Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File:                     SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier:          g0yw5fm+RCfoBHOaxCzi/5OfrPG3xEvmdvlsxVvx828=
Subject key identifier:   6A:5C:00:E6:B4:8E:8E:A8:5F:30:4E:6E:C5:EE:F6:49:1F:77:61:12
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer:       /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial:       0197B77CC20228C6E7398807DC4AB88A01F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number:          1317
Signing time:             Sat 28 Jun 2025 17:01:35 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:35 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:35 +0000
Files and hashes:         1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=)
                          2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: VE1PqznaCL2M51J4kzn0DWb+imbKHrl4Lx4iYwiJFjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:c2:02:28:c6:e7:39:88:07:dc:4a:b8:8a:01:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
        Validity
            Not Before: Jun 28 17:01:35 2025 GMT
            Not After : Jun 29 17:01:35 2025 GMT
        Subject: CN=6a5c00e6b48e8ea85f304e6ec5eef6491f776112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:31:ad:c3:7d:a8:36:0a:23:72:5f:59:23:
                    2c:54:bd:92:e1:a4:d7:6c:00:b0:6f:a8:bf:6a:4e:
                    fc:72:a2:c3:1b:91:82:4a:67:5f:4c:4b:43:b7:84:
                    c7:ce:ea:01:a6:fd:77:7c:04:a4:1f:6d:d2:ba:98:
                    a7:5f:c1:e4:00:60:8b:2c:f3:28:ca:ce:b0:3c:bd:
                    44:40:3c:64:c8:9e:33:44:c5:6c:21:a6:4c:41:0d:
                    50:65:e0:99:13:81:b0:fd:e8:ef:36:8d:1c:d8:db:
                    6f:7d:39:05:cd:f4:87:bc:63:dc:e3:ac:26:b4:32:
                    6a:1b:67:27:1b:af:af:72:4f:00:4c:79:f1:ea:a1:
                    9b:de:8a:81:fe:b0:7d:1e:6c:0c:90:33:bd:c7:4d:
                    bc:a6:db:2e:6f:c1:a2:3d:72:88:cf:84:22:fd:6a:
                    e2:0d:e0:72:29:7b:f7:e4:27:85:ff:e7:a4:a7:c4:
                    2a:ea:0f:27:57:fe:13:27:0d:76:32:0d:85:b9:35:
                    fe:f4:89:b2:91:eb:c6:61:4a:96:c3:9e:c2:22:83:
                    e8:87:09:9e:b6:16:f4:ad:e5:a5:fb:d2:a8:f7:a2:
                    b0:0b:7b:ae:55:8b:3c:b8:d6:da:3b:7b:ac:81:a2:
                    a4:d2:40:97:7a:4d:5e:16:25:2d:2f:ea:e9:1b:ac:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5C:00:E6:B4:8E:8E:A8:5F:30:4E:6E:C5:EE:F6:49:1F:77:61:12
            X509v3 Authority Key Identifier:
                keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:17:8c:e2:7a:09:21:21:b7:1a:3f:ce:f0:bb:4d:14:39:
         e3:5a:e4:1a:7d:81:fe:8e:81:97:e9:8a:22:b1:26:f0:50:7e:
         9d:9f:b2:7a:55:15:ec:a3:83:b0:a5:5a:b9:50:f4:0c:1e:c4:
         62:09:b4:87:09:c2:ee:ea:10:50:29:80:28:ee:07:52:b2:14:
         49:c5:c9:19:c0:9f:7f:16:d9:25:49:b7:91:b9:ba:06:7a:0c:
         7f:96:a9:f0:31:4c:03:06:82:13:63:ea:16:a4:74:8d:9e:e2:
         7b:4f:ff:c1:9a:f5:9e:98:b1:47:ce:f7:c2:41:f7:7d:c6:96:
         57:80:a7:5e:48:10:4c:b6:89:54:12:c5:cd:22:13:e8:a0:13:
         46:36:5d:7c:d7:e1:85:2c:e8:24:f3:e7:f7:c4:bd:83:a2:30:
         bd:01:5d:61:8d:03:9f:79:1c:40:0b:47:72:28:c7:88:ac:8d:
         9b:1e:2d:c0:a0:73:b5:3b:92:01:55:9d:59:0e:8e:a3:0a:b5:
         f4:a4:67:5e:18:84:4a:ca:f5:9c:ae:02:4f:d6:cd:bd:2a:dd:
         45:27:83:71:7e:f9:0b:75:b8:72:6e:35:df:6a:7e:43:db:12:
         db:e6:99:66:2c:a9:3f:99:62:da:7c:f3:1c:5d:e5:34:f0:86:
         b8:01:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:33 2025 by rpki-client