Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File:                     Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier:          zhkCS60RBrCwNtbv5XauuqIN8mUmiSjAcFQJqM2/Ttg=
Subject key identifier:   00:88:6C:D5:ED:F6:25:DB:62:87:62:C5:7B:6A:A7:DE:8F:C4:06:11
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer:       /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial:       0197B7B2F64A14AA9B7C5A8BACA749A1DE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 18:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:48 +0000
Files and hashes:         1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=)
                          2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: WcvpFt0eb6JWM3c0Gi+RJyCjWMEMWv0q7+m3NKTWKTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:f6:4a:14:aa:9b:7c:5a:8b:ac:a7:49:a1:de:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
        Validity
            Not Before: Jun 28 18:00:48 2025 GMT
            Not After : Jun 29 18:00:48 2025 GMT
        Subject: CN=00886cd5edf625db628762c57b6aa7de8fc40611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:a4:ad:7b:07:dc:77:6a:ab:40:68:ba:12:
                    c2:b1:c0:8f:e4:51:67:17:7f:8f:e5:be:39:64:51:
                    76:5b:78:e6:b2:2d:7e:90:da:18:53:63:16:0e:73:
                    75:62:91:b2:15:d4:55:86:8e:52:cf:40:60:6c:d4:
                    b0:13:16:48:e3:57:12:51:73:43:e6:30:b6:8c:e2:
                    70:7c:93:98:d7:09:dc:e6:be:ac:ee:f0:16:27:39:
                    59:89:94:6b:51:d2:a8:1a:b2:0e:72:28:1b:01:b9:
                    f3:2c:40:a0:2f:b1:28:c4:fd:50:73:ec:0d:80:7c:
                    12:34:51:64:a8:e5:ba:7b:a8:47:29:70:39:c6:84:
                    68:f9:6a:19:26:f6:b2:73:a8:75:4d:eb:64:56:d9:
                    ae:1e:2e:a8:bf:c1:f9:82:6b:c5:ff:73:68:b1:03:
                    97:14:1a:13:ad:68:6a:e8:6a:84:7a:20:91:26:53:
                    82:fd:96:28:17:d0:ff:82:85:11:e1:12:eb:47:96:
                    8a:89:fb:72:97:fc:6b:a8:7b:6e:a0:39:d0:a9:6a:
                    73:4f:66:15:45:ff:72:b9:56:2b:b4:b8:c5:e3:e2:
                    1f:fd:c9:8a:6d:6f:dc:73:57:bc:d1:4d:98:cc:c9:
                    d8:f0:8b:3c:3e:07:fc:85:e7:a7:de:1c:61:9e:23:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:88:6C:D5:ED:F6:25:DB:62:87:62:C5:7B:6A:A7:DE:8F:C4:06:11
            X509v3 Authority Key Identifier:
                keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:80:61:78:18:a2:7d:53:80:85:0b:54:b9:88:27:73:f1:f8:
         b8:a7:1d:28:af:ca:a4:a7:4c:f4:b1:ab:f9:90:6e:56:f0:f1:
         72:75:24:0a:c0:bc:a1:d7:2d:11:a4:64:e9:2e:23:8b:20:65:
         fd:45:44:2f:7d:12:2a:67:16:f9:a7:1a:95:71:02:fb:ae:a9:
         5e:90:ab:f4:73:81:65:71:74:8d:2a:88:59:2e:9d:77:15:35:
         75:e6:cc:89:50:a2:dd:e4:b7:4d:6e:f9:b7:d4:66:0d:5b:bf:
         14:ac:66:70:4e:91:a6:20:a6:ff:3d:e4:94:06:67:7c:a5:7c:
         aa:08:72:02:9d:8a:12:7a:cf:26:c9:5c:eb:66:ce:96:71:67:
         a2:10:0d:1d:14:ee:10:35:83:d9:94:9f:5f:89:3a:77:9c:de:
         42:03:85:e9:b4:e9:56:87:e2:ce:62:7c:16:dd:b7:d1:8f:62:
         91:10:c5:a3:68:75:63:48:a2:32:96:42:de:58:34:fb:d0:2e:
         eb:91:fa:4c:3a:42:7a:bd:02:df:aa:be:54:84:88:48:0f:72:
         40:f4:1e:af:b1:29:e3:5e:e3:34:a2:ff:51:d1:54:a6:89:0e:
         a7:b3:c5:35:cb:e3:5a:a7:07:b6:d1:23:1d:35:06:94:6e:cd:
         9e:2e:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:11:27 2025 by rpki-client