Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File:                     Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier:          3SOTRCgE8+ovRxYDOE5NqEvd1uHzF8j8S42dNV3WnnI=
Subject key identifier:   F8:20:6E:FA:49:73:2D:EF:63:57:62:AC:4B:35:D6:3A:FD:D2:9A:78
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer:       /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial:       01976F2C7EDBE132E6547D2EFA3FAC45AEFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number:          08E4
Signing time:             Sat 14 Jun 2025 16:01:16 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:16 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:16 +0000
Files and hashes:         1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=)
                          2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: LZTwMgNsDO/MOjwT8dcjOoXSmquRGZbZOPR8BWf2ZNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:7e:db:e1:32:e6:54:7d:2e:fa:3f:ac:45:ae:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
        Validity
            Not Before: Jun 14 16:01:16 2025 GMT
            Not After : Jun 15 16:01:16 2025 GMT
        Subject: CN=f8206efa49732def635762ac4b35d63afdd29a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:85:3c:66:22:cc:d2:2a:4e:82:3e:d6:b6:63:
                    73:16:a2:81:25:52:41:80:e2:68:ea:1a:10:87:eb:
                    3e:d6:c7:a2:b5:72:68:95:bb:e6:ac:8d:f4:d2:8a:
                    b0:e5:fe:2f:9c:b6:1c:50:57:0c:3c:e9:fb:2c:07:
                    bd:eb:01:64:73:b9:26:01:f8:55:8c:58:f2:6e:a3:
                    4a:34:16:c6:c2:33:30:96:c8:c2:b6:45:26:84:99:
                    46:3f:00:71:63:9e:eb:75:5b:dd:10:84:87:52:70:
                    75:a9:54:0b:3c:37:e1:6e:c1:6e:24:4a:44:f1:48:
                    11:e4:5d:7f:36:31:f6:0c:61:0a:c2:4e:85:db:df:
                    cc:06:c9:70:14:00:da:cb:31:04:3e:93:46:96:d7:
                    82:5e:af:6e:e2:7f:65:da:74:c6:17:22:72:58:40:
                    11:32:95:4d:d2:cc:1d:fd:52:7c:a5:64:c3:33:fd:
                    a2:c3:26:f3:9d:cb:7f:4f:4d:f6:90:ce:fe:c8:31:
                    67:11:a2:dd:ff:df:38:ac:92:70:12:3c:5c:c6:55:
                    32:e2:28:1c:91:16:ba:94:42:04:81:58:05:58:d7:
                    65:55:44:6a:d0:b1:40:67:02:3e:4b:2c:52:4e:c5:
                    d5:51:90:57:26:ee:97:f5:df:9f:ae:c7:f6:4b:d5:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:20:6E:FA:49:73:2D:EF:63:57:62:AC:4B:35:D6:3A:FD:D2:9A:78
            X509v3 Authority Key Identifier:
                keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:73:70:c4:40:3c:c8:b4:2b:bc:1d:8c:02:cb:83:59:c5:06:
         2a:33:91:4c:b2:10:87:77:49:f5:b7:79:84:1d:08:81:65:b9:
         d5:66:06:40:af:16:28:49:a6:2a:a3:41:81:2a:0f:29:4f:be:
         2b:a8:1c:91:9f:5f:98:14:76:99:12:15:9f:0b:0d:a1:d5:d5:
         39:5d:bd:6f:60:b0:65:d6:8b:35:8b:54:5a:c2:5f:98:a3:1e:
         46:e3:3b:a5:44:bd:4f:b3:c9:a4:38:9a:0c:1a:a0:2b:97:08:
         10:3d:3a:18:e5:36:a7:70:00:08:d3:f6:ab:6b:88:0a:14:35:
         fd:06:50:0a:1d:55:8c:d5:50:14:7a:a2:d5:6b:2d:85:9b:22:
         9f:fe:77:53:5d:39:1d:81:fe:8a:44:4d:42:fe:1d:98:54:17:
         a9:08:a0:e7:3f:2c:8e:cd:b9:71:2d:28:6f:49:26:ed:e2:93:
         a8:06:16:98:6f:0e:22:36:c4:47:ed:db:05:79:6e:06:8d:89:
         d6:b6:2b:97:70:f9:f6:4f:a2:75:7e:51:4c:b3:78:9e:6a:4b:
         c4:bf:89:60:31:c1:0d:61:d8:76:38:1c:bf:4e:0b:3d:5f:e7:
         61:9c:fa:86:a8:1f:7c:bf:bf:31:1a:dc:e0:31:98:8c:54:2f:
         50:8e:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:38:59 2025 by rpki-client