Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File:                     lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier:          o+Qn6g4IqniTT66wqJYrpdzzqXGkBU6D6qKerD8dvyY=
Subject key identifier:   BC:A2:FE:36:43:C7:CC:85:A6:D1:47:8A:45:C5:09:FA:41:54:2E:4C
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer:       /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial:       0197B7EAE66FA4D574D8DF1FA7EF99AD354E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number:          0AE6
Signing time:             Sat 28 Jun 2025 19:01:54 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:54 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:54 +0000
Files and hashes:         1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: cj8ek3nZlR5rbKs7cF9Zo1TcNVErEbVCYWlHiyuFWdk=)
                          2: v_uqFNyNrjwxcamsF3cO6qzXKVI.roa (hash: 8Loff474F2iUwQ0Ne9OGFLSGYhgKQSa6EgjZzTy3738=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:e6:6f:a4:d5:74:d8:df:1f:a7:ef:99:ad:35:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
        Validity
            Not Before: Jun 28 19:01:54 2025 GMT
            Not After : Jun 29 19:01:54 2025 GMT
        Subject: CN=bca2fe3643c7cc85a6d1478a45c509fa41542e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:93:b5:93:7c:e9:81:37:71:47:c2:5b:d1:
                    bc:9b:78:d9:22:62:20:e7:84:76:a7:d4:9a:05:70:
                    c0:d8:06:82:2a:6f:72:2c:4e:67:8e:9b:df:fe:74:
                    11:fa:93:38:d8:a5:c1:51:2e:02:c7:67:73:a3:d0:
                    57:50:51:44:a8:d8:99:59:99:dd:b0:f0:ea:c3:ec:
                    57:dd:cf:2a:8a:bd:74:29:d4:6a:df:35:a4:4f:95:
                    9a:cf:0f:bc:b4:b1:38:b3:04:6d:a2:4b:9f:d3:02:
                    30:c7:3b:62:02:63:18:5a:1e:90:10:e1:dd:fa:cf:
                    3c:d6:9a:6d:dd:07:79:11:61:35:ee:50:75:42:93:
                    58:d1:fa:d5:df:e1:83:e2:59:57:8d:4d:cb:27:65:
                    a5:eb:3b:77:f3:92:fc:bd:55:9a:60:9b:f0:c4:85:
                    e5:5e:fd:f2:b9:bb:ff:b8:8e:10:36:a7:43:84:d9:
                    b4:28:88:72:4b:bc:8c:9d:26:53:fd:2b:d6:bb:d7:
                    13:83:56:6a:77:1d:8f:23:25:7d:a4:53:16:bc:71:
                    81:f7:f2:62:a7:c4:8f:aa:50:22:c3:56:0e:1b:4e:
                    44:14:21:cd:37:bc:18:fd:7a:a7:16:b6:c9:87:07:
                    60:bb:f3:0a:b1:37:e8:72:6c:1e:72:5d:6c:a3:8f:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A2:FE:36:43:C7:CC:85:A6:D1:47:8A:45:C5:09:FA:41:54:2E:4C
            X509v3 Authority Key Identifier:
                keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4e:5e:52:07:a6:7a:23:0a:36:0c:11:f7:af:3e:33:b9:ff:
         d5:00:41:e5:b5:5e:32:92:73:e7:dd:b0:38:8b:e9:99:be:a5:
         ab:5e:a0:fc:15:74:4a:5c:08:51:e5:58:57:9e:f3:eb:f3:a5:
         be:23:c8:c7:24:1b:22:f6:8e:ad:b2:a0:18:71:b6:99:f0:dd:
         db:ae:f9:a7:23:13:db:94:06:3f:64:d2:53:3e:c5:94:84:72:
         48:99:92:ba:f7:6c:41:ab:8f:b0:be:88:51:c5:a8:c7:2e:1d:
         7c:6b:cf:c2:90:db:62:ee:81:5b:cd:f7:3b:d2:2c:56:85:2f:
         09:2f:cc:9a:57:51:15:fd:48:a1:73:64:5d:22:91:a8:e1:bc:
         d3:f5:23:6e:e0:e2:04:45:f2:b2:81:a3:55:a0:3b:d2:e2:c5:
         20:d8:e1:c5:b5:0c:3a:59:ac:6e:8b:da:f0:f6:36:1b:ca:7c:
         f6:c4:a2:ae:60:a9:4f:b5:c7:13:44:b4:83:cf:99:70:29:79:
         b9:1b:06:c7:f2:49:30:d7:14:5b:e4:53:d7:5f:cb:49:eb:15:
         0c:e4:d6:db:8a:15:02:b5:c7:d8:bc:75:07:30:a2:14:e5:c5:
         70:8f:8d:91:c4:01:72:f8:a0:37:42:5d:9b:ff:7c:38:db:5d:
         06:4b:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:55 2025 by rpki-client