Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File:                     qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier:          tfOdtl9buPIiWo7tANGbyMYebh0mtNvXtkHZQqJvmzU=
Subject key identifier:   8B:94:7F:17:20:39:68:1D:01:95:69:55:9E:41:0D:C1:73:9D:C6:60
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer:       /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial:       019766CDA797145208AAA6559D9470AAC945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number:          13C8
Signing time:             Fri 13 Jun 2025 01:00:42 +0000
Manifest this update:     Fri 13 Jun 2025 01:00:42 +0000
Manifest next update:     Sat 14 Jun 2025 01:00:42 +0000
Files and hashes:         1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: 3XOYdmu1aFZ3OoqHpECp8ag90FnIT9PG6xAB8vfvKIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:cd:a7:97:14:52:08:aa:a6:55:9d:94:70:aa:c9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
        Validity
            Not Before: Jun 13 01:00:42 2025 GMT
            Not After : Jun 14 01:00:42 2025 GMT
        Subject: CN=8b947f172039681d019569559e410dc1739dc660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d5:1d:3b:e6:19:39:d0:e0:5c:ec:08:72:2f:
                    23:55:a3:3c:b4:36:64:ad:06:30:dd:1a:bd:03:cf:
                    1c:bf:48:29:e8:94:80:e8:ba:35:0f:b5:e8:f5:a7:
                    46:b2:72:0b:55:81:9d:7b:f3:d6:19:36:b7:c6:01:
                    4c:84:75:16:30:10:f1:af:d9:5e:27:27:5f:d9:37:
                    ca:22:e5:7e:45:30:91:f6:b2:0b:d7:91:95:39:f3:
                    c2:04:01:32:64:4a:95:f8:fd:19:4f:16:f6:a8:85:
                    8f:ea:0e:19:79:f3:44:17:61:2d:3a:0e:d0:98:11:
                    e3:0d:f1:5f:53:64:74:99:0b:0c:2c:9e:be:91:ff:
                    bb:6a:18:59:4e:b8:49:69:7a:ef:0d:2d:49:05:c7:
                    6d:32:e2:91:d7:27:7c:af:8e:05:91:e6:27:47:30:
                    7a:9d:2d:d3:01:11:d2:ce:34:55:d1:6d:f0:56:08:
                    50:61:a3:cc:5e:90:b0:bd:60:8a:e0:e7:97:b4:6e:
                    86:ab:f5:0f:2d:72:44:24:9d:2e:8d:a1:88:dc:30:
                    b0:5a:90:a6:19:fa:be:a1:a8:24:72:b9:5e:60:76:
                    ea:b4:ca:15:b8:f5:d1:f5:25:b6:62:c2:d2:80:07:
                    81:0e:40:b2:1e:41:12:e3:8d:ed:6a:81:48:8b:ea:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:94:7F:17:20:39:68:1D:01:95:69:55:9E:41:0D:C1:73:9D:C6:60
            X509v3 Authority Key Identifier:
                keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:37:25:79:7d:da:b1:1e:42:8e:e1:1e:96:de:fb:66:35:33:
         0a:5c:b8:d7:be:dd:e8:75:e6:29:e1:39:0c:96:8d:76:70:b3:
         7f:13:1e:a1:56:0b:e2:81:fd:74:23:9e:4c:12:37:5d:35:d8:
         f2:39:4e:0c:65:ee:31:a2:78:76:d6:10:92:c9:74:07:cb:75:
         76:71:66:fb:a8:61:80:94:73:df:13:8d:8c:b8:95:26:a4:f5:
         58:9e:45:b0:75:66:bd:c6:99:cc:01:ba:22:3f:27:28:f5:e0:
         0a:54:77:69:18:14:96:c8:11:f1:33:dc:b6:58:54:72:b2:2e:
         2d:b0:87:ed:4e:38:c0:5d:1e:79:d1:e4:03:8c:88:b5:72:3f:
         fe:e1:b5:78:d9:10:e5:42:32:30:7a:e9:ec:5a:c5:9c:06:bb:
         29:35:2b:ce:28:41:fe:cd:f1:79:4d:79:58:62:f5:05:d6:3f:
         90:7f:00:97:7d:cd:2d:29:c8:fa:54:7d:67:69:12:4e:e9:5b:
         f1:f2:62:4b:e8:6b:3c:1a:5e:4f:1a:b8:ea:0d:3e:59:96:50:
         18:90:55:ee:ac:b3:96:12:5e:0c:4d:af:c3:62:c0:67:2a:46:
         2c:c6:57:d2:c2:c1:c7:3b:ba:30:0b:98:e7:b8:64:02:49:87:
         89:ec:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:51:42 2025 by rpki-client