Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File:                     CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier:          RWdgerEoX2AGiWbX48fq5Gjw7f+j/jdCxManMcXRW+Q=
Subject key identifier:   74:68:B5:73:73:1E:6F:CA:40:67:14:24:43:EB:56:9F:E3:C1:8D:77
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer:       /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial:       01975BDC016A4D3A296E6E4FCA8FEE4CE4D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number:          1588
Signing time:             Tue 10 Jun 2025 22:00:34 +0000
Manifest this update:     Tue 10 Jun 2025 22:00:34 +0000
Manifest next update:     Wed 11 Jun 2025 22:00:34 +0000
Files and hashes:         1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: J6g9s6nKLa1PIEr1VAGMTRVTwRP5MjGdoI+DIMizcl8=)
                          2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:dc:01:6a:4d:3a:29:6e:6e:4f:ca:8f:ee:4c:e4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
        Validity
            Not Before: Jun 10 22:00:34 2025 GMT
            Not After : Jun 11 22:00:34 2025 GMT
        Subject: CN=7468b573731e6fca4067142443eb569fe3c18d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:8a:e0:2c:be:81:33:05:a5:00:20:03:de:
                    9b:ea:e9:b1:d5:03:44:23:71:54:f4:ef:e1:a4:3b:
                    a2:00:3d:bc:48:53:74:00:af:d0:1d:84:db:40:58:
                    5b:5e:3a:da:f1:61:c1:85:3f:4f:5d:5d:5e:66:49:
                    50:89:c7:7a:2d:fd:15:86:98:d2:21:33:88:5b:95:
                    e6:b5:e7:23:61:5a:9c:26:a9:3f:d0:12:f5:43:43:
                    46:93:51:8d:53:f3:ad:49:2b:b6:9c:48:58:0e:b7:
                    ec:f4:96:87:38:0b:87:af:01:9e:da:d5:2f:4c:1f:
                    81:25:e3:13:8c:fa:df:d1:ec:9a:22:3e:fe:2c:7d:
                    d2:87:7e:dd:c4:bb:ca:ee:12:ed:af:00:7b:51:f8:
                    47:e9:94:f5:1b:63:e8:02:8a:49:71:06:94:ca:98:
                    ac:24:e0:a5:f4:6a:ff:a3:db:19:71:8a:aa:b7:33:
                    f6:67:d6:58:f6:0d:30:9c:86:b6:74:2d:14:82:f5:
                    be:eb:88:17:85:9e:88:1e:cb:7f:cc:2e:ae:33:90:
                    fe:82:af:24:7a:dd:c9:d5:2c:e2:3a:8f:44:c9:e7:
                    5a:94:57:b2:24:a9:9b:82:5e:3b:5c:d1:52:9c:b1:
                    9c:2d:6d:18:0f:5d:9d:7b:03:cf:10:84:e4:74:38:
                    7c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:68:B5:73:73:1E:6F:CA:40:67:14:24:43:EB:56:9F:E3:C1:8D:77
            X509v3 Authority Key Identifier:
                keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9d:4d:9c:52:28:22:76:42:02:fd:5c:b0:78:e1:e1:b4:c9:
         ae:28:c7:13:ba:3e:f1:a9:1a:a5:ec:37:c2:7b:d0:1f:62:91:
         a3:fb:a3:25:fd:d2:ca:c4:b5:cd:d7:ad:10:54:33:c3:d0:86:
         7a:57:62:c8:ed:84:97:ac:cb:f7:fb:76:b8:71:4a:dd:5e:59:
         f1:c3:05:1d:99:96:6f:76:7b:c0:21:54:cc:56:2f:85:66:23:
         40:da:66:77:74:c1:43:b7:5f:5d:dd:18:58:a0:7c:40:00:84:
         d4:f2:a3:54:72:62:97:60:c8:65:ff:58:c1:18:c8:0a:ca:14:
         9c:e8:64:81:cc:06:77:c3:c5:1d:33:af:07:a2:00:f3:1d:3b:
         19:af:e2:2d:2f:b5:1e:7b:7e:85:d0:4f:6d:c2:23:73:6a:41:
         c1:17:cf:7e:09:64:37:80:f8:0e:24:c9:ac:e5:f3:78:50:9d:
         f8:ef:ba:0a:5c:05:09:f8:3e:c8:3d:f2:b3:9e:8a:19:e3:5e:
         0d:ed:84:cb:55:ff:d6:49:68:61:cc:32:c4:6a:c8:56:e6:6a:
         3f:aa:18:3a:fc:16:77:d0:64:be:3a:16:fb:99:f2:b0:88:70:
         71:a4:bf:8c:b2:3b:4f:e5:57:e4:41:ae:d3:a8:8f:bb:29:5f:
         31:27:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:49:56 2025 by rpki-client