Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File:                     Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier:          MHdBfbxUxakcGsh7hlsnJymdtR+AtrPE6pOeZNljgJ8=
Subject key identifier:   E7:72:C0:C4:11:22:8F:BB:A0:E3:5D:C7:10:9F:21:DD:0F:C1:E8:B3
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer:       /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial:       01976D3E1E41146B6CCDEE42F06152EB5A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number:          08E3
Signing time:             Sat 14 Jun 2025 07:01:16 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:16 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:16 +0000
Files and hashes:         1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=)
                          2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: UgVpoNMG6Byma3e1m2I1IRTPePkbzHZPH5yllxo0FgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:1e:41:14:6b:6c:cd:ee:42:f0:61:52:eb:5a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
        Validity
            Not Before: Jun 14 07:01:16 2025 GMT
            Not After : Jun 15 07:01:16 2025 GMT
        Subject: CN=e772c0c411228fbba0e35dc7109f21dd0fc1e8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:59:05:d6:a6:6e:40:cd:15:5e:58:37:33:
                    aa:31:16:02:cb:02:0e:7f:7c:dd:cd:a2:e3:31:6f:
                    c2:8e:5e:8b:76:04:43:88:82:04:92:3f:b5:e2:67:
                    34:ac:87:4b:14:19:82:62:76:42:98:07:4b:25:f2:
                    7e:47:dc:29:7b:96:ef:5e:bb:50:6e:57:e4:9a:c3:
                    01:93:8a:d9:2a:20:75:50:49:c2:5c:6a:d3:01:26:
                    54:c5:35:ff:38:ae:82:9f:1f:b1:07:88:d7:12:17:
                    02:d9:e4:00:84:e5:87:8e:f0:42:2c:97:f7:05:39:
                    fc:51:f3:fe:1d:3d:49:14:db:51:77:cb:39:73:c9:
                    bd:b2:61:67:a8:43:bd:ce:75:8f:b5:9e:94:c2:78:
                    65:f8:ff:6d:4d:b7:33:13:03:29:bf:3d:7c:88:ee:
                    64:3d:9a:6a:6a:ba:5e:f4:85:57:17:b3:e2:a5:78:
                    ba:ef:07:96:83:ce:33:23:b3:d8:5f:5d:b6:a0:21:
                    93:12:53:64:0f:d4:6f:da:84:97:5e:e7:d6:6a:9b:
                    16:ed:22:7c:e9:8d:33:a7:1c:d4:8f:60:7c:aa:b1:
                    8a:8c:86:35:5a:7c:47:d8:53:ad:7f:11:62:a3:ec:
                    90:3f:08:6a:0e:98:46:3e:a6:ef:1a:2b:7d:d8:36:
                    70:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:72:C0:C4:11:22:8F:BB:A0:E3:5D:C7:10:9F:21:DD:0F:C1:E8:B3
            X509v3 Authority Key Identifier:
                keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:8a:ed:56:b9:0f:a4:59:95:d1:00:08:75:7e:6d:54:da:6e:
         ec:b0:a6:ec:93:e3:11:5a:4b:87:24:3f:42:39:bf:38:eb:09:
         3f:ad:58:63:74:b2:28:ed:db:a4:56:bb:c4:5b:c9:bc:0b:16:
         04:52:f3:70:6b:51:f9:46:1e:50:15:2f:bb:10:ef:38:cd:92:
         a5:1e:93:37:40:88:55:04:bc:f3:d3:da:6d:4c:41:13:c4:47:
         46:37:c8:51:02:81:ff:3c:3d:f5:d7:ba:cf:ce:55:fd:22:d5:
         68:29:87:3a:a7:11:5c:24:ab:67:ee:2c:d5:bc:46:38:d5:b8:
         e9:c4:c6:f6:62:67:f6:10:08:55:39:b5:78:81:a9:39:3a:46:
         78:b9:80:a9:41:95:cb:49:8b:e5:ac:75:f9:16:c7:9d:fd:57:
         02:c0:2c:f6:be:d9:c6:5f:25:3f:3b:70:44:9b:6a:2a:15:01:
         9b:c1:3d:0a:42:97:da:2a:d7:cc:ce:2e:05:65:8a:04:d9:e7:
         3a:8f:a9:41:8f:30:99:80:0e:b5:bc:06:90:e2:3c:60:98:b6:
         fb:88:04:6a:12:3e:43:96:86:26:9b:95:43:02:87:71:6d:8f:
         60:65:52:3b:ca:b4:c4:9b:a5:8f:66:e1:e5:9c:e8:b4:01:6a:
         76:ab:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 16:28:31 2025 by rpki-client