Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File:                     qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier:          Lo8++qxYZ54tTW1uxeFU3gjPhsmI8TOFwknGI+oMOZo=
Subject key identifier:   1B:AB:19:F7:F6:96:B4:92:D2:C0:61:51:CF:05:17:03:F8:7F:45:15
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer:       /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial:       0197575A6505D63395A2A31ADE600AA1C89A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number:          13C0
Signing time:             Tue 10 Jun 2025 01:00:31 +0000
Manifest this update:     Tue 10 Jun 2025 01:00:31 +0000
Manifest next update:     Wed 11 Jun 2025 01:00:31 +0000
Files and hashes:         1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: CdmB21vYV8nE7fnxOMonpB+k61hkFbvwPmSbMefJBrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:5a:65:05:d6:33:95:a2:a3:1a:de:60:0a:a1:c8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
        Validity
            Not Before: Jun 10 01:00:31 2025 GMT
            Not After : Jun 11 01:00:31 2025 GMT
        Subject: CN=1bab19f7f696b492d2c06151cf051703f87f4515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:36:d5:94:9f:41:6f:21:01:21:8d:d7:84:
                    2c:df:95:91:a2:9b:e9:11:a3:ad:71:9a:5e:3f:50:
                    9f:5d:38:42:2e:1a:aa:3c:99:89:02:ab:f5:d0:72:
                    eb:f0:28:b8:87:a8:18:1e:d9:c1:21:e5:80:58:db:
                    02:67:b1:24:7f:b0:27:ba:c1:a4:aa:85:32:b9:d6:
                    e6:77:e3:c3:3d:d8:3e:41:52:2a:41:2c:ca:98:07:
                    17:36:45:dc:64:ec:a5:3b:20:e2:b4:04:9a:af:07:
                    fc:ba:06:77:52:88:91:45:7f:ef:b6:95:55:0b:82:
                    43:d6:3a:38:9b:9e:94:31:97:72:28:fc:5f:e4:8d:
                    d4:b6:a4:46:55:39:f7:9a:f5:84:31:c3:63:16:29:
                    3c:df:05:8e:2a:45:c4:52:22:d6:57:71:e8:76:9f:
                    6a:43:d8:eb:04:62:ed:51:7f:82:4f:c7:b7:c4:a0:
                    c0:53:c0:30:e7:df:79:80:04:b1:27:de:ab:3e:2c:
                    af:a8:a5:b7:bc:9a:a4:ec:cb:0b:bc:54:04:e5:d5:
                    10:18:1d:fe:49:65:99:5a:45:46:1d:73:75:37:c0:
                    10:e4:6c:dd:03:d5:31:f7:6f:09:51:87:d4:8a:95:
                    b1:99:b7:15:59:23:14:fc:51:a8:d8:cc:15:ba:fe:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AB:19:F7:F6:96:B4:92:D2:C0:61:51:CF:05:17:03:F8:7F:45:15
            X509v3 Authority Key Identifier:
                keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:af:ea:bc:dd:57:86:41:ac:23:10:a2:60:d2:2f:c0:63:ac:
         83:06:b5:b3:de:15:fa:96:6c:83:7c:ba:d3:a3:4b:20:2a:ff:
         42:ad:b8:ef:91:9a:74:fe:a4:4e:e4:d6:b2:8d:ce:1f:f8:de:
         df:6b:ae:fd:af:f0:b3:6a:93:0e:d1:37:91:bf:7a:ae:09:00:
         ab:c8:27:d0:00:8f:37:ee:f7:b9:36:10:20:4d:e1:c1:7c:e8:
         c6:ac:a6:c3:43:0a:24:10:99:4b:a1:99:dc:d8:d4:3c:9d:e8:
         ee:f2:ce:99:bb:da:8c:f9:48:1a:4a:ba:59:07:75:b0:51:76:
         02:78:74:b2:6f:dd:fe:a4:68:61:e5:8f:e5:05:09:a7:54:21:
         9d:2e:cd:3a:16:49:08:54:df:f5:97:6e:58:50:13:20:08:46:
         cc:a0:a8:b6:84:4d:c5:ec:55:16:5d:f1:96:58:88:fb:58:11:
         8d:06:cf:20:17:9f:42:aa:db:0e:0e:c3:39:2a:3f:c5:42:dd:
         82:15:71:74:50:52:1d:c0:f6:0a:1d:0a:ed:2e:b2:36:fb:12:
         14:36:97:da:3c:b2:a2:40:f0:c5:e0:45:af:15:11:1d:1c:11:
         54:0e:4a:62:b2:67:0f:51:d9:0d:5b:33:06:45:53:c6:2f:c4:
         d4:ed:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:39:22 2025 by rpki-client