Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File:                     qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier:          CehF1rAFTHj83jcSdiI9/CV9d6lAkBm4zbEAQkZaE38=
Subject key identifier:   66:66:C1:E5:25:6E:B1:44:E6:AB:89:58:BD:0F:E4:9D:B1:7E:46:CB
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer:       /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial:       0197C15AFF34A487C08B14B245A60E529902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number:          15BA
Signing time:             Mon 30 Jun 2025 15:00:55 +0000
Manifest this update:     Mon 30 Jun 2025 15:00:55 +0000
Manifest next update:     Tue 01 Jul 2025 15:00:55 +0000
Files and hashes:         1: 3RChXaGg2mHXT_oEdTM0SpY6jhc.roa (hash: PV09Dkm12mpf6AJ4aFGi0VOS8JddqTI6zuA00aTTnSY=)
                          2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: rIaQ3ddjrNUEg03KVB2LmpY9G9dHJQWWRsBWagL8JQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:5a:ff:34:a4:87:c0:8b:14:b2:45:a6:0e:52:99:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
        Validity
            Not Before: Jun 30 15:00:55 2025 GMT
            Not After : Jul  1 15:00:55 2025 GMT
        Subject: CN=6666c1e5256eb144e6ab8958bd0fe49db17e46cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:df:d9:c3:f4:00:24:ec:2f:5e:e3:12:18:
                    3c:d1:66:6d:25:c6:29:c1:84:ec:52:16:d6:d6:8c:
                    eb:ef:26:7f:aa:b6:36:0c:02:b1:59:bf:16:09:f6:
                    b9:64:99:80:c2:f8:46:88:c5:d8:c5:51:ff:99:86:
                    99:90:6c:44:e0:84:61:1b:7c:99:b4:0f:42:2b:bb:
                    56:f2:0d:68:63:4d:02:5b:53:cd:5d:77:8c:ea:59:
                    aa:76:96:b5:fe:11:6f:ba:ea:cd:3a:32:73:5f:67:
                    f8:01:96:c0:22:be:6b:d6:75:6d:b0:7f:86:73:8f:
                    b5:93:eb:7b:f7:5e:7d:34:af:b9:0d:20:cf:0c:c0:
                    39:0c:47:fe:68:57:8d:c1:a4:4a:05:b7:6e:97:f4:
                    92:16:7d:5f:22:f5:ff:91:d7:50:ce:8d:27:37:25:
                    88:cb:24:ce:77:5c:40:c2:28:b2:23:39:e8:33:13:
                    2a:4d:65:55:cf:1a:1f:0c:6f:66:ac:cd:f2:5d:0c:
                    b2:1a:37:b4:59:30:02:28:c0:65:ca:5f:f8:ea:fe:
                    03:69:16:91:92:06:c6:dc:7e:af:1c:b6:db:ca:75:
                    f0:33:1a:c8:91:0e:48:d3:1d:c9:01:cc:6d:8e:7f:
                    92:d0:9a:a4:8f:f5:26:89:91:4c:b4:71:42:ba:d2:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:66:C1:E5:25:6E:B1:44:E6:AB:89:58:BD:0F:E4:9D:B1:7E:46:CB
            X509v3 Authority Key Identifier:
                keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:68:0a:4d:70:7e:d9:dd:ee:68:c5:3c:c2:b5:e4:eb:d9:d1:
         07:64:01:87:a0:28:e5:97:88:31:40:9d:e5:c8:66:1f:d1:a4:
         7e:8b:04:2f:39:72:c0:1b:56:ca:2c:a6:06:6b:b9:c7:33:7b:
         a0:e2:29:7d:47:63:4c:f0:0d:fd:8c:de:3b:fd:eb:7f:fa:56:
         e2:a1:e7:5d:e3:55:8f:a5:28:07:95:15:e0:b6:b2:75:c6:bf:
         9f:2c:ce:58:29:a1:b2:99:e4:44:29:f6:fa:ee:97:d5:a5:c4:
         b6:a5:f5:e3:6b:2e:66:14:5e:22:cb:8f:6d:1f:b5:b7:8d:e7:
         03:62:b0:31:97:66:05:98:b3:51:30:15:fe:e3:75:4c:01:68:
         7b:f9:65:73:f7:32:4d:ef:89:ad:97:fa:9e:27:c1:4a:43:72:
         47:41:27:81:e6:06:d1:f0:7c:32:4f:c1:73:42:d7:ce:f1:9e:
         25:73:6f:96:14:68:53:6a:8b:26:85:80:bb:9b:56:ae:b0:e6:
         a9:b1:15:0d:97:a8:20:2f:f0:c5:99:f5:b4:82:00:cd:d3:25:
         99:ac:50:e2:f0:22:e9:61:1b:4a:b8:18:f6:d6:0e:25:e3:1b:
         64:62:30:12:a4:a6:cf:c3:98:01:1d:d1:b3:2a:5e:46:10:59:
         c7:10:be:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:16:13 2025 by rpki-client