Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File:                     QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier:          rBSEc5but2/kFuRwoYRrTUYZ/HT22Sk2mtADs3jxxvE=
Subject key identifier:   A9:BA:D2:7C:C1:A8:2C:47:05:FE:94:1B:1E:64:89:B6:F9:65:F2:F7
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer:       /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial:       019646D7490CAD6415321A3115D403C5B702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number:          01FC
Signing time:             Fri 18 Apr 2025 03:00:36 +0000
Manifest this update:     Fri 18 Apr 2025 03:00:36 +0000
Manifest next update:     Sat 19 Apr 2025 03:00:36 +0000
Files and hashes:         1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: KE3jV45pg7sevhVAAM3DOSzxIIywPHbLJq7ksTYdPkA=)
                          2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:d7:49:0c:ad:64:15:32:1a:31:15:d4:03:c5:b7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
        Validity
            Not Before: Apr 18 03:00:36 2025 GMT
            Not After : Apr 19 03:00:36 2025 GMT
        Subject: CN=a9bad27cc1a82c4705fe941b1e6489b6f965f2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:74:9c:f5:b3:df:0e:39:88:18:76:00:2a:
                    ef:ad:4c:41:89:52:40:6e:f6:28:07:78:45:80:4b:
                    15:af:89:c9:e9:e9:87:c1:5e:c4:d0:80:f1:36:23:
                    ba:14:36:50:70:61:25:5e:09:c5:4e:dd:e8:a1:ed:
                    57:84:37:14:ec:f7:a4:4a:6b:7f:8d:fd:d9:08:1f:
                    3f:fd:66:75:b2:64:b2:d7:45:d9:9e:bc:1c:d6:13:
                    df:8c:04:93:7a:b6:f4:3c:f5:eb:b1:b8:1c:76:09:
                    20:12:99:dd:35:d4:39:38:99:62:51:3f:63:2a:74:
                    3d:c1:4a:fa:14:b1:23:ca:46:68:be:c1:08:61:56:
                    2e:5c:fc:a6:30:e4:fb:81:60:86:3b:9a:03:e5:f6:
                    d0:69:63:c7:49:28:b5:96:e8:8f:46:98:57:89:ad:
                    cf:56:1d:df:b2:39:04:34:23:41:fa:81:9b:c8:c2:
                    b8:b7:48:b1:d7:d7:64:5e:7a:b5:3b:1e:e7:cc:9c:
                    a4:6e:f9:95:d8:09:d0:67:3c:78:f0:5c:7d:01:8b:
                    2a:55:66:4a:4d:6b:23:43:d4:de:75:bd:f2:9a:38:
                    36:a3:60:34:54:14:92:6a:41:32:b5:f6:fb:d0:b9:
                    02:a8:d2:88:1f:ec:9f:78:8e:eb:40:75:20:a3:4b:
                    b7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:D2:7C:C1:A8:2C:47:05:FE:94:1B:1E:64:89:B6:F9:65:F2:F7
            X509v3 Authority Key Identifier:
                keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:49:c4:e6:24:cb:5c:9b:41:43:16:2c:98:5b:19:74:2b:95:
         b3:5b:f5:4b:55:41:d7:db:69:01:7b:14:b9:26:34:b2:02:ec:
         d8:5c:a0:3e:28:68:a2:bd:e5:49:1e:50:01:25:74:31:2f:7b:
         c2:5a:40:8f:a9:da:13:fb:72:11:cf:00:bb:0a:42:f9:28:26:
         63:f8:55:d5:95:6e:5e:93:6e:17:03:5e:d4:d0:fa:a5:77:70:
         0b:93:06:b7:93:6d:f6:52:98:82:82:d4:2e:ab:ad:30:51:b5:
         94:79:4c:34:6d:fa:a8:b6:51:92:74:3f:cf:d8:6c:ad:12:b4:
         72:ef:d2:f0:f2:3f:28:d6:a8:72:2d:20:ef:8a:aa:67:9e:65:
         5f:3e:08:c7:ac:68:1c:4d:fe:53:7a:2a:00:d5:f6:2b:83:d1:
         b0:a7:e2:82:0a:b5:78:8b:fa:02:a2:b5:b1:a2:b6:ff:63:16:
         21:06:1c:92:49:0d:90:d8:c9:81:8f:cb:6e:29:72:7b:f2:82:
         16:89:69:fd:39:7e:f8:1d:f9:0b:ae:8f:c9:92:13:4a:26:79:
         08:8e:cc:07:f7:34:52:fe:71:95:b0:d3:5b:25:db:55:b3:ad:
         d1:ad:ce:fd:aa:61:46:34:0b:43:ca:21:6b:b9:5b:ce:2c:f7:
         3b:37:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:47 2025 by rpki-client