Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File:                     q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier:          VO5/3GQ7zajrMTIOhF0rPfnNS2OlaIimfH9fKNwvxCc=
Subject key identifier:   B0:94:30:0D:A3:2E:F1:B7:B3:31:C5:2E:39:3E:A7:94:19:ED:3C:4B
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer:       /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial:       01974CA02D3E1ADC47CF19D60403ED1EEDAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number:          122A
Signing time:             Sat 07 Jun 2025 23:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:55 +0000
Files and hashes:         1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=)
                          2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: JPruTkHCjMEtKWMKGD4fS9VHxhhaFIsHEDD/E5pDN+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:a0:2d:3e:1a:dc:47:cf:19:d6:04:03:ed:1e:ed:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
        Validity
            Not Before: Jun  7 23:00:55 2025 GMT
            Not After : Jun  8 23:00:55 2025 GMT
        Subject: CN=b094300da32ef1b7b331c52e393ea79419ed3c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:4f:42:78:ef:0d:a6:5a:f1:3c:e5:57:f9:
                    c5:ef:22:f9:f6:e3:33:14:c7:0f:86:56:59:da:5c:
                    55:20:0b:8c:2d:79:bd:72:72:c7:02:e2:2a:29:2f:
                    84:12:07:59:39:ad:6e:3b:a4:e8:ec:31:7e:07:f9:
                    2f:91:ea:0d:a1:ec:da:d2:4d:9f:2b:1f:9d:e3:dc:
                    2e:cc:4a:6c:8b:53:d6:97:b4:d2:37:d7:b8:bf:76:
                    a0:e2:72:e2:da:a4:a7:12:a8:7d:05:37:b5:fe:70:
                    92:98:a8:9b:a1:ef:86:ae:79:8f:ea:0a:24:bd:76:
                    20:cc:79:8c:13:4d:3b:36:51:39:0e:1d:59:ac:1c:
                    23:14:b0:63:8e:64:a1:15:dd:fb:87:7b:1a:ff:0e:
                    85:83:9d:72:c2:51:5b:13:fd:d0:d5:4f:54:ea:7a:
                    d5:9d:1d:a2:6e:fe:be:b5:5c:67:2f:66:ea:0d:ea:
                    d4:ed:a5:7b:a5:7d:de:16:6e:fb:58:1b:b2:5b:04:
                    27:59:18:17:6b:75:43:aa:eb:f4:36:4b:4b:61:62:
                    0a:ab:5b:58:bf:c8:94:2c:fd:f2:ac:09:f5:e0:6f:
                    9f:6c:92:48:96:a9:a0:ca:3a:d4:00:cd:ed:9a:15:
                    af:ba:ef:ed:bd:a8:13:7a:00:eb:c9:d3:95:d2:13:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:94:30:0D:A3:2E:F1:B7:B3:31:C5:2E:39:3E:A7:94:19:ED:3C:4B
            X509v3 Authority Key Identifier:
                keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9c:95:1d:c5:10:a8:4b:3e:ca:55:b2:57:9b:3c:47:a0:14:
         b7:31:66:cc:24:9b:ba:a0:6c:74:fd:0c:e9:2e:ef:75:72:d6:
         2b:d4:e1:02:bd:60:47:17:08:73:03:98:08:04:cf:cd:09:49:
         0c:1c:b0:fb:a8:b1:d5:3a:b1:ac:1c:8f:67:5f:75:bb:f3:2f:
         af:b8:2d:c4:67:d6:6e:99:fe:8b:fe:2a:72:cd:96:93:fc:5d:
         14:6f:bb:09:6d:15:89:2c:3b:eb:0d:65:1c:c3:a3:e5:86:c1:
         23:17:91:97:29:b1:f1:d9:26:cf:65:ef:a3:92:0c:cf:e2:94:
         fb:ec:0f:7e:83:d3:ff:be:05:4e:0f:93:f2:9c:8c:32:71:30:
         09:0b:b0:bd:e2:b2:f6:9e:86:79:2e:3f:b5:bf:36:93:7e:e5:
         47:c6:77:25:3c:b9:c4:3f:29:b8:bd:55:0a:66:97:72:08:54:
         fa:52:61:42:91:6f:a1:35:8f:c9:51:33:4f:aa:80:4e:55:ac:
         61:3d:b6:2d:33:c6:64:3c:25:c6:bc:c5:94:c1:3c:0f:ba:08:
         31:77:c1:8f:dd:ff:5f:05:1f:48:5e:26:41:55:f5:6c:5e:45:
         04:14:c6:91:c6:2b:48:f2:24:e9:ac:b8:aa:dc:d9:4d:8f:a3:
         96:42:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:05 2025 by rpki-client