Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
File:                     QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft (raw, json)
Hash identifier:          y7JJdc5jbRwgKQvw+TEqhM/CEDP5zKy3P8Y6xIGhi04=
Subject key identifier:   26:8D:D8:05:17:D9:26:C0:09:E9:58:B0:FB:49:78:7B:45:0D:31:34
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Certificate issuer:       /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial:       0197B6D7C343158AC210B88DFC9BCDC56B35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
Manifest number:          0FE3
Signing time:             Sat 28 Jun 2025 14:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:22 +0000
Files and hashes:         1: 4ylLEVDeXKrfF8Se5wkM9llLd1w.roa (hash: 4hQQfVDyFUxXBSnxIrSQDsLfslrlkzzZ+2tzn4mkErM=)
                          2: QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl (hash: 9ElWExkesJSne/5vTApFkTvXLsJ4TJ34NNkDqs4V4F4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:c3:43:15:8a:c2:10:b8:8d:fc:9b:cd:c5:6b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
        Validity
            Not Before: Jun 28 14:01:22 2025 GMT
            Not After : Jun 29 14:01:22 2025 GMT
        Subject: CN=268dd80517d926c009e958b0fb49787b450d3134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:66:70:fe:2c:d0:fc:2e:29:7f:ca:02:0e:
                    7f:b0:72:68:c2:65:f0:04:88:36:1e:7d:6d:37:b4:
                    d3:dc:51:6d:95:32:6e:52:49:a9:a0:3d:51:0f:e3:
                    47:27:15:d3:55:c1:da:6d:46:84:f0:21:cb:11:a9:
                    16:a6:a8:1b:1d:8d:7a:ea:91:ce:48:d8:dc:b4:d3:
                    3a:dc:ad:a5:a1:3b:9e:23:f6:88:ba:92:a5:e4:20:
                    ad:d0:34:7d:59:91:01:4b:93:45:87:1a:e9:b3:0f:
                    8a:1f:fd:49:ce:61:ae:94:e3:16:37:fb:b1:fe:fb:
                    12:a5:f2:29:dc:9b:37:a6:0b:dc:a1:d3:d4:74:13:
                    1f:ad:41:ab:35:22:31:47:b4:c6:bb:4e:99:9b:bf:
                    fb:75:18:ce:fc:ec:f6:e4:e8:ec:77:1a:9c:e1:00:
                    e3:db:5a:4d:5f:cb:37:d8:6c:a6:45:1f:b4:2f:84:
                    02:2e:e1:f5:29:33:63:d0:90:94:b6:d2:49:e4:ae:
                    80:19:60:d5:58:12:50:3d:f3:6b:49:97:90:8e:92:
                    7a:58:2c:ea:f5:05:a4:06:d3:df:6e:35:c4:c9:f2:
                    8c:62:ec:2e:97:aa:61:27:d9:d4:29:87:ee:7f:a7:
                    85:a7:00:ec:79:dc:88:4e:b4:80:54:70:56:22:84:
                    f5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8D:D8:05:17:D9:26:C0:09:E9:58:B0:FB:49:78:7B:45:0D:31:34
            X509v3 Authority Key Identifier:
                keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:b6:19:63:61:63:d2:d0:0b:a9:13:a5:32:f9:14:cb:b1:
         74:9a:72:a2:7f:3b:b4:2c:6d:ec:7f:f4:99:f7:52:1f:9e:9a:
         72:1e:82:8c:bf:73:e4:63:4b:df:4d:ee:ec:ee:77:f0:70:91:
         82:59:fb:f2:4d:82:04:2e:3e:42:76:88:e5:21:f6:8d:c1:9f:
         9b:24:04:dd:f2:54:ef:e0:3b:71:71:b9:8e:33:91:b8:25:28:
         a0:a8:4e:e9:50:23:48:7f:fc:ae:91:b4:da:fe:4d:19:97:98:
         0e:10:99:7e:fa:c2:04:ca:15:54:ee:7a:37:a6:b2:07:77:ff:
         9d:ad:3b:40:fa:8d:2f:cf:37:ac:be:0e:26:41:85:d0:4a:a6:
         17:ae:93:54:7b:1b:f8:1f:43:5c:8f:7b:d4:a7:7c:ee:fd:c9:
         ee:5c:90:ca:01:83:2d:5f:66:6e:b7:1e:b0:55:8d:f2:8c:69:
         be:6f:e1:b8:26:8a:0e:5e:24:51:92:5e:0c:db:74:2c:56:12:
         2d:13:35:3f:2b:04:e4:7a:cc:28:de:df:03:da:8e:dd:e5:a9:
         1e:d1:78:44:ae:8f:92:a4:8c:7a:53:cc:17:f7:57:95:ff:7d:
         eb:81:71:33:a9:0e:f8:9c:32:45:b4:ba:25:82:c6:0b:d4:81:
         23:02:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:34 2025 by rpki-client