Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File:                     Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier:          Ei5LhZl6LcDObSLdh+yfvTezrRrlSEnFgOb/WLpc3og=
Subject key identifier:   8A:87:96:C4:D5:2F:83:8A:5C:5A:58:0F:FC:27:6D:63:44:54:CF:B2
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer:       /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial:       019739872D7CC63C114B711F6A37DB3940A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number:          121B
Signing time:             Wed 04 Jun 2025 06:00:49 +0000
Manifest this update:     Wed 04 Jun 2025 06:00:49 +0000
Manifest next update:     Thu 05 Jun 2025 06:00:49 +0000
Files and hashes:         1: FIyTe6Z5c9SlUs06XwKmTie5dUo.roa (hash: uOWoCbldz8pcJx7RQheZzjsLIzs/KJyulSs2wwLgbgk=)
                          2: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: xCLaACfxTYGNF8l8suoL2awiIG8iC0qlnjlpw6AvV8c=)
                          3: odf_RloZld2f_C46K0BxlJYlBTY.roa (hash: EYo1H2ZwWe4UAQYrwYPYwqTrp1mcr6TNxmVLEo1rbg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:87:2d:7c:c6:3c:11:4b:71:1f:6a:37:db:39:40:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
        Validity
            Not Before: Jun  4 06:00:49 2025 GMT
            Not After : Jun  5 06:00:49 2025 GMT
        Subject: CN=8a8796c4d52f838a5c5a580ffc276d634454cfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:eb:80:b5:e3:97:b0:6d:22:87:6a:57:18:
                    94:35:83:e3:ee:2b:1e:4d:e7:c7:a4:f4:51:32:17:
                    87:98:9d:6f:8e:52:9f:e5:1a:a9:af:be:e7:7a:5c:
                    16:6e:21:d2:9d:99:0c:1b:67:99:37:ab:ab:3f:8a:
                    f3:57:35:43:ef:b8:39:f6:cb:99:ad:dd:55:00:6f:
                    48:14:19:8f:21:ca:fd:6f:c9:69:b5:44:6a:d7:06:
                    c1:94:44:1a:0a:51:fe:60:03:ca:d7:37:26:0d:85:
                    6b:fe:50:ed:b7:2a:ef:cd:dd:4d:c6:85:60:08:d8:
                    85:cf:23:86:7f:43:c1:b0:45:0b:bd:82:10:9c:0b:
                    be:84:87:b7:7b:c3:45:d5:1e:cc:4c:66:c7:fa:cd:
                    26:9e:40:5c:c8:01:b2:25:81:ef:4b:5c:f2:59:0b:
                    1d:08:89:dd:47:1f:41:e4:77:93:49:1e:25:41:ad:
                    93:fb:73:51:ab:46:c7:1c:00:d0:45:5c:79:1d:4e:
                    b5:73:0b:5b:98:b9:ba:89:af:cf:0b:cf:da:0a:f0:
                    2f:66:35:b9:9b:f2:a4:1f:ef:cd:1e:4b:62:bf:7b:
                    aa:67:65:c9:ed:19:f7:89:36:1f:26:33:25:b4:41:
                    c5:7c:28:b2:74:4a:18:86:52:23:93:90:16:b0:b2:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:87:96:C4:D5:2F:83:8A:5C:5A:58:0F:FC:27:6D:63:44:54:CF:B2
            X509v3 Authority Key Identifier:
                keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:49:aa:36:db:c6:51:04:f9:95:fa:00:f3:6b:f7:bd:6c:74:
         9a:fb:f0:f4:99:51:50:4a:c3:99:51:9c:17:f4:0e:f1:b4:99:
         17:25:e9:de:f7:22:a9:93:54:7e:4e:9a:ea:de:5c:de:dd:29:
         5e:65:0c:c9:c9:7e:c9:f0:3f:48:ca:c6:6d:67:b3:c1:73:92:
         c1:39:bb:b8:2b:95:e6:0d:18:dd:0d:84:ea:bb:d6:f9:d8:49:
         b9:d0:1c:ab:2f:e0:33:34:66:b3:30:db:4d:17:e0:82:52:66:
         57:49:ca:95:7f:ae:5a:53:f7:fa:a9:55:8b:88:37:e4:25:d5:
         84:eb:58:70:f3:8a:6e:e9:8b:dd:bc:6a:1d:5a:bc:bf:82:cb:
         dd:ef:a7:6a:03:d3:c7:b9:1b:ed:8d:ce:8a:53:1c:83:54:a7:
         ec:fc:ae:d2:7d:a8:09:c4:4e:74:bb:b3:64:b4:7c:a1:96:a8:
         06:2a:4e:da:e0:f6:d4:91:fa:f9:3a:e1:a1:96:aa:d8:d7:c5:
         57:6d:0c:00:eb:ec:86:e6:86:22:4d:39:aa:93:8f:f8:97:76:
         64:21:b2:cc:cf:63:7e:e7:10:ad:d0:b4:49:53:5b:53:51:1f:
         b5:aa:4b:68:17:f4:0c:0e:d1:06:cf:39:41:e0:e0:2c:01:e2:
         7d:14:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:36:34 2025 by rpki-client