Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File:                     Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier:          sycaIPFa6Jc0vdCdidS3E+Js+saeD8EJBuSe7Xp4+Dg=
Subject key identifier:   B7:88:2E:E7:E0:25:56:BB:7C:5C:07:AC:CE:E4:7D:A3:6C:11:F6:16
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer:       /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial:       0197B70E72CAB537408E2F7505C35F8A05D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number:          125C
Signing time:             Sat 28 Jun 2025 15:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:06 +0000
Files and hashes:         1: FIyTe6Z5c9SlUs06XwKmTie5dUo.roa (hash: uOWoCbldz8pcJx7RQheZzjsLIzs/KJyulSs2wwLgbgk=)
                          2: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: wHrmmjdT4kd6o/Bew9Gg/Sx+FDREbscgXdZH5hromhs=)
                          3: odf_RloZld2f_C46K0BxlJYlBTY.roa (hash: EYo1H2ZwWe4UAQYrwYPYwqTrp1mcr6TNxmVLEo1rbg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:72:ca:b5:37:40:8e:2f:75:05:c3:5f:8a:05:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
        Validity
            Not Before: Jun 28 15:01:06 2025 GMT
            Not After : Jun 29 15:01:06 2025 GMT
        Subject: CN=b7882ee7e02556bb7c5c07accee47da36c11f616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:63:e4:a3:9b:26:e5:18:e5:d1:9f:e3:64:
                    d7:ae:a7:42:82:38:10:07:77:b8:51:d9:62:62:08:
                    ff:18:3b:b5:e6:c8:ff:06:85:bc:87:9a:4a:49:de:
                    ff:49:e9:0d:5c:eb:60:66:1b:4f:77:6a:3e:1b:9e:
                    db:df:1f:13:dd:9a:fc:2f:9f:bd:35:91:2e:ba:68:
                    b4:4f:ca:2f:86:ec:73:64:19:97:20:82:e9:5b:09:
                    4a:53:aa:5f:6f:1d:5c:9f:f5:a0:a9:43:44:f0:de:
                    46:bb:e4:01:39:98:f9:21:f2:5a:a1:b0:6f:66:8c:
                    6a:19:31:02:bb:42:51:53:bb:92:db:a0:62:9c:15:
                    ff:54:8b:ef:bd:e7:38:fe:e1:85:08:9d:fe:63:39:
                    71:97:af:95:30:33:e7:d7:dc:37:71:07:95:dc:64:
                    58:11:3e:9e:c2:d5:27:8c:90:c6:32:ac:24:fe:0a:
                    2b:67:6d:57:cb:05:aa:6d:bc:26:33:df:a7:c5:59:
                    30:e6:7a:54:e2:00:48:f1:f9:b3:85:32:16:1d:4d:
                    7c:ed:ec:f7:60:f4:4d:42:59:7f:28:78:d3:b2:27:
                    ef:14:7b:33:cc:22:88:3d:81:90:41:28:84:f5:01:
                    d0:20:c6:56:2e:51:02:51:b9:6b:1f:a5:8c:d7:08:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:88:2E:E7:E0:25:56:BB:7C:5C:07:AC:CE:E4:7D:A3:6C:11:F6:16
            X509v3 Authority Key Identifier:
                keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8c:af:f5:7f:08:98:16:1c:f0:ea:0d:a5:7c:4d:e2:4b:84:
         e0:bc:69:62:8c:6a:ce:a6:d8:4f:18:ed:d7:9e:96:78:f4:69:
         5e:0b:15:fa:37:90:8a:07:e8:7b:47:ce:86:72:01:ca:2c:50:
         bf:db:89:b8:a5:e1:8d:30:cf:5b:51:ee:af:a5:05:63:3e:71:
         71:f4:fd:99:b0:57:f6:2c:ba:61:88:2d:3d:01:ed:c4:9c:1d:
         6f:b1:e6:0a:1b:68:7c:8c:63:77:8d:e8:bc:cd:e4:58:4f:13:
         b2:5a:06:bc:d2:63:7f:96:52:ed:27:1f:a8:cd:61:12:1e:c9:
         e3:ff:4a:f8:55:dc:cf:1d:9b:d0:5b:2f:07:05:c2:23:5a:87:
         6d:1e:8b:bf:5a:19:44:51:72:db:3d:c5:7f:31:27:42:78:6a:
         35:e9:74:de:a9:fb:e3:08:75:5d:fb:27:06:88:f9:4c:e9:26:
         d4:55:ed:e3:86:de:fe:6c:ea:ee:3a:db:1f:0a:db:fe:d9:0b:
         b5:b4:2f:74:4b:c9:c4:73:b6:60:21:f7:70:50:b0:1a:d2:b2:
         85:1f:30:f1:c2:cf:fb:fa:e8:cd:f2:f8:0c:f6:27:98:a0:4f:
         54:bb:a9:4f:34:96:73:c1:27:ee:f2:0d:fb:f6:0a:6d:24:19:
         17:fd:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:32 2025 by rpki-client