Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File:                     qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier:          158a+66hOyPoW8ZyvDvr2xf6PTn4w82Hi88QUJJFw9E=
Subject key identifier:   6F:F3:59:D8:73:7C:1B:02:95:13:4F:1F:D2:C6:99:6B:C7:DB:16:95
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer:       /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial:       0197B96AE0D55BA26C5A1A3811DAB61A3F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number:          15D9
Signing time:             Sun 29 Jun 2025 02:01:18 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:18 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:18 +0000
Files and hashes:         1: 5HOepO76tD27CgXh7AgBSaOVvIM.roa (hash: fhyBpQTMKKX7db+5/rypfSBY1Vplej8lw2Wzs2aMOjk=)
                          2: cBAOU6NilQLgyxc_R_xsZNCxa3o.roa (hash: 1Va+iG7tZoyq2utzAVoaMA4hrJ+B4uv1WrhEZfEJdns=)
                          3: f5DYymL8L0FgOoFZZezVYFeh5Jg.roa (hash: 7uwt9itnco/csPtpi/DQC4t0QetXfLjimKtZXfisb00=)
                          4: jVDEyqMCODRbBkqkq43-QF92dZM.roa (hash: s/kttAz6ZQTi3SrIl36OIG3RsnNyK9roMAcg0ML6WjQ=)
                          5: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: dnhMJNmtO58QmktmV6s1Yg39OYpoIL6JTDAINNuy7Ek=)
                          6: sSUdZotuy4S4l9Q97FUkm6YHu1I.roa (hash: N9mN14LIOsmlRFzMWQaWvllKH9jT/1Q6bPMTPFvQFf0=)
                          7: t0oLewvfmtctM6fLKW7JACNy67I.roa (hash: eoIen7jr8ftFR2LBFlJ/X2GszHh0uXwaMxdCabuer48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:e0:d5:5b:a2:6c:5a:1a:38:11:da:b6:1a:3f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
        Validity
            Not Before: Jun 29 02:01:18 2025 GMT
            Not After : Jun 30 02:01:18 2025 GMT
        Subject: CN=6ff359d8737c1b0295134f1fd2c6996bc7db1695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:51:9e:c3:01:c9:be:ef:54:f2:92:3a:c9:
                    b2:fb:9c:52:77:6c:96:18:28:8a:fd:38:4b:d4:26:
                    dd:35:e4:3b:90:77:d9:1b:ae:30:aa:09:25:ec:a0:
                    6c:30:43:76:1c:52:ee:53:2d:f4:d5:a8:10:97:9e:
                    67:78:d4:b8:f4:5f:33:ef:bc:f9:17:7d:b8:b1:e4:
                    1f:1c:71:9b:f9:82:ba:e6:12:76:64:9e:29:2b:04:
                    4b:1f:54:78:9e:cf:2a:48:6e:7f:5e:54:82:9d:51:
                    1a:fb:2b:71:08:85:13:01:fe:ad:31:10:62:2a:8c:
                    61:78:d0:2e:1e:c4:cd:ef:3b:56:1f:0d:db:de:79:
                    9f:46:05:b1:42:dc:0c:0a:91:39:c3:40:f5:90:87:
                    32:75:23:31:54:b1:9b:f5:08:d3:2e:27:c3:74:b3:
                    da:40:9c:e9:5a:e5:11:36:cb:d9:dd:3d:11:6d:92:
                    fb:a2:a3:e7:26:56:89:67:f6:ff:6a:13:18:f5:99:
                    84:f1:d8:4d:e4:82:b3:c3:0e:79:00:77:3a:65:87:
                    9e:b1:cd:43:1e:55:a3:98:94:fa:46:f2:eb:6d:28:
                    19:93:43:b1:e8:2f:e7:23:5a:0e:d7:c2:70:e3:60:
                    3b:09:56:75:0c:e0:59:2f:5c:68:ed:de:97:89:d6:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F3:59:D8:73:7C:1B:02:95:13:4F:1F:D2:C6:99:6B:C7:DB:16:95
            X509v3 Authority Key Identifier:
                keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:09:0e:a5:de:f1:99:56:17:1f:7d:dc:59:b2:b3:0d:1e:30:
         2a:1a:6c:31:68:4f:67:65:b1:80:92:2c:a4:dc:bd:25:54:1e:
         3a:56:80:23:88:e6:67:34:83:30:8b:2c:80:85:4e:5d:bd:73:
         dd:cb:bf:b7:41:73:dd:f0:e1:8d:37:6a:89:fc:6f:2e:e9:0d:
         db:b5:5b:53:7b:77:b7:dc:c7:2a:69:7b:c0:e9:a5:31:83:0d:
         86:67:bc:42:d9:9a:fa:62:3c:c8:94:87:01:1a:e3:6c:26:f3:
         eb:3a:6b:46:15:fd:9b:c5:ed:39:b3:3d:fd:42:99:8a:bd:a2:
         c9:36:d3:09:b7:4f:63:27:96:36:35:68:75:26:a9:a2:80:5d:
         78:24:4c:9f:2a:99:4f:25:c6:b1:96:11:b5:7d:9a:50:4b:83:
         a4:39:49:51:a6:39:9a:87:a1:1d:7d:7b:cc:4d:47:37:97:4a:
         d9:bb:84:f6:b8:ea:b7:df:a7:66:26:56:8d:c6:89:0a:fa:56:
         5c:de:80:25:38:d8:24:a0:66:86:e7:6b:39:58:f5:c3:7c:02:
         76:52:f7:ae:8b:24:54:4b:78:ba:f7:46:0b:d7:e2:2c:66:c3:
         8a:cf:23:97:a9:fc:de:8d:63:59:52:49:ab:58:f0:92:6f:8c:
         bb:8a:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:28 2025 by rpki-client