Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File:                     qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier:          0aZpaJ5WoSkBoaM98D+W3DnNwT4xlHg9INzvj1b14v8=
Subject key identifier:   D0:64:2F:10:38:48:A2:51:DD:11:EB:8F:BF:51:0E:B4:22:BF:96:F7
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer:       /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial:       0197C426EAA01EF9D839934F7EB4DC974A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number:          15BC
Signing time:             Tue 01 Jul 2025 04:02:53 +0000
Manifest this update:     Tue 01 Jul 2025 04:02:53 +0000
Manifest next update:     Wed 02 Jul 2025 04:02:53 +0000
Files and hashes:         1: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (hash: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=)
                          2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: c9JpHfYcYThedwVFJF3xCKr4DI461wk8jx+6hdM2tBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:26:ea:a0:1e:f9:d8:39:93:4f:7e:b4:dc:97:4a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
        Validity
            Not Before: Jul  1 04:02:53 2025 GMT
            Not After : Jul  2 04:02:53 2025 GMT
        Subject: CN=d0642f103848a251dd11eb8fbf510eb422bf96f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:d3:d4:fa:52:54:27:5a:a8:41:3b:00:33:
                    11:43:5b:8e:16:66:a8:dc:0f:ee:c4:c3:9c:cc:80:
                    22:4b:85:98:a9:fc:45:59:10:a0:dc:de:b5:69:cd:
                    16:71:ee:a0:bf:db:f4:19:f6:6f:a1:65:00:21:a9:
                    88:e0:05:f8:e7:0d:8e:60:64:c1:b2:1a:70:ca:95:
                    3f:3e:4a:ae:09:84:11:60:f6:10:ff:d4:36:62:fa:
                    23:10:e5:30:0c:c8:dd:97:c9:bc:c9:ef:56:d7:9e:
                    cd:26:30:46:7f:54:aa:a4:c1:37:06:bc:64:4d:2c:
                    2b:ce:ef:9f:00:9c:e1:32:50:22:a3:d2:d7:b8:6b:
                    75:9c:72:b5:7e:af:14:dd:4a:34:a2:66:42:25:1d:
                    44:71:49:b1:79:63:ce:93:16:48:ed:19:2d:6a:e3:
                    a3:38:c9:4c:e1:b4:e2:78:0f:19:04:00:c4:3a:bd:
                    b9:17:ed:e5:c2:c1:b3:c8:a9:34:ca:98:c8:fd:3a:
                    67:55:54:81:95:91:d0:c3:c0:72:20:e9:1c:9d:83:
                    f4:aa:de:04:bb:5e:a6:f9:a6:a6:f2:75:af:76:88:
                    17:41:c3:2b:7b:ae:ac:52:50:89:7d:88:fe:d0:cd:
                    62:9c:fd:ab:9a:30:12:ca:bf:b8:24:3f:8a:86:3e:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:64:2F:10:38:48:A2:51:DD:11:EB:8F:BF:51:0E:B4:22:BF:96:F7
            X509v3 Authority Key Identifier:
                keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bd:a3:5d:b3:29:c8:63:2a:bf:8e:43:b3:65:ce:8e:f6:d9:
         cc:ad:f7:f5:a2:82:5f:2f:c6:3d:6a:c4:38:61:14:f0:54:63:
         fb:8f:c7:ac:6b:04:97:92:cf:3d:9e:c9:5c:06:96:d9:b9:02:
         df:07:1e:7c:82:07:2e:77:80:e0:63:0c:e4:25:f6:3d:2e:c7:
         bb:fb:25:43:e6:a9:0b:77:3a:b5:9b:5d:e6:48:c1:26:91:32:
         91:cb:82:33:99:9f:13:30:1b:73:32:0f:7c:f5:50:c4:c7:de:
         11:f4:27:51:c4:bc:b6:13:bd:03:d9:b6:2e:ac:2b:b2:ec:d5:
         2d:72:53:6b:19:d9:10:b7:4b:8e:bb:c5:cb:0b:96:8d:ce:bc:
         c2:a8:f4:3e:c3:01:51:15:45:7a:8c:90:92:50:88:0d:db:e1:
         55:05:b6:40:66:52:57:ee:d0:91:a5:d6:70:05:6b:2f:b8:7d:
         68:3d:43:18:75:f4:aa:0c:24:8e:36:8e:d3:c7:48:dc:36:47:
         d1:4b:26:87:8a:64:0f:80:53:74:5f:9b:a3:0b:a6:8f:bd:32:
         c7:9f:33:b0:5d:87:54:11:ba:8d:91:de:b3:6e:93:b2:35:86:
         64:2f:74:1b:fb:d9:4e:a9:58:e9:89:8e:6a:e6:7b:43:88:a0:
         17:5d:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:16:02 2025 by rpki-client