Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          D31H9687NpPorONvMMiN8qlEf4y/JKsON4IXBugAjik=
Subject key identifier:   F6:C8:E2:76:58:6B:EE:26:B8:9E:93:81:26:2A:55:31:85:4E:6D:C8
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       019749D595ACE656456C985B583501F2198A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          094D
Signing time:             Sat 07 Jun 2025 10:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:23 +0000
Files and hashes:         1: 1-Q-SU6M1eWokdvHWYPfiDLf862M.roa (hash: C1hLhsta908XltJUmng5iUBY0gsffPf1N3xCcfgoTn0=)
                          2: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
                          3: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
                          4: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
                          5: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
                          6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: D/yNUbNjfMXAQt32JeggEk1y13qDjT6cKgkShZbio9c=)
                          7: sRlrf2L_j98uPIoNnChhrs6bing.roa (hash: 1ZhMP4XH7DUgYDZTVYKViXDgJjDrkhtBjx0bS6tr/u4=)
                          8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
                          9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:95:ac:e6:56:45:6c:98:5b:58:35:01:f2:19:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Jun  7 10:00:23 2025 GMT
            Not After : Jun  8 10:00:23 2025 GMT
        Subject: CN=f6c8e276586bee26b89e9381262a5531854e6dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:98:9b:99:e5:cc:c3:da:bb:62:3f:a2:17:
                    c7:29:c2:ee:0c:bd:6f:8b:ff:f9:94:d4:e2:1f:0c:
                    ec:54:f6:7d:72:72:81:ad:a6:fa:9b:97:6b:18:7a:
                    b9:c5:60:2d:91:39:1b:33:4e:71:2d:3e:c2:f2:8f:
                    6b:cc:c1:d2:de:e9:4c:cb:a4:81:7c:02:d0:db:f5:
                    18:63:c6:f4:98:a0:34:42:10:2b:6d:e8:6c:b6:46:
                    cc:e7:51:70:92:47:9c:a1:9f:62:5a:eb:86:f0:b8:
                    a3:94:48:a0:97:60:72:41:03:cf:cc:4b:b7:1b:88:
                    c6:f1:c9:84:d6:69:a8:d9:5b:5d:72:81:ef:1b:bd:
                    95:5d:e2:cb:33:7b:a6:61:b5:49:a1:d1:13:24:a3:
                    a3:c9:35:ee:20:57:36:a5:5a:ff:d9:28:28:43:28:
                    00:57:b0:e7:83:1c:12:9e:7e:d6:01:93:92:8a:a2:
                    48:72:64:fa:93:e6:ee:3e:32:e0:f7:ba:9e:cb:87:
                    8a:cd:66:eb:8b:0d:26:5f:53:2a:a9:fa:32:ca:cc:
                    80:78:d9:20:24:ea:ed:50:42:83:4c:89:82:7b:ee:
                    86:85:97:dc:e1:48:47:e8:75:8f:8a:ca:4e:e6:42:
                    6d:65:e2:e1:79:84:68:08:bc:c8:16:db:dc:be:e9:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C8:E2:76:58:6B:EE:26:B8:9E:93:81:26:2A:55:31:85:4E:6D:C8
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8e:b9:fc:92:7e:ca:c1:0b:30:cb:63:7e:94:1d:8c:a4:75:
         4e:55:6c:20:60:8b:64:f3:b5:25:4d:28:36:4f:88:e4:d2:a0:
         90:d2:ad:8b:d9:c6:87:b4:82:aa:08:fd:db:25:43:18:c0:94:
         15:c7:3e:d2:f5:50:2a:27:36:b2:a6:32:c8:50:6e:a9:91:fe:
         47:06:3f:b7:a1:49:a0:02:fe:70:41:b9:49:66:5e:45:d7:e0:
         5b:13:9f:41:15:2d:55:67:94:4d:d2:f5:db:5e:94:64:70:fd:
         fc:0f:77:95:d2:07:08:ac:cf:ae:13:d5:64:59:de:df:c7:15:
         49:9b:37:74:f8:49:70:a2:5c:b6:4e:96:d8:1d:5c:39:2d:ce:
         40:43:04:4f:96:68:cc:f4:6b:e9:48:b1:9e:21:94:41:21:69:
         78:79:f1:2e:6a:14:c3:2f:22:a9:81:17:b7:90:6d:69:5c:ce:
         27:e6:5b:c8:e4:bf:29:34:13:ee:7d:f7:ad:a9:e1:82:6c:48:
         50:86:43:18:5e:57:ed:25:cc:8c:97:ac:ab:92:83:9c:de:39:
         9e:62:d2:07:66:d6:b7:36:1e:bc:5b:0e:aa:90:0a:4b:ad:07:
         ac:25:c7:d3:23:01:dc:29:55:b2:18:42:c8:60:97:d1:9d:15:
         33:ea:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:34 2025 by rpki-client