Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File:                     qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier:          26ETJ/8h6P25My+OqvRNWyS7768MGVjyKcJNq+QqnXw=
Subject key identifier:   26:76:EB:13:35:1D:56:D0:2B:F4:70:16:B5:41:CD:35:3E:CA:8E:C9
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer:       /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial:       0197B7454A1FA78C3C3D6C34FE66F510E2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number:          032A
Signing time:             Sat 28 Jun 2025 16:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:00 +0000
Files and hashes:         1: YnK9gT6S7S0RgJeRsD04H4ISSzM.roa (hash: DtfDFV6FFewqe27Bp/4vezKhP0+2FJRS8CYQqbxzDS4=)
                          2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: yQuTcvwbYXXIe68n6wzrBte5B9sscxPMy05OW9Cb1pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:4a:1f:a7:8c:3c:3d:6c:34:fe:66:f5:10:e2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
        Validity
            Not Before: Jun 28 16:01:00 2025 GMT
            Not After : Jun 29 16:01:00 2025 GMT
        Subject: CN=2676eb13351d56d02bf47016b541cd353eca8ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:78:68:ab:25:59:18:3a:a6:65:f5:f7:81:
                    5d:b0:f6:8a:bc:55:78:42:b5:7e:4f:20:4f:cd:53:
                    bc:e7:d4:60:bc:49:4c:51:6b:f4:95:b0:3a:1f:25:
                    b0:c7:af:a1:7f:be:b5:e8:db:7f:17:04:b6:a0:d3:
                    f0:71:27:48:bf:d7:b0:ae:ef:2e:4e:17:d9:cf:10:
                    d2:26:16:9c:58:e8:41:26:17:b2:b3:dd:9d:3a:1d:
                    91:8f:be:ee:a9:4f:77:9e:68:5d:f4:13:84:8d:e0:
                    f3:5f:69:20:42:da:0f:6e:35:91:7a:eb:f9:d8:f4:
                    ad:45:75:b0:6b:99:dd:ab:94:2a:ef:91:2c:42:58:
                    f3:96:d7:78:50:a6:41:51:64:6a:2e:3a:aa:85:c5:
                    8f:37:4b:81:7f:14:e1:db:de:bc:97:f6:8c:29:7a:
                    a3:09:af:96:2d:64:e0:88:6a:c4:e9:7f:72:e7:50:
                    1b:b9:39:98:d9:81:57:88:10:15:e6:93:6a:d4:e1:
                    be:a8:97:c3:f8:6c:f1:b6:5f:8e:8a:e7:0e:39:ad:
                    27:c7:17:db:b0:49:2c:77:e7:5d:74:30:d7:dc:c2:
                    a5:31:7c:14:fe:96:8e:8e:37:6b:5f:dd:53:86:9a:
                    d9:88:4a:4e:e4:ac:3e:09:b3:1b:5d:f7:d9:fb:ad:
                    38:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:EB:13:35:1D:56:D0:2B:F4:70:16:B5:41:CD:35:3E:CA:8E:C9
            X509v3 Authority Key Identifier:
                keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:e1:9e:e7:6d:e3:4d:a5:8d:e8:1c:af:16:49:07:ef:ec:
         a2:55:b9:43:2f:7b:d4:e6:bc:b7:10:7e:f5:2f:ed:23:f1:49:
         e4:48:4a:35:1e:97:ef:40:d0:9b:46:83:8a:2d:94:61:4a:08:
         a9:6e:fd:5b:9e:5e:b4:06:5a:4d:bd:4f:fb:b0:fe:55:23:a6:
         80:b8:ef:03:e8:b9:52:d2:91:6c:d1:e6:30:28:ac:f2:c6:99:
         c9:da:eb:01:56:2d:15:9e:49:1f:52:3b:2d:84:a5:b6:2c:c4:
         7f:aa:88:da:08:a4:8a:33:bf:33:a9:fe:ae:e7:49:c2:d0:c9:
         b3:8f:74:25:d1:1a:28:a3:4b:77:dc:bc:0b:7e:e8:45:71:12:
         b9:02:d9:e9:5c:58:60:22:68:0b:3c:7c:4a:ca:f8:84:28:b2:
         df:ba:75:19:16:1b:fd:44:db:60:bc:3f:73:d5:8f:40:47:27:
         3a:86:69:06:f9:3d:37:9f:c5:21:c5:fc:0c:a6:eb:f2:23:bf:
         aa:dc:24:35:c0:a3:eb:55:35:57:80:92:7b:3f:68:ca:da:fe:
         b7:7b:77:c6:ec:89:a0:6b:63:c6:b4:17:2e:60:a2:28:22:e7:
         a0:7c:60:b2:39:80:e0:f6:a8:46:2c:30:2a:57:c5:ea:f5:51:
         4c:f6:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:04 2025 by rpki-client