Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File:                     2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier:          HMUG4IIkCiqq0HY+kE0y5Ff+B2b1vE8FpzAUm/xUMX8=
Subject key identifier:   38:D8:5E:9D:A8:5B:63:36:49:13:9B:4F:B6:96:DB:76:85:9A:A5:B1
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer:       /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial:       01974AB1A403C662EB6E9D0BE40A2F794FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number:          0629
Signing time:             Sat 07 Jun 2025 14:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:45 +0000
Files and hashes:         1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: COPYX9QkRiRJtOXUghd4E/aHvd7ZQaCojC/ypB4NqnU=)
                          2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:a4:03:c6:62:eb:6e:9d:0b:e4:0a:2f:79:4f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
        Validity
            Not Before: Jun  7 14:00:45 2025 GMT
            Not After : Jun  8 14:00:45 2025 GMT
        Subject: CN=38d85e9da85b633649139b4fb696db76859aa5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:6c:2c:0f:4d:03:36:04:66:27:06:58:41:
                    21:0c:02:1b:33:d9:6a:6a:c8:d9:96:91:05:25:6a:
                    a0:cc:39:7c:1c:c5:0e:ef:6a:9a:bf:96:71:ab:d7:
                    ae:a6:b8:40:42:93:2a:de:d8:57:37:29:70:14:7c:
                    15:4e:c6:66:ff:df:de:73:ae:15:02:d6:4d:8c:2e:
                    33:bc:7d:5e:cd:95:25:9a:94:c3:5b:4f:a9:19:c2:
                    bc:29:d0:da:27:8d:53:e7:89:e6:a2:f6:d5:31:0b:
                    1f:da:8d:11:de:93:24:d7:32:0d:7b:1d:7b:0d:a1:
                    84:56:81:9c:10:b5:85:2f:54:5d:b3:b2:5f:d2:df:
                    77:71:f6:bf:c0:55:0c:f3:c6:99:ad:51:77:b2:da:
                    a2:1d:78:ac:19:b8:d9:d4:a9:03:d3:df:f6:4b:ba:
                    03:9b:3d:86:f7:36:6a:7d:08:70:f3:39:7d:2d:a0:
                    21:b8:3c:cd:84:93:a5:7b:8e:dd:ff:a4:e3:1d:60:
                    dc:42:13:fb:64:4f:18:8d:23:da:c5:bd:1d:ce:54:
                    e9:85:09:54:d7:a1:a1:fb:13:d9:64:c1:20:28:c7:
                    0f:fe:9e:32:e8:d5:6f:14:c0:71:6b:e8:37:3a:18:
                    81:a6:4c:95:d3:a2:2a:ab:33:ee:77:e0:7d:3c:44:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D8:5E:9D:A8:5B:63:36:49:13:9B:4F:B6:96:DB:76:85:9A:A5:B1
            X509v3 Authority Key Identifier:
                keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:42:24:9d:d9:93:53:60:f0:3f:85:23:4a:e1:2b:3f:79:4c:
         05:f4:21:a5:6d:9c:98:9c:a5:1f:c8:ed:c0:c6:80:8b:ea:2a:
         7f:81:5c:52:41:c2:b2:d8:fc:e3:e0:65:da:69:0f:47:ba:3e:
         c2:21:a9:fd:a8:24:93:bd:2b:37:7a:c8:30:d2:28:da:0e:f6:
         e5:2d:56:45:a3:8b:cc:d7:6e:21:2a:2c:c7:37:e9:c0:39:1a:
         c7:dd:7c:e8:ee:3f:e4:c6:15:bc:9e:0f:0f:80:5f:d4:d8:0d:
         3c:a8:53:3e:f0:7e:19:02:18:0c:37:0c:f4:fc:0b:ac:69:fc:
         42:0a:41:e9:e1:7d:84:cb:e0:b0:ac:17:65:e2:f7:33:6f:6e:
         9a:d3:6d:d8:6e:9b:ce:8b:f0:c6:85:36:ac:48:58:0b:95:98:
         02:22:51:49:0e:fb:34:f9:29:f7:a4:62:68:20:cd:1f:c4:2e:
         93:00:bb:79:d8:a2:cd:b0:c4:e3:ad:b6:63:2c:da:cd:2f:89:
         24:5a:84:ca:7a:f2:c2:40:6d:2d:f0:d6:c7:44:b5:60:4d:b4:
         e3:b6:f9:26:81:6b:a8:b5:9c:36:8b:2e:2b:b9:bb:1a:5f:3b:
         77:c0:7b:4b:f8:ed:4b:05:68:c7:1c:08:77:03:9e:5a:75:7a:
         eb:46:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:15:38 2025 by rpki-client