Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          LG+Bj6AW1iPsDQYIzt2qaMGxz3SBz0vhewYwd3YgVbY=
Subject key identifier:   ED:14:07:9F:10:23:05:DB:07:50:CE:6B:E0:32:47:80:22:66:57:0E
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       019659B937E460A11A10134811C80F7B9B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          1504
Signing time:             Mon 21 Apr 2025 19:00:32 +0000
Manifest this update:     Mon 21 Apr 2025 19:00:32 +0000
Manifest next update:     Tue 22 Apr 2025 19:00:32 +0000
Files and hashes:         1: EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa (hash: APmjj8E3v76VLgRg+v7SdezJbT5vDpWvktN4FM1/GHk=)
                          2: QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa (hash: +v8M6N8Y0/MmQiQAMyBHFYzXCbEXjl19X7YGjBZ8sJQ=)
                          3: d3wHhLF7_F2drrnAq4ufIbIjpfM.roa (hash: KBpvQcL8WXArnGC0TPR+vAIeruDFeNliNeiATzVd2jY=)
                          4: hAVC08FxpJFnXfaeJz29NCq7Sug.roa (hash: ApHYhoJ0ZC5NYrtBeVMJI/3kAo+MHYIlbbcC8nWTcEw=)
                          5: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: eVABeHTm5BgjbUM20sBJzMY604I6RHqzthD71ClD5a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:b9:37:e4:60:a1:1a:10:13:48:11:c8:0f:7b:9b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Apr 21 19:00:32 2025 GMT
            Not After : Apr 22 19:00:32 2025 GMT
        Subject: CN=ed14079f102305db0750ce6be03247802266570e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:ee:27:12:28:6a:3a:0f:80:3e:0a:8e:fe:
                    89:1e:72:bb:91:72:15:a8:c1:b8:74:de:96:85:5b:
                    13:d5:c0:38:dd:03:a9:18:84:84:20:f6:78:36:b4:
                    a6:99:30:94:29:a6:0a:b6:33:ca:13:c4:30:30:42:
                    49:88:0d:63:ba:f3:56:93:2d:b7:93:3e:e0:e9:63:
                    e5:ec:48:a6:88:28:b3:1a:f5:d1:e6:05:74:e5:5a:
                    6c:45:19:32:c1:81:c3:00:d7:d7:09:9f:75:bd:a5:
                    79:4d:02:cc:e6:8d:be:d8:3d:4d:42:71:00:17:6c:
                    48:24:03:18:6f:fb:96:bf:ac:58:b4:13:27:98:76:
                    5d:67:50:18:20:33:51:c5:06:c7:fc:72:50:4a:af:
                    3b:4f:c1:99:ad:76:e3:fd:d6:6b:23:6f:d1:95:c5:
                    42:2b:d2:4b:f1:5e:1b:f4:58:00:79:33:67:fc:c2:
                    1b:1c:95:63:d8:a9:52:5a:fa:b2:2d:d8:d5:32:ca:
                    3e:d6:9f:2f:ef:e8:85:74:43:d8:51:14:6c:1a:c5:
                    16:e0:a1:b1:5e:42:eb:59:87:fd:3b:35:2a:8c:e7:
                    97:ef:89:76:5b:6b:1d:66:04:81:7b:bf:44:0c:26:
                    c2:07:ec:35:84:58:d1:a7:dd:8c:d6:87:13:9c:b0:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:14:07:9F:10:23:05:DB:07:50:CE:6B:E0:32:47:80:22:66:57:0E
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1c:88:a0:28:70:5f:60:1e:65:7f:33:41:16:24:08:d3:09:
         61:9d:b7:84:ba:0f:97:d8:c3:1f:af:01:b0:c7:94:16:b3:0f:
         f8:5f:e2:51:cc:bf:82:40:16:e1:4d:9e:11:53:36:b1:c3:af:
         72:c6:eb:65:c5:2f:09:29:6e:3e:b2:d3:d7:47:78:68:a2:21:
         d2:2f:08:c2:a6:7e:3e:e1:1c:ce:46:0e:ed:a4:e9:27:b4:db:
         ca:d0:80:03:93:b4:63:c0:06:da:7b:f5:ec:54:c7:62:5d:28:
         10:40:fd:8b:56:b2:14:41:18:35:e8:41:29:40:d4:e8:b9:87:
         b7:76:61:32:03:f1:68:54:01:c2:ea:e1:99:7a:72:9f:c5:d1:
         2c:dd:1c:a0:73:b1:1c:2a:3c:5d:32:f9:cd:37:09:f8:39:d3:
         20:46:59:fa:03:08:1a:74:32:7a:d6:25:32:ac:a3:c6:bb:34:
         1b:df:ba:31:e6:5a:4a:5a:6b:06:aa:d0:b5:7d:0e:f9:2d:4c:
         48:58:d4:c4:b6:26:ed:ac:66:01:56:e6:eb:ee:3f:23:c0:57:
         9c:f5:91:6c:e5:1c:02:c7:d8:dc:a9:2b:af:a5:80:29:74:f9:
         86:17:29:42:90:56:2e:07:28:b4:01:0c:92:0b:17:8d:dd:99:
         9f:23:d3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:17:39 2025 by rpki-client