Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File:                     qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier:          yhjGF/Rumyr81v7/YVrOTF863L4QAfaFOo9YjHek/40=
Subject key identifier:   4D:79:E1:FF:6F:B9:9E:CC:C6:A1:3B:0F:B1:53:5D:F1:26:BE:5D:0E
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer:       /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial:       0197B7B2F8152EBA1214701DE2F359AAE6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 18:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:48 +0000
Files and hashes:         1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
                          2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: YkiuVAJ68nOwmNHkq4ff8b83ECotLA2Bm2CnvBOICCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:f8:15:2e:ba:12:14:70:1d:e2:f3:59:aa:e6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
        Validity
            Not Before: Jun 28 18:00:48 2025 GMT
            Not After : Jun 29 18:00:48 2025 GMT
        Subject: CN=4d79e1ff6fb99eccc6a13b0fb1535df126be5d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:03:b6:49:be:b9:1a:2b:5e:a7:bd:f2:b5:
                    5e:97:48:a7:7c:ff:80:08:9b:8f:47:37:0e:2d:63:
                    a3:f0:c6:d4:22:e1:ad:77:1b:ec:ee:58:8a:af:90:
                    ae:66:aa:f8:3e:d7:eb:cc:80:c7:0a:09:2d:c9:69:
                    86:cb:0b:f5:a9:71:25:37:72:df:71:5e:54:d5:56:
                    3c:9c:98:06:39:3f:f7:4a:bb:d7:ba:ca:a4:a4:7f:
                    05:f8:3f:7d:90:7e:52:47:e9:4e:2f:52:b7:a8:e0:
                    d8:42:56:d4:44:5e:4c:a7:d4:7a:a8:43:60:4d:2d:
                    42:65:24:fc:99:41:17:ee:e9:21:d3:d1:2e:b5:e3:
                    65:ab:84:93:b2:c8:18:b5:a7:86:54:8c:4b:09:a1:
                    35:85:49:3c:cc:e8:54:9b:6e:15:03:b5:87:63:c2:
                    86:2d:18:ef:25:3e:60:c2:d3:63:9e:c5:04:ab:4d:
                    7b:45:be:e5:1f:78:4d:f2:eb:e0:cf:25:c0:ad:92:
                    1e:97:78:24:07:26:a8:b3:c8:32:93:4a:77:3b:14:
                    ae:f5:d0:96:a3:cc:67:8a:a4:cc:43:c1:bd:80:1d:
                    1e:52:ae:47:43:66:b4:f0:c6:7c:83:b1:e0:f6:bb:
                    3b:91:2f:f6:6e:62:5b:a4:b5:de:12:5a:e3:33:c6:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:79:E1:FF:6F:B9:9E:CC:C6:A1:3B:0F:B1:53:5D:F1:26:BE:5D:0E
            X509v3 Authority Key Identifier:
                keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:61:00:de:70:7c:11:5d:81:f7:9f:c8:34:57:99:0d:e1:ee:
         96:8d:64:b7:54:4d:96:e4:e1:2f:35:c1:81:14:9a:42:1c:14:
         a0:7d:54:5f:53:69:47:36:dc:c5:d8:cb:32:72:e9:5a:78:99:
         7c:a0:9f:0a:59:e4:8b:4f:20:28:18:3f:55:a6:07:04:b7:f8:
         d3:84:9e:27:d2:c8:57:54:87:cb:a2:b4:2d:ed:0e:76:06:a5:
         23:4a:40:14:f0:6f:5b:9e:e2:38:a8:50:60:4c:af:5d:5e:3e:
         b8:d6:0b:93:c5:53:ae:db:03:db:0c:e1:40:5c:d8:23:15:56:
         b3:ba:71:2e:18:a2:f5:5d:4d:b4:50:10:a8:e9:6a:a3:7c:3e:
         08:da:4f:0e:b7:46:5c:f4:51:48:da:f4:93:a8:de:64:ae:0e:
         1b:ae:be:6e:ec:0b:cb:f0:9c:db:18:34:76:fb:fb:0d:2f:6d:
         8d:3a:e0:dd:ea:da:b6:9f:92:17:c0:e9:8b:e0:86:c0:7e:00:
         d3:4e:ab:08:a4:fd:26:de:97:4c:de:99:d3:fa:83:da:44:1a:
         ce:48:aa:09:20:99:38:a1:d8:30:bd:8d:76:21:e9:50:b6:aa:
         06:80:96:b3:2d:40:6e:58:d8:fc:c9:8d:cb:60:30:4f:9d:9b:
         85:b4:55:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:38 2025 by rpki-client