Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File:                     QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier:          oCSS3C/86knvNJNSVvdksvVfeG4nVFPvtb2TksLk3nE=
Subject key identifier:   D8:CC:DB:2F:5A:DE:A3:F5:FF:5F:66:DF:E9:D8:5F:B9:75:A2:CC:AC
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer:       /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial:       01975E0178C172B9D6C4717F01A168AF3BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number:          04E9
Signing time:             Wed 11 Jun 2025 08:00:44 +0000
Manifest this update:     Wed 11 Jun 2025 08:00:44 +0000
Manifest next update:     Thu 12 Jun 2025 08:00:44 +0000
Files and hashes:         1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: euKKxlBBt9ZdmGdtMmdUcY6xhhNBPtXmo5PJAW0GhCE=)
                          2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:01:78:c1:72:b9:d6:c4:71:7f:01:a1:68:af:3b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
        Validity
            Not Before: Jun 11 08:00:44 2025 GMT
            Not After : Jun 12 08:00:44 2025 GMT
        Subject: CN=d8ccdb2f5adea3f5ff5f66dfe9d85fb975a2ccac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:e3:6d:85:8a:87:b8:ac:1c:3f:c4:a0:5f:
                    79:90:e5:44:cf:9e:a0:42:f2:03:ef:fb:bd:10:57:
                    03:1b:bc:94:d3:c4:8b:07:01:f4:9d:4f:e6:10:ac:
                    ae:9d:57:d9:05:a6:a5:27:a1:5a:74:45:4c:f2:5d:
                    8d:2a:a3:9a:d3:f5:1b:b4:32:e3:b5:bc:6e:d8:ab:
                    bd:5d:b8:d3:16:17:4d:d9:40:84:95:29:23:a3:32:
                    ae:2c:19:68:bd:80:b4:a7:c7:6e:af:2d:f7:6e:9d:
                    61:80:7b:79:f1:70:c2:c9:fe:22:ca:ef:d6:23:99:
                    13:b9:6d:0a:b7:41:af:8c:f5:f6:f3:58:a4:e3:b1:
                    76:e9:94:17:7a:e5:9c:55:de:39:0d:06:84:ba:de:
                    71:a0:4d:a2:74:7f:62:d3:85:ce:67:33:93:f2:73:
                    28:f1:8c:7b:0c:ec:e0:cb:29:b8:99:b8:d9:e9:c2:
                    67:0f:d3:83:6f:3b:6b:70:8b:5c:ac:26:a0:a1:d0:
                    a3:cd:b9:ed:d6:8a:7d:66:69:e7:05:76:bd:1d:6f:
                    82:2e:3d:b9:81:fa:52:d5:cf:52:02:86:d6:f4:a9:
                    a4:28:2f:e6:f0:64:c7:3e:c9:0b:72:94:f1:92:ba:
                    9c:d1:8a:ef:de:db:66:a6:b1:06:24:6a:3b:b6:a2:
                    75:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CC:DB:2F:5A:DE:A3:F5:FF:5F:66:DF:E9:D8:5F:B9:75:A2:CC:AC
            X509v3 Authority Key Identifier:
                keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:e2:0d:75:c9:59:42:c9:f7:6b:df:7d:33:60:51:33:34:
         86:4e:e8:0f:7b:25:54:52:7e:1e:18:e7:2c:7c:c0:f6:78:a5:
         67:41:c3:c3:18:df:af:1c:92:36:85:9b:31:00:a0:78:9a:95:
         3c:45:14:6f:0c:44:02:40:1b:68:84:10:c7:a3:55:fa:88:6c:
         ef:22:de:ab:f2:57:ac:be:ec:4b:00:50:25:33:64:29:a4:16:
         be:5c:0d:04:1d:0d:2f:73:61:15:a1:49:32:a6:94:1e:68:f3:
         a9:d6:bc:0b:46:aa:33:fc:d4:e1:5d:f7:75:2c:e4:70:0b:59:
         e0:63:8d:f3:63:9d:90:e4:d9:a2:d7:3b:d2:f6:9c:ba:97:5f:
         3c:61:13:79:97:b1:eb:ed:03:cd:2f:7c:8f:95:8c:1b:f7:9f:
         60:a5:58:be:84:57:0e:b7:d7:e6:22:de:74:46:25:58:97:a0:
         85:b2:51:3d:1e:d8:24:76:ec:7a:fa:96:5a:bc:38:76:28:17:
         f8:83:55:ed:f6:7e:63:29:c3:b4:21:36:20:f8:db:ab:c2:33:
         4a:a6:ee:a3:f7:66:57:e4:97:2e:0d:c3:ea:c3:2b:4f:9b:6c:
         d6:72:a0:c5:59:db:63:fe:f1:b7:21:99:41:5a:96:f9:a5:6f:
         ee:33:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:09:27 2025 by rpki-client