Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
File:                     qQ2awu8R1UaTddbebGv3IRKeO3E.mft (raw, json)
Hash identifier:          uI+TJMfakWcxdEUGhY+PPxlxqEl1t17E+E409GxdKVU=
Subject key identifier:   52:EE:75:18:22:82:DD:39:1F:3A:94:5E:14:CA:86:60:5B:22:DD:CD
Authority key identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
Certificate issuer:       /CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Certificate serial:       0197499F52730FA63CEF392474B7040C40AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
Manifest number:          14BC
Signing time:             Sat 07 Jun 2025 09:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:07 +0000
Files and hashes:         1: qQ2awu8R1UaTddbebGv3IRKeO3E.crl (hash: Fk50GTJpDBiuyNiT7Rrq7pGQQXVZhpJ3/4qeTfBvmXE=)
                          2: yuW5WVwgNaxBxObKx0w_CE3bdf0.roa (hash: bxzeDx/FJJDZscd0BPoaz8SHe0rmx/Qll6/QwchRolI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:52:73:0f:a6:3c:ef:39:24:74:b7:04:0c:40:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
        Validity
            Not Before: Jun  7 09:01:07 2025 GMT
            Not After : Jun  8 09:01:07 2025 GMT
        Subject: CN=52ee75182282dd391f3a945e14ca86605b22ddcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:16:a7:b8:ac:9a:27:b6:6e:5e:da:06:e8:
                    76:b8:71:21:48:00:91:87:5d:07:39:6c:f7:6c:72:
                    72:24:04:b6:5d:5e:4a:ad:11:16:b1:8e:bf:d3:38:
                    d1:53:6a:f6:03:fd:47:30:2e:49:a0:17:93:43:c5:
                    94:1b:94:b2:9b:7d:6e:2c:36:b3:ad:55:10:72:d7:
                    7a:5d:67:89:01:8e:30:f7:21:fc:ec:7d:ca:2e:53:
                    26:3d:a6:c4:b8:7b:c6:a1:c1:01:17:c9:89:a7:79:
                    8c:52:8c:e0:23:a6:5c:1b:49:b3:e9:0f:31:9b:0d:
                    94:03:b3:3a:d7:b2:19:14:a6:13:2a:19:27:8f:fd:
                    65:14:64:6b:b7:eb:37:2f:9c:73:c7:a3:d8:ef:dc:
                    47:bd:65:fc:5c:3b:94:ff:d3:63:68:fd:94:e3:af:
                    74:2f:d1:9c:42:55:29:3f:d8:67:ab:0d:d7:60:d6:
                    69:ef:52:57:f3:53:66:ab:da:1f:c2:9a:cb:e8:3f:
                    e4:8b:bb:5f:b8:40:1c:88:49:bb:de:ca:e7:57:4a:
                    94:ba:be:e5:59:a8:0e:db:df:f6:10:38:f9:a0:d1:
                    c1:ac:52:1b:c6:94:23:a1:d4:a6:7c:f4:cb:ee:2c:
                    ac:24:2b:45:93:89:86:c1:76:0c:9a:94:5a:26:ae:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EE:75:18:22:82:DD:39:1F:3A:94:5E:14:CA:86:60:5B:22:DD:CD
            X509v3 Authority Key Identifier:
                keyid:A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:95:74:18:11:3d:a9:3a:ce:af:02:ad:8a:7d:2a:f3:0b:f0:
         15:8b:1e:9a:44:f3:84:ef:84:69:ab:cf:78:47:89:99:e2:95:
         05:a6:85:cf:3f:24:df:33:76:ab:52:35:4f:3d:f0:0d:6b:9a:
         7c:8b:8d:2a:5b:cc:81:c4:66:fc:45:9d:7e:e8:8d:74:11:09:
         ca:e3:8b:99:0f:c0:fa:af:93:eb:63:46:88:5a:04:ef:42:da:
         94:ec:eb:4e:86:a7:8b:a8:6f:04:ff:16:84:13:3d:29:dc:18:
         31:6d:c4:96:64:03:c8:2b:4a:4c:db:fc:03:ad:71:e0:ed:e7:
         f5:2d:81:43:65:62:a6:b8:56:d8:8c:eb:de:01:6e:be:32:70:
         d4:9a:48:65:a2:39:f9:82:28:54:2e:db:6f:e3:98:82:13:31:
         9a:b5:a0:fd:a5:ec:74:8d:ba:ac:6d:3d:bd:6c:86:55:ba:a8:
         e8:14:10:1f:f3:49:7a:f1:e4:d1:51:49:12:fe:a8:89:ae:c4:
         51:50:d6:ff:d0:10:88:fc:9d:7c:f5:40:aa:cb:71:04:a6:e8:
         5a:14:c8:e8:7c:03:4f:d0:c8:9f:61:88:68:ce:b5:b8:66:bf:
         d5:4d:02:90:9a:03:ac:d8:9a:0a:86:d0:3d:5f:79:b6:21:7f:
         65:69:ed:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:34 2025 by rpki-client