Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          PQC4xakycLM1BCnTY6VERr7W39vmYgXL2og4QtkTiJo=
Subject key identifier:   84:72:ED:5F:C2:39:11:DD:B0:92:DE:98:37:57:69:24:E3:82:25:B4
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       0197B6A0467E605AF5E05D3DB67470093DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:46 +0000
Files and hashes:         1: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (hash: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=)
                          2: brfKmaHZgWhn9Y1IgcosJigVegE.roa (hash: hRHZ0HKst4J6nqgNJucpnxIpgDhzIMo76gGJN9N1kSE=)
                          3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: LOHEr3EFS7aPxYhvblGoRgeF9UkKJLb+IeCN7+qByEs=)
                          4: tTyobIMETJWMRqGGbvqF3q_JzFs.roa (hash: oRSuTrzckp8V2s4ne2mBwQQ1J529VLuwAhGtgjqw+Go=)
                          5: wd0T2jlDARdpvazu9WfBcqzqFRI.roa (hash: uy8OHigRvAXPuAD5Z6pOXMag0Udux534TcZIu/uohEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:46:7e:60:5a:f5:e0:5d:3d:b6:74:70:09:3d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Jun 28 13:00:46 2025 GMT
            Not After : Jun 29 13:00:46 2025 GMT
        Subject: CN=8472ed5fc23911ddb092de9837576924e38225b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:81:e2:c5:b3:43:41:d6:6c:dd:56:ed:5f:
                    f6:95:86:74:42:df:f6:19:a5:64:de:7b:d7:79:0a:
                    43:52:a9:10:75:e6:58:9f:fa:f2:ea:cb:a6:5c:4a:
                    28:bf:1d:02:22:b5:dc:9a:4e:36:34:99:d3:38:d0:
                    73:af:e7:1b:af:95:50:f0:af:2f:9b:91:6f:ed:f0:
                    2b:f2:ed:82:28:da:49:42:76:17:8e:11:c4:2c:86:
                    fe:da:4b:5a:58:d4:ef:6e:68:75:3e:7b:da:cb:0d:
                    79:d6:09:82:3a:98:d1:50:53:31:95:9b:dc:7c:d9:
                    6e:ed:fd:3d:7e:84:92:29:35:67:cc:37:a6:0f:d9:
                    ba:8f:68:b1:55:11:ed:db:fc:3c:d8:78:fd:af:aa:
                    ce:4c:c2:e8:3a:d7:f5:6d:dc:1d:d4:1d:e5:96:2b:
                    19:4c:42:bb:7a:a5:11:b6:1b:fb:85:26:80:22:2e:
                    ad:a0:42:9b:2f:5f:18:3e:b8:d9:9f:f2:fb:08:60:
                    1b:62:83:7c:d5:dd:5b:22:e1:69:46:17:97:32:c8:
                    65:33:50:e6:da:bb:74:a5:83:07:c4:9d:ce:ba:c9:
                    be:ac:7c:f8:74:d1:3e:43:3e:f2:23:2d:65:43:f5:
                    8d:bf:c7:7e:fb:c4:d5:ba:d6:e5:d6:02:79:25:08:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:72:ED:5F:C2:39:11:DD:B0:92:DE:98:37:57:69:24:E3:82:25:B4
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:5a:c7:a7:6d:4d:1c:83:c6:17:0e:cc:29:ce:27:d2:f6:
         ef:23:cf:95:bb:d0:c7:8d:99:88:e8:df:15:c5:a5:11:b6:bd:
         94:77:54:b6:f2:ac:3d:d8:a1:f6:26:14:e0:ac:ef:ca:e9:87:
         fd:15:d5:be:cd:88:e8:2f:d6:65:79:cc:b7:95:22:db:c9:43:
         e6:0c:6a:d7:73:66:0f:07:f6:0c:bd:5e:80:f6:c6:96:1f:7d:
         14:95:6e:1f:35:5d:24:3b:09:fb:b2:1c:c2:83:40:37:33:88:
         f2:bf:8f:36:5e:62:d4:72:20:e0:70:72:0c:96:94:b0:31:c7:
         bb:c1:50:75:e3:be:49:66:9f:81:2a:ec:90:b0:b0:ab:f2:03:
         2b:46:18:b0:cf:9a:b9:00:0a:96:b1:74:86:6b:d7:10:a8:28:
         60:a4:d5:1f:2e:f1:98:f4:aa:78:bc:dd:c6:ff:6e:14:32:71:
         56:f2:66:5b:00:2a:7d:50:54:c7:28:7b:ef:99:02:13:94:32:
         6f:39:07:8d:3c:35:cf:1f:5d:23:0e:7e:25:f9:1c:e5:00:c4:
         33:c4:04:21:0b:d0:98:7c:e8:16:05:55:e5:52:c2:17:16:ae:
         56:4d:81:6e:39:fa:15:63:b4:35:0b:ce:cb:4b:64:d6:16:f5:
         43:94:6b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:26 2025 by rpki-client