Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File:                     cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier:          4rjxKsjRlIbaRgEsFGReS4THBihccwzFHquTImp/kd8=
Subject key identifier:   55:4F:B6:91:7E:F9:A4:C3:26:B8:5A:DF:DD:4E:95:8C:C2:59:DD:FE
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer:       /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial:       01974B8D43A53A95F3F9269E8A19ACC1998E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number:          1265
Signing time:             Sat 07 Jun 2025 18:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:38 +0000
Files and hashes:         1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
                          2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: zUqG5SA3QuXZFST3pwfbu1GLoHeRW/Y3MGFlzoJtQaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:43:a5:3a:95:f3:f9:26:9e:8a:19:ac:c1:99:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
        Validity
            Not Before: Jun  7 18:00:38 2025 GMT
            Not After : Jun  8 18:00:38 2025 GMT
        Subject: CN=554fb6917ef9a4c326b85adfdd4e958cc259ddfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:fd:90:28:7f:61:2c:d8:37:f9:0c:ff:37:
                    1d:fe:5a:6d:f8:f3:42:af:74:2b:10:2e:03:87:20:
                    70:37:c4:b7:1b:1a:20:d0:fc:57:81:70:ce:73:c4:
                    56:5d:bb:c4:42:12:3d:9e:9b:42:4c:2a:b5:b7:95:
                    7a:d6:47:b7:aa:d8:9d:55:9d:37:f5:3b:fa:e1:d4:
                    6f:ba:5e:26:8b:47:74:8a:b5:18:ca:7d:85:eb:ab:
                    6c:2c:f1:02:0e:74:c0:44:1c:81:76:f1:7b:c6:27:
                    92:a0:e1:a4:5a:7e:3b:ea:21:19:91:e2:d6:da:4a:
                    bc:23:80:00:45:05:9a:80:d1:47:2b:7e:31:e0:e1:
                    30:00:e6:a4:c9:3d:b0:f6:c2:7c:0b:9e:7d:39:39:
                    ab:62:15:c3:53:8e:07:31:5d:c2:09:fb:e4:cb:86:
                    e4:e9:1f:47:ae:3d:99:34:16:8a:15:1f:1b:f0:15:
                    51:6a:47:d4:12:cf:de:e3:fa:39:ad:bd:66:4c:26:
                    3c:55:f0:a6:df:14:95:dc:88:13:61:70:8e:32:d9:
                    b1:57:19:ba:ff:6a:57:51:99:a7:ae:88:d6:66:79:
                    a8:e2:71:56:f6:de:34:aa:38:db:89:37:35:69:b7:
                    37:ce:7f:09:fd:45:94:25:04:e5:2c:a3:04:d7:0d:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4F:B6:91:7E:F9:A4:C3:26:B8:5A:DF:DD:4E:95:8C:C2:59:DD:FE
            X509v3 Authority Key Identifier:
                keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:34:8b:ab:ac:ff:fa:8b:14:9c:e2:ce:be:8d:42:19:7d:
         7f:d3:bb:8e:79:4a:2e:aa:9f:67:32:ec:37:66:04:59:c8:b5:
         67:48:03:f2:f6:93:44:5e:c3:25:08:d8:3e:d4:26:12:55:f7:
         13:b3:24:8b:81:0c:0c:51:05:80:e1:d1:93:e7:91:0e:d5:81:
         ad:d8:e9:ec:12:95:46:cd:67:a3:05:39:45:d7:94:f3:60:d3:
         0f:7a:96:cd:a2:9c:9e:07:8d:7a:b3:34:58:0c:9b:b6:64:ea:
         7b:52:84:af:8d:02:1a:94:09:36:4c:74:0b:27:36:17:45:4c:
         e3:7d:42:48:56:11:5e:71:4d:d7:79:d4:ca:58:e8:5f:b4:26:
         4f:7b:4a:68:1a:2e:92:ab:5b:f6:21:06:b6:4e:25:5c:0a:96:
         5d:ab:0e:63:56:7d:71:da:2e:d7:4c:5d:4a:2c:da:6b:ae:be:
         52:2c:ee:ed:01:6c:93:40:ef:3a:3a:5b:77:48:d0:f5:7f:b1:
         fb:20:52:85:5b:e0:5b:d7:3d:2d:fb:8e:e8:9f:a6:0f:f0:a8:
         45:f3:93:bb:b9:f3:0f:da:9b:c4:6b:ce:85:46:23:ab:9c:01:
         7a:b3:5f:ea:8f:78:61:91:31:ce:85:0c:2f:f6:09:b9:03:38:
         00:c0:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:49 2025 by rpki-client