Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          n3ayFCuIO5/lTYv6V3F0VJWgS98DFL2wW5u0PwZ5cEg=
Subject key identifier:   59:1B:BC:00:87:D7:C3:2E:21:27:32:97:0E:38:51:19:6A:73:1E:1E
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       01965500D836CB36AF9CFE15885E8E8F6286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          F9
Signing time:             Sun 20 Apr 2025 21:00:40 +0000
Manifest this update:     Sun 20 Apr 2025 21:00:40 +0000
Manifest next update:     Mon 21 Apr 2025 21:00:40 +0000
Files and hashes:         1: 9GDBOU9_J7es0wo35klUOn0T51U.roa (hash: cMQbqhsLcUBPEgQ9vc2CK4bGp5osIlpssNdk9BGiNMw=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: mGP+v3ZkB8mIYUYMg/y1uhDLC0ZC5VnDrdVereN3ra4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:00:d8:36:cb:36:af:9c:fe:15:88:5e:8e:8f:62:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Apr 20 21:00:40 2025 GMT
            Not After : Apr 21 21:00:40 2025 GMT
        Subject: CN=591bbc0087d7c32e212732970e3851196a731e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ef:9e:8c:f9:24:3a:ee:39:c1:bb:56:69:d7:
                    c5:5b:06:69:0b:73:e6:7e:06:65:3e:ae:7b:74:9b:
                    71:8f:13:d0:32:81:43:01:4b:85:e7:94:a8:90:5a:
                    56:ee:93:f7:27:64:30:bd:db:d7:50:3d:f4:49:6a:
                    5d:59:58:7d:6a:fc:e8:74:2a:45:27:d6:eb:5a:a4:
                    28:f5:53:a6:65:c3:ca:1a:8c:1b:0a:51:0a:3a:21:
                    23:5d:c9:8d:ff:e4:77:a7:39:09:7b:be:07:91:51:
                    f6:51:bf:87:78:fe:5b:f3:7a:87:fc:55:b5:46:12:
                    69:36:28:b5:dc:3e:ea:2b:b0:29:24:bb:9f:c2:7e:
                    42:fd:55:96:95:4a:d5:a8:7d:3e:36:ce:18:0b:2c:
                    dc:7a:d8:f7:de:c5:ce:17:2a:a0:72:a1:e3:50:64:
                    04:20:cd:c6:b8:07:db:a8:91:be:db:0e:d4:fe:57:
                    2f:ef:fd:74:4b:ee:72:02:e3:01:67:f3:1c:e2:bc:
                    de:a0:64:f7:5a:5c:80:b9:1d:9e:fd:04:4a:2e:e5:
                    13:e8:aa:99:6b:61:b8:2d:64:5f:19:3b:f7:da:4b:
                    9c:b1:d1:75:da:cc:fa:80:ce:26:51:f8:28:59:f9:
                    e8:bf:f5:59:f9:26:72:76:c9:d7:85:52:ac:4b:8e:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1B:BC:00:87:D7:C3:2E:21:27:32:97:0E:38:51:19:6A:73:1E:1E
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b2:8c:1b:9b:e2:60:fe:a8:cf:c1:7e:a5:98:3b:c0:f7:76:
         b0:68:42:99:24:ea:5b:e5:0a:80:54:2c:33:14:af:d3:8f:f1:
         03:02:77:bf:52:c6:68:28:27:0b:13:ba:13:d3:a3:33:dd:70:
         2f:f4:56:f4:9d:84:1a:8b:42:0f:32:89:96:a3:ed:d4:01:84:
         0b:70:af:c7:d9:2b:cc:07:de:f0:18:da:a6:e5:78:25:4f:f0:
         3b:dd:10:fb:4e:95:3b:6d:9d:82:bb:e3:08:0a:f4:7f:4e:98:
         59:91:fe:5b:b1:54:3d:0c:5a:1b:ed:67:b8:ca:2f:d0:aa:4c:
         59:41:a6:ae:9a:07:e7:62:84:c6:a9:e7:9c:62:8e:16:27:ee:
         67:ee:a1:a7:14:43:e3:3c:b9:e1:5b:8d:a3:d6:14:1e:ac:4e:
         6d:f1:a6:b7:1f:12:aa:2e:66:d0:dc:3d:b0:01:e7:49:07:d8:
         ec:59:fd:94:7b:39:e7:57:4f:3b:74:14:c9:3a:4c:5d:5a:b4:
         d6:87:a4:1d:7b:c5:bb:35:a3:c4:ad:ae:2a:a7:47:15:61:fa:
         95:5f:dd:7e:ae:8b:4b:5a:30:5b:3e:bf:85:a8:f2:a3:e4:f2:
         f3:ac:ed:3a:47:bf:2f:95:22:d0:fa:91:ef:0c:68:c9:aa:67:
         a2:d1:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:29:47 2025 by rpki-client