Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          PwZknW6bfKwvqYIvNWR12PVkKZJ5S+vq8910LGgUGFw=
Subject key identifier:   04:3D:93:A3:C6:8B:0C:87:7E:1B:0B:F9:0F:E5:62:B2:DF:B1:F7:87
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       0197466743D497598CEC99C3F7FFFAE761BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          04CB
Signing time:             Fri 06 Jun 2025 18:01:01 +0000
Manifest this update:     Fri 06 Jun 2025 18:01:01 +0000
Manifest next update:     Sat 07 Jun 2025 18:01:01 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: cjKdojhf4rNCI++pkDATXMD0f86hKOr6TWqHZ4nwUT4=)
                          2: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (hash: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=)
                          3: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (hash: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=)
                          4: M9m5ciKZUlugxrd6zs79XHL4dD4.roa (hash: 5TehzUmwbp1N2JUN9csCq1NNReNAH4jUA6HYU4FBVG0=)
                          5: im8w3Xx-iUAQD6wX6N09-EJJW8c.roa (hash: /qbFQ2xM1Cro7Sw3CCIT5woLdLgqxh07N/rM/Vszw70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:43:d4:97:59:8c:ec:99:c3:f7:ff:fa:e7:61:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Jun  6 18:01:01 2025 GMT
            Not After : Jun  7 18:01:01 2025 GMT
        Subject: CN=043d93a3c68b0c877e1b0bf90fe562b2dfb1f787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:74:3d:20:1e:16:69:fe:0c:2c:c9:68:89:6c:
                    48:e6:cc:47:91:be:c5:dc:b3:45:c0:f2:f3:bd:4c:
                    9c:e1:8f:c3:9b:d7:52:7f:b6:48:9b:39:ba:0a:36:
                    18:4f:cb:36:a4:40:a7:4b:7b:9b:7d:fb:e4:83:e8:
                    81:0f:d6:1e:81:dc:49:58:2b:0f:27:d4:a4:4c:74:
                    54:c1:a8:eb:d0:09:3b:f3:57:0e:1b:93:84:e1:db:
                    03:a9:c4:98:64:77:7a:bf:a8:24:29:f9:4c:de:32:
                    d3:04:e2:fa:a4:fd:b0:69:a0:99:03:d3:a3:a1:58:
                    b7:34:92:13:d8:4a:fc:f2:cc:bf:11:7b:a8:c6:83:
                    6f:96:a7:cf:08:0d:8d:c9:51:21:ce:5e:71:aa:36:
                    bc:e7:7f:06:ff:d9:b4:37:13:d4:10:8c:df:8f:05:
                    6b:c4:f9:12:96:f9:24:e8:24:76:f1:ad:d7:ea:f6:
                    13:bc:2f:3b:ea:76:9f:5b:af:67:bf:31:59:be:a0:
                    6e:8c:07:7a:67:70:a8:dd:43:ef:65:bf:96:b3:0e:
                    fb:60:62:2a:5c:e1:6d:a2:de:37:8f:dd:8e:b1:4f:
                    d9:37:36:c6:2a:a9:f4:9c:77:1d:a2:45:8d:80:c4:
                    c5:09:1b:25:0d:a7:dc:32:f8:eb:0f:e4:b5:07:f3:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3D:93:A3:C6:8B:0C:87:7E:1B:0B:F9:0F:E5:62:B2:DF:B1:F7:87
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3b:3b:09:80:e5:c0:22:06:a7:fa:68:ce:be:a3:73:e7:20:
         80:c6:b1:3b:e9:3b:3d:ce:45:6c:d7:3f:43:46:8e:cc:ba:77:
         c3:07:1b:ea:ac:5f:9d:99:8a:13:ec:92:ae:ac:fd:3a:aa:ee:
         8a:51:e8:e8:ab:03:d0:4f:a3:d5:78:a9:d3:d3:50:06:68:3a:
         a9:48:e6:ad:12:8a:f3:d3:95:86:be:d1:b5:a1:e6:85:8f:5c:
         db:86:2a:71:d5:34:61:a4:5e:5f:64:28:67:f8:f5:1a:8d:77:
         b0:7c:d6:90:3e:ce:ba:80:e0:83:07:94:54:7c:f9:c2:70:c1:
         3d:1e:97:c4:52:1e:a0:e0:ea:ec:dc:6e:4f:7b:c0:fc:61:41:
         6d:01:3c:d7:b5:72:37:d5:93:bb:dc:27:ed:7c:c8:c9:18:49:
         b0:92:7e:bd:42:47:b2:dc:61:bb:4f:64:cc:73:7a:01:ae:4b:
         d9:e2:54:8b:28:45:9d:11:78:92:ac:aa:c8:8f:9e:cf:57:36:
         61:29:33:2f:9a:71:7f:d9:8a:7a:52:71:14:f1:fd:38:88:33:
         97:29:73:34:25:bb:7b:aa:5f:22:5a:c5:e5:8c:98:db:99:b9:
         85:37:6d:7b:3c:7c:75:08:46:bb:8e:60:22:0d:f0:7f:d5:27:
         76:1d:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:41 2025 by rpki-client