Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File:                     qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier:          +HgYfln6xw8KXPI7mW+aAMoc1YXqdLEUrdQ+b+3W8t8=
Subject key identifier:   39:24:8C:BD:C0:18:A6:61:54:EB:23:61:16:72:D0:B7:10:5C:F2:4B
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer:       /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial:       01976E8713CAE67F8B77D9C4E376A07ADEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number:          13CC
Signing time:             Sat 14 Jun 2025 13:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:35 +0000
Files and hashes:         1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: EkAgEp408ZtLW3jsFPGMvsfKwgJkqU7qlLhrackuQPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:13:ca:e6:7f:8b:77:d9:c4:e3:76:a0:7a:de:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
        Validity
            Not Before: Jun 14 13:00:35 2025 GMT
            Not After : Jun 15 13:00:35 2025 GMT
        Subject: CN=39248cbdc018a66154eb23611672d0b7105cf24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:0f:d2:f7:a5:e4:91:0d:bc:b2:e6:e3:19:
                    8d:32:ef:b0:32:a6:46:93:25:c6:08:ef:b7:23:21:
                    80:12:57:37:f6:d7:f6:e0:a4:2f:34:82:22:61:42:
                    dd:f4:cd:25:c2:4f:e5:9f:ab:bd:35:51:fc:a4:ba:
                    29:94:d0:c1:48:0b:fa:ba:0f:ba:86:f9:f9:ef:f0:
                    20:84:91:0c:3b:da:08:27:38:86:68:8d:c5:10:12:
                    7e:96:8d:9b:17:d6:34:a4:28:76:d6:1b:a2:c1:7f:
                    76:25:9a:ab:48:49:9b:8a:be:b3:01:e8:cf:1e:b9:
                    8f:5f:d9:e9:dc:ff:3d:94:fc:99:95:e1:11:86:9d:
                    9e:35:95:36:ba:f2:e2:aa:3b:df:25:e1:8e:23:f5:
                    12:96:29:7a:48:b4:10:09:19:da:f5:84:f2:9a:18:
                    aa:a0:b0:d4:48:73:2d:8e:e6:eb:6b:6e:bb:72:06:
                    85:99:87:7a:53:a1:04:c3:20:6c:b9:96:c5:ac:70:
                    63:07:ae:72:cb:a5:aa:ba:6f:1d:f6:d2:9e:af:45:
                    cc:6d:0e:7e:02:d5:b6:3f:10:8c:b0:c1:cd:ec:de:
                    d6:7c:ec:5a:fc:a7:f0:3a:d0:f3:9b:b3:80:cb:fb:
                    cb:5b:14:99:21:35:a9:e0:2f:07:b9:9d:e2:e0:80:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:24:8C:BD:C0:18:A6:61:54:EB:23:61:16:72:D0:B7:10:5C:F2:4B
            X509v3 Authority Key Identifier:
                keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:de:11:55:eb:eb:12:a7:08:e9:62:ea:6c:b5:02:19:d3:f5:
         d6:9f:57:ee:a0:e2:3c:fc:f1:97:da:3e:18:c2:c6:a6:51:ae:
         19:a7:ac:e8:65:7a:ba:65:13:ad:b3:26:e9:bd:f7:3c:f9:55:
         05:6a:34:89:07:db:81:81:94:e7:e6:55:73:4c:b9:b1:b6:e5:
         dd:a7:e2:74:95:93:b9:5c:f7:fb:01:5d:03:2b:41:23:09:ac:
         51:00:5c:61:45:a1:8d:a5:15:06:24:bd:b5:c2:c5:d4:bc:57:
         22:1a:f6:c4:9b:4f:b4:fd:b1:c6:c8:ae:69:39:50:80:68:22:
         54:90:1b:20:99:9b:fd:60:c5:6e:0a:a8:30:e8:51:4b:08:0a:
         e6:9d:a7:ce:b5:32:f6:3f:f2:ba:aa:ea:f7:11:ac:6f:83:66:
         eb:c2:d7:4a:3c:a2:b4:37:7a:86:1c:48:e2:af:49:69:07:f4:
         38:68:bb:65:6c:c0:d0:35:fa:0b:2a:20:63:5f:d9:07:01:06:
         27:19:59:24:f0:d1:72:6d:9c:4b:24:3e:6e:74:3a:e0:f0:0b:
         eb:d6:82:cf:9a:88:f6:17:6c:53:c1:fb:d0:eb:92:e8:39:83:
         5c:e6:a8:18:7c:7e:56:76:b2:4a:db:f9:8b:3b:fc:7f:17:63:
         43:5d:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:16:41 2025 by rpki-client