Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File:                     QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier:          PI+tODS1OR1yZG0poJ/v2n8SMa/DmIM8j07UOTpzMCg=
Subject key identifier:   A7:30:EC:70:E8:F5:6E:48:A3:1B:16:DF:83:CE:68:7C:A6:9A:0A:5A
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer:       /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial:       0197B7EA1F15C6FBDFE1403C7B598068E6B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number:          15CB
Signing time:             Sat 28 Jun 2025 19:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:03 +0000
Files and hashes:         1: LxK49wQNApdxyp8v_k05CLgMI5E.roa (hash: cyuNB9STnC1KALLJGwZIhbMMjarSRyXyHryPQj2j9DA=)
                          2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: ioG7sCq1VFbOcXEcX6OyJlVPbZfAt+86sa8bMQEowOM=)
                          3: cIaNp2bTtQ5M6jCssmyGRmD8_eg.roa (hash: DakUxNySLzPYiUEmVKH8Wuu4g1X+hz1O/JIQ3JCKnTY=)
                          4: qNueyq_ZoTbC4yFoRImera8I8G8.roa (hash: 0QLi9xBNjhGIdVQu2iU+1fR1OTjQ09YNPx13rOGAPmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:1f:15:c6:fb:df:e1:40:3c:7b:59:80:68:e6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
        Validity
            Not Before: Jun 28 19:01:03 2025 GMT
            Not After : Jun 29 19:01:03 2025 GMT
        Subject: CN=a730ec70e8f56e48a31b16df83ce687ca69a0a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:db:b7:f7:3d:05:bc:c0:33:aa:fb:66:d7:c7:
                    9a:03:65:09:be:bd:f6:b2:d4:d2:76:77:c5:ed:de:
                    94:e7:00:23:c8:06:8b:d1:3a:25:a0:de:09:ea:8f:
                    f1:a6:c4:cb:34:94:58:54:9b:73:d5:24:95:23:18:
                    5a:68:27:bf:ef:8e:9f:55:5f:f8:96:45:a0:53:72:
                    2e:79:32:30:6e:27:56:ca:47:52:49:0a:71:45:44:
                    d5:f6:9b:97:13:1e:60:14:ef:95:9d:7f:d9:7a:f9:
                    5f:b5:3c:eb:78:a0:19:33:ea:21:86:24:55:9b:65:
                    15:65:72:46:70:8a:73:7e:38:31:51:81:6e:36:af:
                    d6:95:2a:14:f2:53:a6:57:e0:04:ca:db:5e:3d:c4:
                    a5:1e:3a:6e:a4:fb:09:5c:65:84:b5:1f:f1:43:bb:
                    53:3a:ba:3f:87:93:d9:e9:e8:a3:df:bd:50:f4:44:
                    9f:0d:67:97:f8:2b:2e:2d:41:a2:63:e5:ea:7e:fb:
                    67:ce:41:92:99:e7:dc:6b:16:f8:62:f3:65:9e:69:
                    4c:e5:12:27:f2:8c:ce:79:37:0b:ab:75:53:a6:80:
                    e9:b8:56:75:51:f0:b8:8d:f6:3b:31:00:75:26:b2:
                    46:a9:c5:27:5c:7e:58:d7:ae:7f:60:42:26:d2:45:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:30:EC:70:E8:F5:6E:48:A3:1B:16:DF:83:CE:68:7C:A6:9A:0A:5A
            X509v3 Authority Key Identifier:
                keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:a8:a0:b9:27:b8:ab:40:82:9f:d8:80:e2:38:0f:28:00:
         ba:ad:e0:ed:cd:c2:86:52:8e:b6:55:c8:c8:fe:a7:70:8f:99:
         8b:a1:f2:af:2e:6c:d6:82:d0:b5:52:95:50:b4:35:39:7d:6e:
         81:90:a3:9e:e1:b1:7a:4d:dd:d3:c3:d0:6d:6f:a1:df:9c:2d:
         94:e0:52:47:9a:24:51:b1:cb:3f:11:dc:fe:b0:35:ca:c5:cc:
         47:b9:64:ad:d6:39:6c:86:69:fd:36:c6:6c:64:70:50:73:95:
         c6:57:ba:f5:09:0d:83:e3:2e:6a:f5:37:36:59:79:14:88:98:
         42:4a:88:9e:d1:65:46:a4:a9:71:d5:6e:ff:eb:b5:ec:32:33:
         1b:93:a6:8e:ba:68:34:dd:8b:f3:e1:9e:83:78:bd:e6:46:df:
         e2:17:ad:50:2f:71:f7:d6:37:97:9d:a4:fa:10:0a:55:d0:f2:
         2e:32:75:d4:0a:ba:ef:6e:e1:4b:93:42:fb:73:df:75:c9:30:
         dc:69:6b:36:f4:c4:d7:2d:3d:07:2e:6d:96:fa:b3:a7:d4:eb:
         20:4a:94:3d:c0:de:a7:e4:d0:72:36:9c:9c:24:79:67:e8:a1:
         32:12:ff:3d:e8:ab:4c:06:2d:1b:33:a7:d3:44:b1:32:8e:bb:
         57:11:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:16 2025 by rpki-client