Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File:                     QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier:          xtM2OTQF/597RSVzxEzQuM+AwczwCD60FEeW9PVEerM=
Subject key identifier:   E2:68:06:11:EB:AB:77:81:C8:43:CC:1B:D7:93:27:37:D3:6A:C9:3F
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer:       /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial:       0197B7EA124BA1C66136A2E75F232378E48B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number:          CB
Signing time:             Sat 28 Jun 2025 19:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 19:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 19:00:59 +0000
Files and hashes:         1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: OLsZN7CeB14RLPsYb3IoBkxxm9A2/b6fuEOZQylhUu8=)
                          2: WibstNWW6k-lvYl4Qh5sNtmSYhw.roa (hash: E/2K/0j7Ly/9Z6jM3FsBVp9MBphb1aZ9lSBmqs0GOgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:12:4b:a1:c6:61:36:a2:e7:5f:23:23:78:e4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
        Validity
            Not Before: Jun 28 19:00:59 2025 GMT
            Not After : Jun 29 19:00:59 2025 GMT
        Subject: CN=e2680611ebab7781c843cc1bd7932737d36ac93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:f2:18:8c:d6:ba:ae:1b:7c:2e:bd:08:0f:
                    c1:45:e7:19:ff:02:4a:0e:4c:b9:e1:40:1f:1c:dd:
                    6f:3e:54:68:df:89:ef:b5:25:de:c0:dc:6b:91:9b:
                    df:0e:ea:01:76:c6:9c:c5:73:76:07:a9:e3:7f:0f:
                    8a:d5:8c:e3:69:43:e5:21:cb:2e:4b:81:b7:55:7a:
                    7e:0b:52:45:f4:e1:9e:7a:24:15:1d:f8:a0:aa:1e:
                    d7:6a:8b:1b:01:56:ab:66:30:ca:94:91:40:c2:ee:
                    dd:ee:6c:47:ee:31:80:6c:ad:43:b0:ed:21:48:8b:
                    96:9b:7f:94:20:43:82:72:ab:bb:86:2b:91:93:1e:
                    c9:c3:53:83:1b:10:ea:25:08:2d:ba:52:66:46:c6:
                    ac:9e:95:47:50:dc:80:07:93:75:d3:7d:4f:48:c8:
                    a8:e7:07:fa:41:ed:37:ac:89:82:b5:1e:c3:b0:03:
                    d6:1c:df:d2:58:49:92:72:53:31:1a:e2:14:b2:13:
                    b9:ed:fb:b8:c2:b3:60:d6:6f:f5:2e:f6:b9:2b:a0:
                    d4:45:9a:c8:44:92:71:84:3d:26:06:9b:05:fb:9f:
                    e1:84:a7:5a:c4:2c:0c:95:80:08:dc:d7:f9:96:3b:
                    5c:88:94:9b:7b:fa:54:6f:6f:f7:45:bb:98:c1:14:
                    f7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:68:06:11:EB:AB:77:81:C8:43:CC:1B:D7:93:27:37:D3:6A:C9:3F
            X509v3 Authority Key Identifier:
                keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:54:ad:c4:d5:17:aa:55:bf:2b:2c:6b:b3:f8:03:91:01:
         ee:16:c2:b1:4f:66:99:77:d6:af:e7:ef:77:ba:fa:55:eb:da:
         3f:cd:64:50:7c:62:ca:4a:45:58:a8:6a:b9:62:8a:fc:c4:3a:
         5a:b2:1a:8f:6c:a4:52:62:21:ff:4d:a9:84:3f:aa:b4:fe:06:
         a3:f4:f9:9b:4b:df:09:b1:c1:52:d6:84:3d:e8:76:3e:ed:45:
         d0:0e:6e:2a:f3:e6:28:37:3d:34:4e:10:55:91:39:5c:03:aa:
         87:a4:7d:fe:75:b7:9b:e6:c9:15:b4:94:09:08:bb:3b:33:ac:
         d7:fc:d6:ee:5b:be:71:32:fd:4a:0e:cc:ad:74:91:b8:6c:99:
         2f:eb:0f:df:8f:a0:5d:a2:b4:77:8d:0b:03:23:c2:2b:01:4f:
         6c:55:a2:9c:49:ec:48:a7:d1:bc:a9:18:37:01:6d:ad:84:c7:
         a6:62:e6:84:8a:9c:3b:66:cd:e0:5e:66:52:de:72:03:b2:1e:
         29:48:06:09:d3:8d:20:78:8a:cc:92:6e:fa:a0:f6:b4:23:0f:
         83:8a:e4:0c:14:e3:57:29:2b:e9:b6:1b:3c:9e:c7:87:df:80:
         8b:99:40:91:f9:2d:f3:78:c3:5d:1d:9d:cc:0d:56:10:7b:5c:
         0d:5f:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:51 2025 by rpki-client