Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File:                     aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier:          y2lPLdiDWiFBL0TnZPwhB5ZpsUjfwTWaTIg63oYjK6U=
Subject key identifier:   DE:9D:66:B1:C1:9E:F3:61:8C:2B:15:B8:BC:2E:B2:28:8F:4D:1B:D4
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer:       /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial:       0197D62B8DE9C6E06762C9A5E87AE11ACF10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number:          074D
Signing time:             Fri 04 Jul 2025 16:01:07 +0000
Manifest this update:     Fri 04 Jul 2025 16:01:07 +0000
Manifest next update:     Sat 05 Jul 2025 16:01:07 +0000
Files and hashes:         1: 5qlyqHqHN9fm7YIJbWQAFC8mvBE.roa (hash: i7ncddTAht6A90LZTtfDRpJSDX/ZI6t1vgckOHtmIjg=)
                          2: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: +oDLp692hcDLaQ8NDUfXBuBeJLIrOPa84vnsbkjO3sI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d6:2b:8d:e9:c6:e0:67:62:c9:a5:e8:7a:e1:1a:cf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
        Validity
            Not Before: Jul  4 16:01:07 2025 GMT
            Not After : Jul  5 16:01:07 2025 GMT
        Subject: CN=de9d66b1c19ef3618c2b15b8bc2eb2288f4d1bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:30:0b:b5:c5:ae:a0:ba:ff:2f:88:3c:a9:
                    46:9e:8d:23:a0:58:93:7d:a8:36:72:60:4f:46:e3:
                    2d:ec:fe:81:d7:35:ae:b8:1f:aa:39:9f:02:fc:b9:
                    bb:af:e7:66:70:70:da:61:31:22:c0:de:77:b9:b4:
                    28:13:c3:25:c8:3b:77:cf:c7:03:9b:7d:0d:21:c1:
                    52:dc:eb:2e:9d:fd:c5:07:b4:66:7c:7c:ef:cb:67:
                    67:a4:58:3c:31:34:85:9b:b1:e5:a6:71:e9:52:03:
                    fb:db:e6:34:10:52:90:a9:43:cf:4d:86:99:4f:69:
                    1d:9b:4f:f3:d5:8e:06:0d:4c:5c:3a:29:56:ac:48:
                    b9:dc:e0:b5:b8:0c:7f:b8:ea:15:15:e7:85:5f:13:
                    6c:b9:e7:42:32:c7:40:74:65:e8:cc:41:ff:5a:e5:
                    37:ea:df:fe:dd:1b:c8:e2:8f:36:4d:05:fa:d3:03:
                    3f:e3:5a:2b:54:c6:90:74:fe:f3:2c:2a:a7:63:91:
                    7b:90:11:fa:92:2c:86:ce:eb:36:81:ff:27:a3:88:
                    ad:0b:1e:e4:ab:87:bb:e8:ef:bf:cf:63:13:6e:78:
                    36:2e:61:0f:75:ab:c5:e0:3a:df:61:c5:b1:3a:fa:
                    2b:d3:7e:81:40:e6:3d:b5:71:ee:a5:ea:56:a8:31:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:66:B1:C1:9E:F3:61:8C:2B:15:B8:BC:2E:B2:28:8F:4D:1B:D4
            X509v3 Authority Key Identifier:
                keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:02:f0:39:10:27:6d:b2:0d:fc:93:02:f4:db:82:d5:b6:42:
         aa:98:28:b7:eb:a5:97:ad:0c:68:7c:eb:b6:65:d9:e9:10:0c:
         ed:8f:2f:b1:ae:19:03:d0:76:90:4f:84:a1:0f:61:62:5c:fe:
         f3:1a:a4:6f:ce:38:34:f6:ce:0f:51:6c:c0:eb:c1:bc:9a:2e:
         e7:eb:3e:0b:47:c0:bc:9c:6d:ce:2d:53:f6:db:75:a2:e6:81:
         9c:4b:4a:ea:b1:b0:c9:63:7e:53:15:95:0a:54:17:c1:96:8d:
         38:51:e5:db:d4:de:0d:1d:bc:87:2b:6d:c5:d6:26:73:c8:92:
         a5:3e:98:1b:9c:c4:e7:e9:2a:75:b1:f2:23:0d:e9:8a:df:ce:
         6d:d0:82:55:3f:c0:6c:e7:cd:91:ad:af:30:d6:00:0d:37:f0:
         28:d2:18:30:40:da:a7:0d:21:05:5d:2a:a2:50:04:fa:98:9f:
         3b:f8:73:32:e3:7e:e3:8e:a9:f2:c3:14:66:86:a0:a2:38:c4:
         43:61:1b:00:bc:96:61:e0:5f:f6:6b:34:d8:f1:f2:7d:e0:b3:
         36:fa:7c:91:4c:ca:57:dd:c8:6c:61:09:2d:73:cf:12:ea:e3:
         38:8f:f5:6e:63:18:c4:0c:d8:b9:19:f2:8d:e3:04:11:80:6b:
         27:85:35:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:10:51 2025 by rpki-client