Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File:                     mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier:          CVbF9iZnIdJQw8EX5+QyDZcCWqC+5rvOxG1UX1ZFz8E=
Subject key identifier:   93:6B:69:A6:43:1F:F8:DE:73:8D:DA:0D:62:10:5D:53:96:8E:A4:16
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer:       /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial:       01974C9FBCB37B90D24A135F3F642E4B5516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number:          0F77
Signing time:             Sat 07 Jun 2025 23:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:26 +0000
Files and hashes:         1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: vapdoXFZdtXUA8mpJ6Y7/hcYg5eegIiGOwPrjA4L4B4=)
                          2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:9f:bc:b3:7b:90:d2:4a:13:5f:3f:64:2e:4b:55:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
        Validity
            Not Before: Jun  7 23:00:26 2025 GMT
            Not After : Jun  8 23:00:26 2025 GMT
        Subject: CN=936b69a6431ff8de738dda0d62105d53968ea416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fd:18:a1:2f:f0:2e:44:bf:bb:ed:29:81:1e:
                    cc:b5:cb:84:65:bc:a4:fb:91:c3:78:47:11:5c:ba:
                    d5:16:35:b2:78:1d:a5:68:7d:69:2b:4e:1f:1c:1d:
                    b3:b0:ec:2d:bb:3e:72:d1:5f:64:f1:ad:34:e9:e9:
                    f5:96:38:cf:ee:4f:94:99:23:e0:9e:d3:55:09:86:
                    a4:a3:f6:cf:aa:af:75:e0:0d:b4:9d:90:48:6a:d6:
                    04:92:dd:d0:1a:60:a5:04:59:d4:31:04:1b:26:e8:
                    3d:90:dd:d7:52:b7:1b:d3:a9:95:52:e3:6f:4e:b2:
                    c6:3b:cc:2c:29:71:f2:20:2a:20:d6:93:50:93:fb:
                    40:cd:8d:2a:2a:3c:02:92:3b:0d:d6:96:d7:2c:90:
                    cc:ea:5e:3f:d2:35:8f:5a:a0:07:df:c6:34:04:d4:
                    87:09:fa:55:e5:85:52:d1:47:a8:20:25:62:9f:c5:
                    3c:1c:cb:de:e4:9e:a5:a0:a9:97:c6:a0:d2:28:8d:
                    c3:ad:ec:b6:85:41:6d:d3:92:56:0a:23:7f:b9:ef:
                    90:e5:58:03:ec:f5:f6:70:87:da:39:cd:08:b4:76:
                    f2:9c:67:e5:48:8c:23:4b:df:fa:46:1e:c7:c6:9e:
                    6c:a3:a4:a2:ab:18:d6:ba:cf:88:41:5f:4f:f2:f2:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6B:69:A6:43:1F:F8:DE:73:8D:DA:0D:62:10:5D:53:96:8E:A4:16
            X509v3 Authority Key Identifier:
                keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:9e:f7:7e:f1:e7:39:5d:f5:fe:49:d1:49:b2:c1:fc:16:e5:
         06:78:60:b3:fe:b2:df:5d:f4:11:50:d4:d8:e3:93:9f:42:cf:
         74:c3:7b:74:81:68:be:00:ac:ea:1f:0a:78:9d:9a:6f:d4:71:
         f7:d2:75:10:81:66:90:41:a4:89:e7:d8:7d:61:ff:1f:27:34:
         d2:cd:a1:1d:1d:ab:8b:47:2d:e4:1a:e6:6b:7d:81:7c:ee:a5:
         d2:18:f7:8c:93:22:b5:be:39:d1:81:59:62:cd:1e:34:8a:62:
         e7:1d:5a:00:44:f2:1e:3f:5b:d6:b2:eb:01:c0:6f:90:3b:11:
         d4:eb:7e:6b:9b:e5:55:34:c2:3c:a5:1d:5e:f7:4b:fd:9f:b6:
         59:b5:e9:df:d8:04:a1:1b:9e:a6:cd:92:e6:42:82:b6:2b:9c:
         f1:42:30:24:89:d7:df:6a:42:3c:5b:07:2d:24:37:59:df:a7:
         74:1b:a8:5c:66:3c:0e:3d:46:74:48:9b:46:38:7b:8a:ad:2e:
         03:8f:cc:93:e2:d6:bc:f8:a0:ad:6b:38:3d:e4:c8:74:13:04:
         f3:f7:97:5a:ac:14:40:5a:6f:b0:58:29:2b:69:67:f0:3b:bb:
         3c:99:01:f3:a8:a5:bf:03:fe:04:73:ba:75:e6:be:b6:de:1b:
         30:63:ff:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:18:51 2025 by rpki-client