Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File:                     q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier:          eaPCeA9YS5e7OV78Y7gt3zMjktJO8P8mfOwAoYCVuMk=
Subject key identifier:   B1:FF:C8:3D:1F:75:BA:98:BE:0A:B7:96:41:4F:2C:64:0D:F2:48:BE
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer:       /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial:       0197B6D7AA516CFACD32AD4C5CB8DC616ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 14:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:16 +0000
Files and hashes:         1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=)
                          2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: PZ81bGG0D8sdXRvc9UwJybvqXHIdq+2nFKL2Eq9beuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:aa:51:6c:fa:cd:32:ad:4c:5c:b8:dc:61:6e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
        Validity
            Not Before: Jun 28 14:01:16 2025 GMT
            Not After : Jun 29 14:01:16 2025 GMT
        Subject: CN=b1ffc83d1f75ba98be0ab796414f2c640df248be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:7c:ff:b0:32:f7:cd:4c:e6:15:c1:65:68:
                    cb:f5:5c:dc:cc:a2:4f:38:65:f0:a7:10:72:4b:37:
                    14:f5:ce:9d:95:2b:63:03:51:d4:02:03:77:93:9a:
                    24:65:27:31:3b:03:1a:64:2d:c6:ad:c0:a8:85:37:
                    4c:76:f2:0a:26:a3:84:7a:fd:88:89:f5:b5:50:fe:
                    e2:bc:4a:91:06:c7:4a:5a:bb:ea:de:dd:8c:d2:18:
                    c5:9b:65:ea:13:2e:43:67:1e:10:d5:e1:b9:cb:dc:
                    01:9e:4c:0a:26:d8:34:b0:f9:93:ea:bf:21:c4:f8:
                    4e:56:d6:96:9b:a0:6b:03:16:c6:00:65:fd:20:a5:
                    5d:78:b5:6f:b2:9d:af:bf:7a:16:b7:24:93:99:8a:
                    25:46:74:93:62:16:a7:65:ea:ac:3d:68:fc:45:45:
                    08:06:c0:61:bd:8b:1b:43:fe:54:b0:51:f6:66:34:
                    63:5c:86:9c:77:9e:c6:85:66:15:48:36:71:08:f6:
                    2a:ae:37:e3:86:32:2e:3d:e4:41:d7:69:ec:7b:49:
                    80:d7:56:80:8b:39:e3:b2:b8:97:cc:83:1e:d0:4b:
                    b0:15:0f:d8:f7:9e:bb:26:45:21:af:bf:8c:cd:94:
                    39:61:04:e2:dd:39:7e:eb:2e:26:a6:42:d3:c1:ad:
                    df:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FF:C8:3D:1F:75:BA:98:BE:0A:B7:96:41:4F:2C:64:0D:F2:48:BE
            X509v3 Authority Key Identifier:
                keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:52:51:3c:67:de:b9:16:26:4a:00:7a:b6:37:b7:52:fe:
         b7:47:20:16:70:81:50:25:af:38:8f:48:4b:7f:3e:ee:04:19:
         b6:87:8b:e9:85:a2:58:a9:72:bf:69:61:5e:e5:29:e5:35:a2:
         e7:44:30:7c:78:5c:b5:b9:2a:f6:78:a1:43:e8:e3:91:fd:db:
         c9:78:66:8b:7f:d3:5d:6f:cd:be:e1:f7:3b:1f:9b:9c:2f:9f:
         9e:e9:22:93:ec:47:d0:a7:05:b7:06:7f:8b:3e:52:18:fa:06:
         c7:e9:f3:73:a4:f0:73:cb:ab:3c:14:08:15:66:da:ad:6f:db:
         ca:ca:5d:9b:21:02:7d:f0:12:ab:a0:2c:ab:da:6d:1d:5c:36:
         ec:11:d7:2f:31:f4:df:da:e0:71:b1:f3:7f:19:60:6a:0f:8e:
         d3:50:12:9a:ac:60:12:e0:27:96:1e:74:70:33:22:8d:42:43:
         f5:55:ba:97:93:2a:2e:74:f7:00:b6:39:e6:74:a7:a2:65:0e:
         65:87:ed:4b:67:ed:2a:46:59:83:4d:8b:9e:f2:fd:23:2f:96:
         1f:74:39:1f:c5:5f:ea:cf:5c:59:99:c3:62:3a:cd:c6:d5:b4:
         1a:b7:95:3d:e1:f1:3d:1e:b5:d5:20:57:69:96:26:2e:c2:e9:
         82:be:ea:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:20 2025 by rpki-client