f9:9f:5b:7f:d3:7e:bc:62:3a:ca:42:
                    3f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:81:C2:6E:3D:14:F1:E5:68:9B:09:1F:49:9B:EC:93:12:46:1C:94
            X509v3 Authority Key Identifier:
                keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:3d:2a:f5:58:b9:5f:48:88:85:ec:4a:62:3b:19:42:a2:
         94:70:fa:21:fa:d5:27:7a:89:5a:e7:5b:32:ed:0d:8f:f5:24:
         5b:db:5b:31:e4:f5:f1:51:39:1a:1f:26:45:2b:72:ea:af:54:
         43:3b:ea:91:16:00:87:7c:9a:bc:10:72:62:4e:d8:db:e9:0e:
         58:2e:cf:a5:9b:90:a0:e3:01:ca:78:eb:16:b6:f5:c9:90:c7:
         b1:2d:f9:18:ee:2e:a7:7d:6d:86:e6:98:5b:16:16:44:56:74:
         16:7a:65:63:86:29:ce:d9:77:d0:1f:0f:3a:9f:9d:5f:27:f5:
         c2:ca:e2:34:25:27:62:d8:9a:27:24:ba:2f:48:3b:a4:ae:4f:
         b6:6c:6e:a1:3e:0a:2e:d4:d6:b1:90:8c:e7:8e:56:ea:cf:43:
         40:8a:34:33:9d:db:8a:f5:19:84:47:8b:16:34:27:a9:65:f9:
         aa:37:4a:52:d3:c5:f3:4e:a4:df:f2:55:9f:00:b1:69:45:e4:
         1c:94:b7:e8:5b:0f:1b:1a:a7:c5:01:83:09:0b:45:eb:44:47:
         86:92:27:c4:4b:97:e2:3b:1c:b1:b3:d8:80:ee:0e:50:ef:35:
         f5:cf:50:73:f1:b9:fb:30:12:12:6c:3d:15:23:6e:99:9f:80:
         46:61:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:19:30 2025 by rpki-client