Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File:                     CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier:          Owo0nrCdOTqNG9ok5UT4s3ywgE2AVDWTYf3vBCn7wYE=
Subject key identifier:   E8:CE:9F:AF:E6:8F:AC:0E:D9:30:72:9C:D8:05:D0:3A:32:98:61:B3
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer:       /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial:       0197B9341023F219797DFE6721BE2012A33F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number:          0D50
Signing time:             Sun 29 Jun 2025 01:01:26 +0000
Manifest this update:     Sun 29 Jun 2025 01:01:26 +0000
Manifest next update:     Mon 30 Jun 2025 01:01:26 +0000
Files and hashes:         1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: h2nEEcUs2J65cW8384z2sIauSahd0Uno5D2oV6YFpC8=)
                          2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:34:10:23:f2:19:79:7d:fe:67:21:be:20:12:a3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
        Validity
            Not Before: Jun 29 01:01:26 2025 GMT
            Not After : Jun 30 01:01:26 2025 GMT
        Subject: CN=e8ce9fafe68fac0ed930729cd805d03a329861b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:36:ec:bc:0f:b4:09:55:70:f8:e3:bb:22:
                    1e:f5:e8:b5:72:12:0b:d8:07:ae:43:ff:b7:f7:76:
                    44:7a:ea:04:4c:2c:a9:f2:48:a7:fc:60:2f:53:8b:
                    8a:3e:c7:91:1c:dc:f4:48:a3:ce:15:33:7e:cb:cd:
                    8a:03:64:71:1a:d1:c7:7a:c1:36:e5:03:ba:2a:c8:
                    ab:00:b2:15:71:b9:13:89:56:f2:0f:de:57:e3:c3:
                    89:9a:4c:3e:2b:76:59:78:d1:7c:f8:f4:18:4d:a5:
                    f3:0e:9a:6d:00:5a:41:22:d5:84:0c:75:bb:bd:5c:
                    b2:2e:9c:6f:b6:9b:61:c8:16:da:eb:f4:39:6c:32:
                    70:0c:e7:cf:71:69:2e:f5:45:11:d3:69:8c:14:2e:
                    ae:24:d9:14:b9:50:5b:5f:04:1c:e7:1a:37:b0:34:
                    7a:cc:aa:c7:1e:58:dc:60:1f:a2:97:20:4c:e0:e8:
                    68:f4:47:e8:34:67:97:71:21:35:18:b6:34:cb:bf:
                    1f:71:16:08:48:28:8f:aa:d1:e9:2b:64:9e:5d:f5:
                    14:4d:a3:c4:4e:54:67:2d:d5:64:da:02:e1:be:a8:
                    40:e0:d8:14:89:0c:26:10:b4:1e:db:68:c8:88:27:
                    4d:ff:b2:2e:0d:66:17:9f:94:b6:3f:98:a9:8e:59:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CE:9F:AF:E6:8F:AC:0E:D9:30:72:9C:D8:05:D0:3A:32:98:61:B3
            X509v3 Authority Key Identifier:
                keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:31:f7:f8:81:af:29:53:d7:90:59:28:d1:9c:9e:aa:ed:fb:
         64:8f:b3:0d:c8:92:80:ee:f5:95:3f:0d:8e:51:34:b8:fd:b4:
         cc:9c:7f:14:02:06:d9:53:c6:c4:57:14:b6:95:76:a5:97:96:
         3b:99:07:31:a7:c9:94:6e:d1:c3:3a:e7:16:a6:71:d2:0c:1c:
         56:0e:c5:25:49:e7:82:10:0a:95:f5:30:13:0c:e4:0f:35:a4:
         74:eb:94:78:a4:5c:f6:b9:96:16:44:25:dc:65:ae:30:18:61:
         b2:54:e1:08:73:86:9b:6b:c1:23:8a:b4:01:e8:0d:d6:c3:60:
         22:45:00:f8:0c:f3:65:fa:d5:b5:aa:3a:ba:ad:38:c7:86:5e:
         d2:ff:cb:fb:de:69:f2:31:b7:60:be:1a:b6:91:97:0d:18:11:
         b9:b1:63:17:4a:38:10:04:32:23:bd:92:e3:de:0b:5e:20:3c:
         9f:fa:86:82:17:c0:8a:0f:71:b0:ac:74:c0:65:d7:b7:07:19:
         1d:3a:4b:a2:69:f6:74:4c:fe:67:47:40:7a:cb:1f:12:a8:ef:
         fe:ed:56:fd:7e:11:41:82:78:6a:df:6f:3f:75:49:e4:ca:9a:
         a9:6a:a4:29:bc:ea:68:88:5e:da:8a:9c:a2:89:2b:d1:16:68:
         8a:e4:15:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:22:55 2025 by rpki-client