Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File:                     qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier:          DS4HG9txqs4myhbtqEGpg3zIVtV7LIop+GRaKhLws7g=
Subject key identifier:   C6:85:24:1A:6E:CB:BE:4B:9A:C1:86:D1:45:21:11:D4:47:5A:04:99
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       01976403A0AAA06F816AB0BD4AB2D86C9FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number:          1003
Signing time:             Thu 12 Jun 2025 12:00:48 +0000
Manifest this update:     Thu 12 Jun 2025 12:00:48 +0000
Manifest next update:     Fri 13 Jun 2025 12:00:48 +0000
Files and hashes:         1: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (hash: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=)
                          2: X_mEYYeWr9-8-K3hPb_xZPAlhyU.roa (hash: 6DNXGEiBb6ULQJ057yIjE1b50LAb3WIwVPg+KL0u4Kc=)
                          3: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (hash: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=)
                          4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: NPiuI52onSlb3KJbm2Ax5j4zKo0HGah2imH+C/JqUDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:03:a0:aa:a0:6f:81:6a:b0:bd:4a:b2:d8:6c:9f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: Jun 12 12:00:48 2025 GMT
            Not After : Jun 13 12:00:48 2025 GMT
        Subject: CN=c685241a6ecbbe4b9ac186d1452111d4475a0499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:96:75:00:06:29:d5:a9:0d:42:72:ba:5c:
                    e2:f2:2d:f7:21:e5:0a:71:1e:52:c2:a7:96:12:d7:
                    13:45:8c:cb:32:25:fe:36:ee:76:1d:6e:c0:ba:a7:
                    db:ab:db:db:35:92:d2:8f:d0:a0:7a:b3:15:f8:6f:
                    36:97:3f:da:48:c4:27:40:28:bf:4e:f8:d5:27:37:
                    4a:ea:5d:1b:08:20:ba:a2:8f:46:ac:7f:a3:b1:be:
                    20:33:7f:27:5e:12:8c:95:62:09:7b:2f:98:01:65:
                    d7:1c:09:44:cb:52:24:02:fa:6b:01:79:0c:cd:43:
                    1a:1a:fe:bb:f4:b1:b6:79:a9:37:24:d3:f6:f2:7f:
                    04:aa:f6:ec:35:09:6c:5e:c1:7b:86:ca:70:7f:c5:
                    17:18:45:2a:8a:cb:d2:da:cf:95:ef:d9:6e:f1:9c:
                    9e:90:31:7a:44:b8:47:b9:ba:91:0d:89:1a:ad:68:
                    a2:f7:9f:fc:57:22:ff:f5:61:2c:0e:fd:80:87:13:
                    11:6c:98:e2:1b:f6:5a:9f:44:e6:4d:cc:45:f4:d1:
                    dc:29:b4:7b:44:ad:c5:00:61:d6:fc:35:1e:37:de:
                    0b:b0:16:38:0f:c3:fa:7d:7f:01:a3:5e:f7:56:bf:
                    99:cf:95:f8:e1:e3:ae:a8:97:f0:7d:df:01:01:68:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:85:24:1A:6E:CB:BE:4B:9A:C1:86:D1:45:21:11:D4:47:5A:04:99
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f7:02:6a:1f:85:9e:98:bb:05:cc:b7:a2:ff:28:f0:16:ce:
         2b:b8:44:86:e7:af:e1:79:9f:35:ce:eb:98:1a:ed:b4:fa:3b:
         3c:7c:83:cb:69:2e:13:24:83:0e:76:93:7f:f0:97:3d:3a:2d:
         72:a7:6c:0b:f3:68:55:99:ec:be:74:e3:be:17:26:4a:d9:54:
         81:2f:01:26:54:15:49:2a:26:32:e5:b8:a9:19:d7:12:56:4c:
         05:17:eb:92:e4:7f:25:8b:e6:64:11:d6:13:e9:7c:8c:bc:9e:
         c3:4a:38:8a:05:66:23:39:b8:fa:64:4a:e0:2d:8f:b2:8a:0b:
         26:86:a2:9b:e8:08:21:86:59:9e:6e:1d:4f:a7:3e:93:6e:f4:
         18:28:68:9b:83:64:49:64:09:1c:5d:35:69:38:b4:29:bd:09:
         b7:c5:18:33:34:b2:42:cc:27:6a:ee:45:b7:3d:ef:6c:f6:00:
         38:6b:90:d5:8e:d5:97:c6:15:86:21:a4:b9:c3:b1:79:a3:bb:
         06:de:a1:cb:f4:7e:22:34:cb:21:70:a4:64:2d:9d:b7:52:78:
         69:d2:6c:a2:2a:0b:5e:74:fd:aa:cc:5e:34:c0:c1:13:89:0b:
         74:98:a7:81:b3:35:a2:2a:ec:59:4e:eb:a7:41:07:a2:0e:29:
         e4:39:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:24:59 2025 by rpki-client