Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File:                     CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier:          0hU8Vr8xlb7CQqgbbx4wnNPej9EDlSDx6xkB6aE3EWI=
Subject key identifier:   FD:E1:23:6F:BE:82:FF:FC:45:5F:63:3C:21:F1:B1:81:30:1E:EC:4F
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer:       /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial:       019749311F11277766BAB85FB72510D80F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number:          0D16
Signing time:             Sat 07 Jun 2025 07:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:45 +0000
Files and hashes:         1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: TJMOrzwltTCJCBeH42H8xRmpjaKUFU1tFLGaNmu9Kj4=)
                          2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:1f:11:27:77:66:ba:b8:5f:b7:25:10:d8:0f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
        Validity
            Not Before: Jun  7 07:00:45 2025 GMT
            Not After : Jun  8 07:00:45 2025 GMT
        Subject: CN=fde1236fbe82fffc455f633c21f1b181301eec4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:67:d5:1e:a5:98:ed:60:b5:39:40:c6:78:8a:
                    81:7e:13:c7:ca:8a:18:e1:fe:c9:09:a1:1a:7c:cd:
                    ac:dd:a0:0e:80:f3:51:29:dd:c5:e2:66:68:74:28:
                    ec:02:82:4d:95:b5:3d:9b:39:37:32:c1:db:44:ef:
                    9c:7f:ec:f5:09:45:e9:0f:16:37:e1:b1:4d:83:a1:
                    b5:99:b0:a5:d8:d3:7c:4f:f9:9c:8b:6f:7f:fe:cb:
                    16:7d:79:cb:40:72:37:8f:83:70:7f:65:f4:f5:75:
                    b0:3c:46:6b:01:8d:cb:4c:fe:0e:2c:4f:2d:f6:bd:
                    9a:dd:ce:e9:67:ed:db:a8:2d:6c:30:ea:65:84:f3:
                    28:31:c2:0c:e5:90:51:67:97:87:71:1d:bc:1a:9e:
                    f8:64:ea:90:fd:3a:6e:f3:02:4f:0c:5f:c9:e7:5e:
                    e4:ba:a9:ff:c1:0b:3f:e0:7c:f1:a0:11:ea:b5:45:
                    7d:7f:e4:89:17:d3:39:85:f1:e6:0d:ad:06:65:d3:
                    51:92:ea:15:14:50:60:51:0a:97:28:fb:75:25:16:
                    e1:8c:35:07:96:c0:0c:ee:4d:96:13:d2:90:c3:c8:
                    d2:59:3e:74:65:80:55:49:74:eb:57:4e:fd:48:c5:
                    23:bc:46:36:c8:17:50:10:5c:ff:23:c4:be:e1:64:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:23:6F:BE:82:FF:FC:45:5F:63:3C:21:F1:B1:81:30:1E:EC:4F
            X509v3 Authority Key Identifier:
                keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7a:f5:9f:7b:7c:76:e5:2c:52:26:b1:76:bf:a1:df:f7:d3:
         68:b7:5f:db:fe:80:64:65:45:39:5b:cf:77:c7:ba:db:45:ad:
         f0:dc:06:ee:f2:5a:71:c0:21:e7:11:82:16:88:77:dd:73:08:
         ef:88:f5:d1:ee:e2:de:f5:1b:c2:be:4e:bc:79:ed:4d:29:f8:
         57:7d:61:49:1f:b3:52:13:3b:a8:cc:b5:b2:45:1a:2b:f9:5a:
         2c:f0:0a:77:c5:94:41:77:34:51:e4:f4:58:85:53:a0:ab:43:
         f6:9c:34:30:c7:f0:06:5b:7b:56:67:94:26:71:12:4e:b8:46:
         2d:2e:bc:18:68:a0:4e:90:6a:c3:41:1b:98:e7:4d:77:a5:85:
         06:f0:ca:84:c5:5a:81:c1:65:d3:f7:63:71:25:8c:b7:bc:4e:
         35:ca:c1:c5:0a:5b:27:ae:0f:e1:e3:64:a3:c9:29:09:51:8a:
         30:0e:91:bb:cf:1e:b4:b0:74:a9:83:a7:71:89:97:a2:39:c6:
         42:bd:23:89:41:ab:6d:d4:e6:21:b8:26:68:94:e2:bf:fb:e2:
         7a:ca:a6:0d:d3:49:81:da:24:f8:32:d3:fe:e4:7d:3f:22:4c:
         e1:32:0f:f2:9a:49:40:e2:6e:df:3f:b1:02:53:20:80:3c:00:
         42:95:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:50:02 2025 by rpki-client