Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
File:                     qMbudsTo2UYU4IJQX_6MmRokr4o.mft (raw, json)
Hash identifier:          ine9mSAHxQWaaB7sYaAVQSw/RzSYEvtLYV2j0m1CuGc=
Subject key identifier:   F3:61:54:83:37:1C:0D:29:FE:42:C8:ED:38:E8:1B:C4:E8:2E:E7:0E
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Certificate issuer:       /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial:       01958EF3413A4F974F662F0987A6842CBD41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
Manifest number:          10FC
Signing time:             Thu 13 Mar 2025 10:01:01 +0000
Manifest this update:     Thu 13 Mar 2025 10:01:01 +0000
Manifest next update:     Fri 14 Mar 2025 10:01:01 +0000
Files and hashes:         1: WTYKu26kIWjOTIQNkx9XhusumzA.roa (hash: jdR1zGE/VerZVpVMdByTcrJDOg5A7+iJoxqGyTD0+wQ=)
                          2: qMbudsTo2UYU4IJQX_6MmRokr4o.crl (hash: uVJLXoSp/tJlTk36KXFPqdbx/oI411q/hZuaPm4J/TM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:f3:41:3a:4f:97:4f:66:2f:09:87:a6:84:2c:bd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
        Validity
            Not Before: Mar 13 10:01:01 2025 GMT
            Not After : Mar 14 10:01:01 2025 GMT
        Subject: CN=f3615483371c0d29fe42c8ed38e81bc4e82ee70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:8d:4f:8d:6d:75:ba:71:26:99:ae:82:c2:
                    4d:46:07:a0:61:d3:20:40:e4:66:06:8a:4c:ca:df:
                    77:c6:e8:f3:fd:e8:78:18:4b:cc:59:f7:65:0f:ce:
                    3f:d3:65:3f:e6:b7:6a:34:26:28:dc:0a:44:db:97:
                    83:64:9d:48:a9:52:b3:1d:ca:13:35:01:0b:b4:4c:
                    4e:60:13:dc:58:84:83:cb:66:d1:e2:71:b7:cf:8c:
                    d2:73:f0:41:08:40:6a:95:19:ef:ca:33:51:9a:21:
                    22:60:d0:d0:84:af:06:e9:e1:0e:61:05:b5:84:3f:
                    8b:a2:65:d9:67:1b:9b:ed:70:6b:79:1d:f4:24:d1:
                    02:40:74:36:c8:f6:57:aa:5c:ca:91:3b:d3:f2:92:
                    77:c4:4b:8b:20:44:61:82:0a:1d:2c:8d:61:35:52:
                    9b:a9:2e:00:e5:3f:aa:a9:3e:73:4e:5c:8c:d3:cd:
                    2f:1d:ff:c5:44:7f:a9:af:b8:b3:a7:b1:32:d9:52:
                    2b:c6:f7:9a:4c:df:d7:94:9b:5f:20:3f:55:76:60:
                    22:51:a3:6e:25:90:0b:2d:ec:ee:98:4b:f7:81:b3:
                    46:db:44:60:be:40:27:d4:ac:32:aa:2d:8e:a0:e0:
                    ac:86:06:6c:51:ae:1c:ca:a0:02:26:29:99:2d:26:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:61:54:83:37:1C:0D:29:FE:42:C8:ED:38:E8:1B:C4:E8:2E:E7:0E
            X509v3 Authority Key Identifier:
                keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:37:68:2a:25:16:a7:6f:e4:68:da:60:ce:9d:72:a9:af:b1:
         99:84:00:0a:9c:c4:26:63:9b:47:30:c0:46:42:1a:bb:e6:b2:
         00:65:39:3b:31:a4:b3:8a:df:84:2f:c2:cc:dc:a4:4a:4c:0f:
         ec:62:d3:f2:47:11:e4:85:02:c3:78:51:07:ab:d3:6e:03:a3:
         17:9c:81:ca:83:05:5f:e9:12:f3:c8:38:0d:3d:1d:7d:ae:57:
         60:d2:6e:eb:0e:d1:ce:97:9a:5b:ac:c1:54:6b:cf:46:ca:ab:
         27:ac:43:32:06:e2:56:95:3a:01:8a:ff:d2:40:76:89:75:b0:
         d1:2c:eb:fc:37:5c:41:ab:94:1a:2f:af:83:ca:ab:cf:d1:ef:
         ca:90:6f:bb:1a:a3:46:a6:da:e5:50:4d:20:bd:e5:02:ed:42:
         da:bc:b3:50:f2:b2:a7:04:f0:2d:6a:53:7b:84:54:45:1c:4c:
         a5:d6:3f:74:6f:f5:40:e5:20:d9:39:7f:a8:60:58:19:a3:1b:
         d8:16:59:5c:7d:84:bb:76:07:04:5c:b4:5f:9f:5e:52:30:7d:
         2f:ea:0a:c0:ff:c3:13:71:8a:67:f8:05:03:37:fc:29:29:9c:
         73:d0:9c:41:d0:21:ed:cd:d2:c1:62:0d:9e:b9:3f:05:2c:e0:
         5e:a6:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:49:54 2025 by rpki-client