Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File:                     qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier:          thGyMH55tJWT7dnN9xSkI6fhQSRIyiYuwOE1trhXUwE=
Subject key identifier:   20:11:10:04:83:ED:A4:D1:AD:D2:9E:F5:D1:3E:8F:38:70:D8:D9:5E
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer:       /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial:       01974742870D7ADB38497B9E854020ADF3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number:          02F0
Signing time:             Fri 06 Jun 2025 22:00:31 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:31 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:31 +0000
Files and hashes:         1: YnK9gT6S7S0RgJeRsD04H4ISSzM.roa (hash: DtfDFV6FFewqe27Bp/4vezKhP0+2FJRS8CYQqbxzDS4=)
                          2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: TeaE689Hq/gIDYAx8HOJqHH5kgUK0V/tr0UoBqSe6lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:87:0d:7a:db:38:49:7b:9e:85:40:20:ad:f3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
        Validity
            Not Before: Jun  6 22:00:31 2025 GMT
            Not After : Jun  7 22:00:31 2025 GMT
        Subject: CN=2011100483eda4d1add29ef5d13e8f3870d8d95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:cc:47:85:ff:b6:88:17:e3:fa:95:b4:a6:
                    93:99:79:61:4e:48:62:96:d7:fa:e4:42:40:db:fc:
                    07:77:35:fa:99:d6:84:74:45:ab:f2:53:28:de:98:
                    26:3b:e6:dd:14:60:34:54:1b:38:9a:39:70:0a:7d:
                    3a:17:91:47:3e:e1:fe:09:03:19:6e:07:b2:cd:75:
                    b1:cb:44:b6:2a:06:8b:52:3c:19:85:1c:df:a2:1d:
                    5f:05:f2:f6:d7:47:ed:55:1c:a7:60:db:c1:99:55:
                    c4:35:3e:7e:b1:c3:69:58:f0:d2:57:4a:ea:dd:04:
                    57:b7:2b:07:b2:d9:b4:36:1f:f0:00:84:42:54:b2:
                    ae:67:4c:0d:04:af:92:ec:36:ab:e5:0b:28:8e:c7:
                    b3:35:a2:87:3d:ec:98:d2:58:8f:7c:d8:6d:64:bc:
                    6b:76:40:a6:3a:aa:2c:82:bc:04:7a:5d:17:ef:f9:
                    bd:03:0a:6a:3b:ab:9f:2b:63:92:3b:fd:c8:71:aa:
                    21:df:a6:ef:fa:d8:f0:4f:40:f0:8c:41:09:37:50:
                    0e:db:f0:c9:7e:f2:4a:a1:98:30:3b:53:4c:57:30:
                    b2:cc:a5:74:df:3e:c0:63:c6:b5:5e:f1:cf:be:95:
                    8e:3c:17:c4:b0:35:3f:40:31:f7:55:85:7c:05:2c:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:11:10:04:83:ED:A4:D1:AD:D2:9E:F5:D1:3E:8F:38:70:D8:D9:5E
            X509v3 Authority Key Identifier:
                keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:83:52:75:fe:50:00:f8:71:c7:47:60:13:e7:57:9d:89:35:
         a0:a0:81:b6:98:5b:30:a1:4e:12:4e:4c:20:3d:51:a8:13:6b:
         e4:a7:f1:09:2a:36:ee:0e:6a:99:cf:35:74:35:97:2d:79:49:
         4e:8e:e0:13:05:31:34:dd:a9:cd:b3:57:78:44:4d:84:90:a6:
         c5:44:ac:d7:68:93:87:13:52:a1:6b:a2:3f:fb:46:35:33:a2:
         cb:e0:a0:3b:6b:95:c9:53:a1:e6:e7:06:a2:64:25:c8:37:49:
         87:3a:85:47:aa:b0:4b:39:f8:13:08:14:14:3a:ae:63:5b:9f:
         e6:46:b0:20:29:c8:8f:10:23:db:5a:b6:5c:c9:86:99:07:8c:
         3b:0a:3a:44:19:c9:39:cd:41:20:aa:1e:4d:5c:1c:68:b7:22:
         bc:ed:25:ce:5c:05:23:ec:ca:1f:fb:e9:25:6d:ac:6c:bf:1b:
         19:1f:cd:93:ba:e4:0d:3b:9e:08:6e:74:2f:47:8c:46:d7:79:
         8c:4c:1f:fe:cc:5c:d8:f8:af:96:5d:4d:9b:57:25:8b:75:fe:
         0b:35:01:05:61:3a:99:14:da:13:f8:cf:be:f7:7e:ae:e3:9e:
         65:f5:4a:a8:72:97:51:aa:ea:02:6b:6d:90:31:ff:ba:22:46:
         3e:70:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:12 2025 by rpki-client