Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
File:                     q6-0Li5v0JBX_KIbmQhNrDt68tA.mft (raw, json)
Hash identifier:          88ujBdBeIFS7z05QT+QYrDK1jMGzJowE04pTl9sMNlI=
Subject key identifier:   4A:75:DB:71:4D:25:26:2C:F3:69:6E:FA:9C:87:CF:DC:57:EC:FB:AD
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Certificate issuer:       /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial:       0197B96B085986AA21D84610AE0748902BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
Manifest number:          15B5
Signing time:             Sun 29 Jun 2025 02:01:28 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:28 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:28 +0000
Files and hashes:         1: m33s4sgep6-q8UmRmhXl2lkYj9Y.roa (hash: SAyf+MEL6W5SBqvzjsdQj/Xgc4QN6O97LJUm4XtKLGM=)
                          2: q6-0Li5v0JBX_KIbmQhNrDt68tA.crl (hash: VJlbHkIu4YTu/y8YkuieRh18U8jUVOzPCOtUja3MU7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:08:59:86:aa:21:d8:46:10:ae:07:48:90:2b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
        Validity
            Not Before: Jun 29 02:01:28 2025 GMT
            Not After : Jun 30 02:01:28 2025 GMT
        Subject: CN=4a75db714d25262cf3696efa9c87cfdc57ecfbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:49:4d:9d:47:85:cd:d3:e0:25:52:e8:c2:
                    2c:88:fa:3a:5a:78:6e:e0:ea:d4:cf:a1:28:19:8d:
                    3b:e1:b6:88:96:02:eb:71:09:e2:e8:6e:df:8d:ec:
                    bc:65:da:40:ee:f2:c1:03:e7:e9:c9:12:aa:af:4b:
                    25:ef:7c:a7:c6:7d:60:eb:bc:7c:ba:db:41:3e:a7:
                    db:02:20:70:dc:4b:a8:e0:01:89:81:26:8d:d2:ed:
                    73:c8:28:3c:36:ed:1f:e6:59:c2:95:27:7c:11:a7:
                    67:d7:eb:a8:b8:d2:17:99:95:eb:39:74:f7:06:26:
                    33:ed:23:37:ea:e9:0c:d2:6f:bd:f2:0b:1d:fd:e4:
                    7c:8d:49:fc:15:f5:1b:7d:b7:a7:91:32:d5:23:d4:
                    50:bc:be:cc:e5:89:d0:d7:b9:7e:85:b8:15:a0:82:
                    fb:2a:e9:3e:1f:08:d1:c6:31:89:e3:02:b8:22:d1:
                    f9:df:f3:7d:78:c4:17:4e:e8:a2:18:65:fc:8f:6b:
                    96:96:c8:b1:3c:76:6c:c4:91:3a:8f:c0:08:63:86:
                    e2:88:ef:d2:18:9a:2e:fb:0e:e1:30:b5:7d:cd:54:
                    90:cd:2a:b2:52:2b:56:41:08:99:c9:a4:7a:14:28:
                    7d:79:ac:bc:65:6e:13:ac:0f:ef:f1:15:20:18:34:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:75:DB:71:4D:25:26:2C:F3:69:6E:FA:9C:87:CF:DC:57:EC:FB:AD
            X509v3 Authority Key Identifier:
                keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c1:75:0c:78:d9:05:6d:01:22:5f:ef:9d:e9:d0:b8:cb:4b:
         3a:a6:5c:48:92:be:71:b4:dd:90:17:14:a2:08:03:f8:2b:cd:
         b0:51:3e:f4:6b:4f:54:bf:5f:2f:08:5f:cf:7c:6b:b5:af:b9:
         d9:bd:64:8c:40:51:81:81:bd:b6:ce:12:ad:45:f8:ad:28:54:
         62:d2:4f:2f:2f:16:50:da:a0:ba:42:eb:dc:69:97:71:85:cd:
         a1:38:00:3e:b5:41:c2:2c:f9:91:5f:69:cc:2f:2c:d0:22:b5:
         65:b8:f9:06:66:90:99:34:1a:9e:a5:37:00:58:32:e1:d5:7b:
         05:ff:6b:ee:c5:c8:41:e7:c3:03:8c:25:da:51:c8:de:b7:dd:
         f6:f1:d1:da:98:46:f8:a0:1a:21:c7:6c:47:14:3f:6e:b7:1d:
         db:c3:5b:65:0a:00:c2:d4:10:12:d0:7b:35:6e:90:6a:7a:60:
         24:f4:db:ce:20:b2:69:99:09:47:1e:27:06:3d:a0:cf:98:26:
         32:23:d7:bf:d1:e4:eb:20:bb:3e:02:41:91:ee:f3:01:0c:48:
         b7:1a:5f:8b:cd:72:58:19:cf:93:97:9e:b0:76:c7:7f:07:5e:
         6d:c1:86:88:95:e1:47:19:74:73:6e:af:ff:f1:68:2f:0f:86:
         6b:80:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:30:45 2025 by rpki-client