Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File:                     Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier:          +DLBDadVLZIyQnbguCH//1c4bXAmNnAMARTAwp0Lg8Y=
Subject key identifier:   9A:DA:6E:E6:2D:18:F7:B2:A5:E6:0F:23:88:F1:9C:BF:3A:2F:AA:CD
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer:       /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial:       0197B6A22F1B88AE3E0A99A823EEA1F3DAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 13:02:51 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:51 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:51 +0000
Files and hashes:         1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: Cmr28lrIkqoJme3SDZ5gCDvRFa5IvuL/4XAB/zOfKSY=)
                          2: m-mgeij2s-izZmoG2EJOGobZRbs.roa (hash: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:2f:1b:88:ae:3e:0a:99:a8:23:ee:a1:f3:da:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
        Validity
            Not Before: Jun 28 13:02:51 2025 GMT
            Not After : Jun 29 13:02:51 2025 GMT
        Subject: CN=9ada6ee62d18f7b2a5e60f2388f19cbf3a2faacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:de:21:de:67:89:25:35:2a:a7:09:89:96:
                    2a:a2:b6:bd:c5:68:82:36:72:cf:43:03:40:c1:5f:
                    ae:bc:50:69:fe:f0:19:4a:ba:a7:66:b1:33:17:95:
                    4b:56:72:ee:e2:27:9c:81:de:d6:61:75:28:47:fe:
                    1b:84:bc:ce:67:c4:f5:12:7a:60:c5:fe:07:d3:7c:
                    a4:44:21:13:6e:77:14:ad:52:39:93:c3:6a:be:bf:
                    92:0f:a8:ee:05:82:9a:5b:9c:c7:08:3e:80:a0:85:
                    4d:b6:a6:a2:8d:0a:80:8e:3f:25:51:2c:ca:fc:70:
                    01:d8:25:e6:e1:00:08:7d:e2:92:03:b8:a9:18:eb:
                    e6:7b:e3:7e:e7:77:18:02:a8:89:e0:bd:98:fc:83:
                    9d:dd:5e:ff:de:8f:6f:ac:1d:15:b5:5d:7a:c8:1b:
                    ab:26:40:2f:62:ab:dc:26:da:cb:1c:0f:a4:6a:24:
                    dc:fd:b0:82:39:51:a0:23:f8:b3:bd:86:3b:c6:3a:
                    c8:1e:2d:f9:56:ce:46:6f:ab:2f:49:6e:c1:83:5a:
                    28:df:d8:4c:bb:fc:87:29:16:df:48:f7:4f:0a:b8:
                    18:51:44:90:63:a7:68:d2:f2:cc:84:c1:7e:7a:d3:
                    90:2b:62:31:0a:21:97:17:5c:80:6a:d1:ab:9e:57:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DA:6E:E6:2D:18:F7:B2:A5:E6:0F:23:88:F1:9C:BF:3A:2F:AA:CD
            X509v3 Authority Key Identifier:
                keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c0:31:dd:fd:d1:4f:6a:69:d8:74:8b:84:01:85:60:ef:bc:
         eb:50:1a:5a:1e:4b:29:e5:0f:27:5d:04:d2:84:cf:34:90:a4:
         54:b8:13:84:07:2f:5c:56:05:79:3f:d9:e3:52:da:fe:4c:ec:
         e5:e8:5a:5b:0f:ef:b5:84:33:5b:04:92:c2:0a:5c:cd:8a:b3:
         64:de:3f:05:aa:9b:a1:09:b7:51:78:a7:1b:7b:24:59:f4:13:
         3f:9a:ae:c9:96:4d:33:ce:f0:cc:d3:64:9d:ca:80:74:90:52:
         6d:44:8d:74:36:af:d5:6f:99:85:fb:e8:9b:bf:59:51:75:2c:
         ec:93:4f:6f:d4:7e:8b:b6:32:8d:1c:2b:32:27:48:b5:64:43:
         6d:29:2f:89:50:d6:2c:56:5c:f1:d8:35:af:8f:3b:e4:6e:fb:
         52:66:e4:de:fa:15:8c:20:e5:c4:aa:62:e3:3d:ee:12:73:91:
         80:61:28:79:f8:b9:ca:0a:f2:89:37:ea:01:3b:a9:56:01:2b:
         3c:f0:dc:e8:5e:de:85:33:e0:0d:4d:89:92:8f:60:b2:96:35:
         fd:f8:73:2f:97:d3:26:5c:12:17:38:83:00:b2:ff:5d:d3:d0:
         16:14:c3:4c:d4:3d:b0:e8:00:ad:a2:c8:9f:c2:29:6a:34:f6:
         b7:f4:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:51 2025 by rpki-client