Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File:                     Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier:          4Mzpm73DKfHlHDU7UBzGl17cATTAj7WNOgCIaTN2gaQ=
Subject key identifier:   61:C0:53:7C:0A:02:76:8D:42:8D:8E:C6:AE:62:BA:A1:81:CD:0C:4A
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer:       /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial:       019746675175E80FC22E47057DA8815F48F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number:          0293
Signing time:             Fri 06 Jun 2025 18:01:05 +0000
Manifest this update:     Fri 06 Jun 2025 18:01:05 +0000
Manifest next update:     Sat 07 Jun 2025 18:01:05 +0000
Files and hashes:         1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: mAj7vLngy/XJPdF8aGXz4L15rw49BYKtCDh73AgQarQ=)
                          2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:51:75:e8:0f:c2:2e:47:05:7d:a8:81:5f:48:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
        Validity
            Not Before: Jun  6 18:01:05 2025 GMT
            Not After : Jun  7 18:01:05 2025 GMT
        Subject: CN=61c0537c0a02768d428d8ec6ae62baa181cd0c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:b5:ef:53:c6:f9:8c:9d:d4:f6:e0:18:76:
                    2e:94:f5:c6:fe:75:af:a5:2e:d1:4b:45:a8:85:84:
                    01:91:af:1f:eb:9c:be:b1:e5:7f:92:b9:00:44:3b:
                    ba:78:0f:0f:5b:4c:4a:88:13:57:c5:36:07:1d:e7:
                    c5:cc:2a:a2:63:06:08:16:da:5e:dd:78:a0:08:72:
                    21:e1:ac:8d:ad:c6:8c:2a:31:b7:08:56:52:f1:84:
                    b8:b0:cd:5d:02:36:0d:fb:f0:c9:1e:4a:9f:57:64:
                    7a:92:a4:63:af:98:44:02:8d:1a:bd:84:40:27:f0:
                    e7:79:b5:26:d2:95:01:f7:1e:39:9e:66:d5:3c:3b:
                    ba:d9:fe:fb:bc:98:a9:db:3c:95:62:96:e6:90:50:
                    1a:97:56:c0:2b:53:0b:be:c6:28:25:81:d1:46:cc:
                    af:04:57:c8:1e:89:e6:f9:87:13:be:e6:c4:76:3f:
                    a2:a3:33:19:7a:e0:4b:d9:83:5f:05:d4:11:2a:3b:
                    fa:b4:5b:ed:db:a1:3f:e9:5a:2d:ee:67:e9:62:3c:
                    16:e6:d6:d1:a3:fc:90:36:0c:46:e3:a6:ea:f8:e6:
                    81:2e:3c:63:73:1d:06:ca:aa:58:fe:07:ee:c3:2a:
                    95:99:f3:1a:b2:a6:7b:86:2f:44:77:f8:a4:41:ae:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C0:53:7C:0A:02:76:8D:42:8D:8E:C6:AE:62:BA:A1:81:CD:0C:4A
            X509v3 Authority Key Identifier:
                keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:6d:7a:8c:5d:aa:88:da:75:9b:b5:d8:6c:39:dc:4c:84:db:
         74:a6:37:ad:23:36:2b:68:ae:64:64:b4:11:e7:19:04:9b:db:
         c2:49:20:d6:6e:a3:46:c4:f0:bb:01:d0:de:26:71:4e:02:0c:
         0c:18:22:ab:67:31:9c:4d:d5:56:c3:d6:ae:1f:98:13:6b:8c:
         d8:b1:da:e9:e2:b1:4f:c8:bf:bd:76:d9:69:bd:36:4f:9d:41:
         1f:77:4c:b6:a6:6b:37:7e:1a:71:42:8e:ef:00:c7:2a:bb:b6:
         93:b1:f4:4e:15:b8:ad:a2:0a:0c:80:50:c1:bb:c0:4c:8d:f0:
         b3:18:4a:ce:4d:b5:f1:49:82:c6:16:97:06:c2:6f:7d:d0:8a:
         23:d9:1b:5f:43:28:70:59:1c:c2:5f:ed:7a:6a:75:5f:21:71:
         7f:74:4b:0f:7f:da:30:fb:ea:85:85:d5:42:18:54:a3:58:33:
         60:7c:15:6c:8b:c2:cb:05:5f:90:e9:54:b2:81:65:3c:28:05:
         63:27:db:56:b9:78:a2:60:0d:27:00:a2:5a:2b:db:b9:fc:21:
         fc:2b:83:94:58:f9:e3:64:bf:0b:5f:f7:bb:66:a8:33:73:1f:
         bf:fd:3b:4c:8c:b4:a2:7f:02:d1:d2:90:e4:52:40:f2:c0:d1:
         3e:f2:75:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:22 2025 by rpki-client