Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File:                     qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier:          +N0GuhU2dSXdTWWdqYFnRLlfdtTUDcNOX5NDZxFbPus=
Subject key identifier:   0F:E8:F7:43:42:51:43:D0:D3:13:E7:17:70:8E:03:C0:11:D6:24:2B
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer:       /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial:       01976D3E1EBC9BCF1E2962CC7D3E1B3846E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number:          1399
Signing time:             Sat 14 Jun 2025 07:01:17 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:17 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:17 +0000
Files and hashes:         1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
                          2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
                          3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: QYP5i8+E1lfDnxn4XQ8rwT+QKh3P81RIItpN6BsBBAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:1e:bc:9b:cf:1e:29:62:cc:7d:3e:1b:38:46:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
        Validity
            Not Before: Jun 14 07:01:17 2025 GMT
            Not After : Jun 15 07:01:17 2025 GMT
        Subject: CN=0fe8f743425143d0d313e717708e03c011d6242b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:c6:25:03:e4:1a:19:58:14:b7:f1:b6:c6:
                    00:36:73:91:2f:7c:bd:18:a1:4a:3d:81:41:7e:18:
                    52:6f:32:e0:84:18:e2:d1:a9:96:1c:c8:35:0b:6a:
                    3d:b0:71:0f:a2:53:b3:37:bd:f1:79:68:f3:3c:08:
                    08:00:38:86:6b:10:c9:e3:7c:e5:8a:97:b0:96:d2:
                    42:06:0e:cb:ee:f0:36:9f:3b:fd:0f:61:98:4c:34:
                    07:f5:4b:54:1e:d3:b4:7d:37:c9:df:b2:fe:dd:40:
                    69:64:c8:57:04:6d:e2:d9:78:04:4a:60:d2:6c:32:
                    95:6d:d8:ec:74:45:b2:fa:37:a4:67:eb:ff:3f:a1:
                    5a:9b:ce:36:a5:f8:e5:55:9b:4d:45:f2:99:0e:d0:
                    fc:a3:56:a8:da:74:a4:46:a1:60:a9:58:b6:21:b8:
                    af:c1:93:f2:0e:50:29:f8:e9:07:88:d4:cb:82:e4:
                    22:9a:93:c9:5e:46:47:68:86:ae:8c:d2:de:b6:cf:
                    dc:a7:7c:1e:f7:6f:0f:d3:04:aa:ab:f1:6d:32:39:
                    4e:55:6c:3a:f6:50:cf:d2:13:f2:6d:a3:f0:97:b0:
                    64:50:e3:ee:c8:13:c9:bd:9c:d1:33:c9:21:8a:5d:
                    ae:c8:b6:e9:54:e8:72:ee:98:1d:72:84:2c:b6:24:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:F7:43:42:51:43:D0:D3:13:E7:17:70:8E:03:C0:11:D6:24:2B
            X509v3 Authority Key Identifier:
                keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:52:29:ee:8f:48:ea:eb:a3:3a:a7:47:fd:5c:c6:22:5b:24:
         c7:55:c2:64:39:1c:50:08:37:44:8e:33:6d:ff:f7:01:c6:bf:
         a1:42:3f:90:5e:a2:36:fe:df:89:c2:af:0d:d8:5b:b3:9d:49:
         fc:2a:38:f6:b1:3e:94:a3:fa:d8:2e:77:f9:13:4d:7b:06:9e:
         1d:ce:de:ea:8b:d3:4c:88:c1:bd:b4:63:99:e3:d8:01:80:4c:
         98:ff:56:ee:f7:3e:a0:80:15:10:cc:07:55:65:02:1a:a1:8d:
         04:b4:0e:fe:67:4e:d8:bd:01:0a:21:50:42:d4:1b:7c:00:1d:
         53:c9:48:dd:07:0e:f9:80:19:42:fe:4c:d0:e6:f3:91:e2:40:
         fa:fc:e7:a4:59:d1:2c:f0:02:78:45:e3:83:5a:bb:04:f0:35:
         1f:ba:1d:37:40:0f:d5:d6:fb:09:72:93:12:88:96:9c:a5:6d:
         32:cd:36:50:1f:cd:6c:85:45:7e:d9:40:81:f0:3d:8e:0a:fc:
         52:96:c4:66:87:3e:77:e7:24:1c:21:97:5d:96:9e:39:25:5f:
         2e:8b:13:f7:00:93:b8:c7:9d:09:8a:72:61:b5:b2:11:65:74:
         1a:2c:24:e9:41:18:6b:f5:ca:70:64:61:c7:9a:c9:c0:a7:0d:
         36:ce:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:56:18 2025 by rpki-client