Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File:                     pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier:          KsT8Jgq2nDBT68um2ILcVyPs0CvHSsidq1iHVzP636M=
Subject key identifier:   D9:48:DF:B4:65:EA:6C:EA:9A:7B:1C:80:30:AB:DF:5F:64:A6:5B:39
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer:       /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial:       0197D2F343815BA2EE562D7B929F4D4BAA1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number:          0CDD
Signing time:             Fri 04 Jul 2025 01:00:47 +0000
Manifest this update:     Fri 04 Jul 2025 01:00:47 +0000
Manifest next update:     Sat 05 Jul 2025 01:00:47 +0000
Files and hashes:         1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
                          2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: mm0HSGVGF4YJfJsNHcpiYWKfHLCtLmUEDH1TOjUUCls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 17:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d2:f3:43:81:5b:a2:ee:56:2d:7b:92:9f:4d:4b:aa:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
        Validity
            Not Before: Jul  4 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=d948dfb465ea6cea9a7b1c8030abdf5f64a65b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:99:74:eb:89:24:24:b1:a0:9d:05:78:fc:7f:
                    67:5d:39:9e:17:e9:c9:cd:d3:17:37:91:10:3f:41:
                    66:86:3a:82:41:26:ff:d8:87:ee:60:14:8b:1b:00:
                    f5:c5:38:e6:90:8d:ea:55:0f:ce:3a:db:b5:8d:9f:
                    e2:03:85:78:a8:21:86:f5:c1:16:b5:22:b6:bc:05:
                    8e:02:70:b2:c6:78:d3:71:a1:bb:90:32:60:84:19:
                    61:b7:d8:ff:8c:56:02:9e:b5:82:3c:3e:ef:2e:af:
                    98:1c:8f:fd:7c:f9:a7:3d:bf:8b:17:99:44:f1:d9:
                    15:42:63:fc:ab:72:39:e2:05:8c:ec:b7:ae:b0:44:
                    28:45:c6:f5:76:14:54:5a:13:1b:a1:dc:bb:ba:0e:
                    0b:03:e0:5e:d9:6f:52:4b:25:79:e4:5d:6c:0b:b6:
                    c7:39:76:ce:f1:b4:38:ae:b0:cf:2a:7b:9d:f4:58:
                    3e:40:91:03:b4:d7:e6:8c:86:d9:25:8b:e9:84:17:
                    79:6c:3b:fc:e7:34:95:4b:6a:60:c1:b8:8b:99:e0:
                    16:63:84:0f:53:62:c6:5f:41:09:44:8d:93:76:07:
                    22:52:27:12:b9:4d:f6:ab:2f:4d:6c:19:75:ba:ef:
                    2b:98:6d:fc:b2:90:f7:b9:15:09:68:e5:36:6c:61:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:48:DF:B4:65:EA:6C:EA:9A:7B:1C:80:30:AB:DF:5F:64:A6:5B:39
            X509v3 Authority Key Identifier:
                keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a8:c8:03:61:a2:9d:2e:63:10:c7:08:b7:5f:85:a7:bf:1d:
         01:6e:ae:ad:60:59:fb:24:e7:58:a3:d6:87:9e:19:13:ee:34:
         4b:6d:26:6a:2f:03:51:8e:d5:48:9e:a1:3c:5f:30:eb:91:3c:
         03:6e:7a:d9:4c:5f:07:ea:6a:6e:20:33:da:6a:54:88:0a:73:
         d3:46:8a:aa:0d:e6:c5:97:08:57:71:ea:14:23:12:4d:97:e9:
         48:77:02:ce:3e:21:9d:72:81:a1:0d:41:ae:fe:87:04:5b:56:
         8e:3e:ea:3a:52:f5:e7:dd:9c:47:b3:0f:20:b6:14:71:50:4f:
         29:df:d9:eb:9f:37:28:7a:f7:89:6a:3f:68:29:26:ef:6f:8d:
         de:ee:65:e1:ae:be:23:f3:ff:dd:8b:d2:cb:a9:3a:9e:44:7a:
         d2:fd:04:2e:6b:97:72:f8:79:40:ae:0b:1f:27:d1:02:5b:a1:
         88:91:38:e0:e3:44:56:9a:9c:a9:7e:27:5e:17:c7:fb:e0:f8:
         8b:aa:3a:0a:51:b2:f7:32:2a:bf:1d:46:ee:5a:4a:57:e6:1d:
         65:8b:51:2d:60:b4:1a:29:74:b0:2b:63:72:ab:80:2a:62:8a:
         31:4a:60:06:dc:3b:fb:a9:ab:42:8e:e0:a0:38:0d:4c:d2:02:
         69:90:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:15:19 2025 by rpki-client