Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File:                     qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier:          KF7pQ0pnyAcfRijzR5jpxOhwNS0rDfaLlLE768nhAQI=
Subject key identifier:   6E:2E:8A:D9:B7:8F:D1:AB:F6:B6:B6:36:6B:19:1F:01:D6:A8:27:E1
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer:       /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial:       019746670FD1457377D2C818E08627940D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number:          0752
Signing time:             Fri 06 Jun 2025 18:00:48 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:48 +0000
Files and hashes:         1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
                          2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: Jpqh0aebgAIjGK4F5rncslEjcYB7c1LB4HJ0EeFxzb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:0f:d1:45:73:77:d2:c8:18:e0:86:27:94:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
        Validity
            Not Before: Jun  6 18:00:48 2025 GMT
            Not After : Jun  7 18:00:48 2025 GMT
        Subject: CN=6e2e8ad9b78fd1abf6b6b6366b191f01d6a827e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:e0:9c:dd:3f:40:e6:fc:9d:fe:54:2b:bd:
                    b0:64:c7:06:fc:64:74:9b:3f:12:14:65:09:5f:54:
                    9e:fd:85:54:72:44:c9:0b:85:9d:10:2e:be:1a:42:
                    6b:ee:a7:b2:f9:bb:fc:6a:c8:df:83:1e:18:ff:dc:
                    5f:39:0b:fa:8e:8d:66:6a:a7:60:63:5b:a5:d0:fa:
                    6e:7f:98:7f:0e:88:7a:93:b9:17:34:ca:7c:63:9f:
                    30:2f:0c:34:df:40:60:24:f6:f7:e0:29:3c:7f:a5:
                    fb:72:ff:9a:18:85:32:5c:78:e8:cb:43:31:e8:7c:
                    f6:4f:2a:a4:f4:cb:d8:86:f3:b0:8d:b2:38:be:f3:
                    96:09:19:db:5e:00:7b:fa:51:b7:8b:8c:48:c2:51:
                    63:d9:00:f4:64:f9:b1:57:f5:fb:37:20:b4:17:1a:
                    8e:97:34:15:49:9c:9b:34:ec:34:69:1f:b9:b3:99:
                    db:0d:f7:f2:a6:8a:24:70:70:47:b7:5f:8b:bd:6a:
                    90:66:ba:59:27:88:7a:11:a9:e3:6b:71:65:63:2f:
                    84:8f:80:d0:f3:f8:eb:e5:93:11:84:04:0e:31:c9:
                    73:5d:1a:e1:12:a0:64:16:c0:b0:3c:d4:fb:f0:91:
                    60:3e:40:c6:17:39:a5:bb:0a:20:88:e3:ee:89:4f:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2E:8A:D9:B7:8F:D1:AB:F6:B6:B6:36:6B:19:1F:01:D6:A8:27:E1
            X509v3 Authority Key Identifier:
                keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ec:f1:48:89:8c:47:33:30:cc:a5:15:02:45:88:05:22:51:
         e5:18:2a:90:0e:df:ce:55:62:1c:dc:54:d5:8d:80:45:5b:6a:
         d3:fa:bb:ff:53:4a:3a:38:f4:cf:8e:2f:ad:d0:65:27:17:75:
         7c:5c:6f:f7:ed:61:a3:e1:04:80:db:f2:72:72:d6:5f:41:92:
         6b:98:c1:b4:72:fc:58:5e:f3:03:89:91:3f:f8:2a:77:e8:94:
         c6:80:ae:59:74:06:21:bc:34:13:58:46:43:f5:e2:c9:4a:80:
         90:6d:ac:90:65:77:4e:57:97:77:9c:71:60:dc:f8:93:09:21:
         56:6e:72:18:93:cd:77:a8:69:21:d8:16:20:33:36:58:5e:b9:
         e5:1f:a1:d1:81:34:25:80:5e:32:44:5d:7b:7d:5d:87:91:4e:
         2b:5a:35:c4:0c:24:63:38:65:70:c1:3e:ea:a8:29:a4:03:b5:
         a6:59:fe:52:11:df:88:48:80:56:95:a1:93:bb:dc:1a:d8:c6:
         41:66:b3:74:66:cf:b3:7b:b8:3f:58:f2:6d:0d:87:b8:7e:b1:
         a9:a5:86:24:5b:23:75:a1:7f:80:04:50:61:e6:0f:13:54:c3:
         88:10:4d:a0:49:12:aa:72:7c:5e:95:aa:59:69:bf:83:15:22:
         67:71:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:32 2025 by rpki-client