Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File:                     1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier:          VtlemFIKxsaDLwE35XwCEvYRd1a4ktm1TZwColYgQ3Y=
Subject key identifier:   53:17:4E:9C:98:2D:2C:88:8E:49:2B:D9:6B:0B:06:67:57:86:92:59
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer:       /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial:       01964255E341DCBB6236AABD9FE3DDFDAB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number:          0EA6
Signing time:             Thu 17 Apr 2025 06:00:46 +0000
Manifest this update:     Thu 17 Apr 2025 06:00:46 +0000
Manifest next update:     Fri 18 Apr 2025 06:00:46 +0000
Files and hashes:         1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: /6obPpkb6M7ZeEuTZ5ECFieNMlfZkuNdL+gR5jx236A=)
                          2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
                          3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
                          4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
                          5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
                          6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
                          7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
                          8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:55:e3:41:dc:bb:62:36:aa:bd:9f:e3:dd:fd:ab:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
        Validity
            Not Before: Apr 17 06:00:46 2025 GMT
            Not After : Apr 18 06:00:46 2025 GMT
        Subject: CN=53174e9c982d2c888e492bd96b0b066757869259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:90:4f:10:05:ef:a0:45:2b:70:90:ca:96:
                    37:c3:79:b7:3b:2a:97:f5:d9:52:1b:be:1e:52:9b:
                    ee:51:dd:01:0c:27:59:46:0c:b7:ca:d5:d8:e0:94:
                    82:73:4b:0c:6c:f5:86:56:3c:4e:4a:4a:75:c7:43:
                    0a:7f:b9:86:2b:3c:e9:d6:24:f4:4a:2a:00:ab:9a:
                    17:d2:2d:76:28:ae:7f:7c:eb:b1:a8:e1:2b:52:9b:
                    d4:48:5d:23:73:46:00:0f:8e:b8:4f:2b:6c:db:2e:
                    fc:d2:db:b1:2f:33:f4:7e:ce:10:71:7e:97:2c:12:
                    06:36:81:11:30:5c:4f:99:13:77:dc:aa:cb:62:42:
                    cd:98:8d:4e:a9:3d:a8:fb:e4:5d:04:55:0b:26:b1:
                    9c:8d:05:3a:61:04:1b:a5:d1:c3:0d:3a:7b:77:90:
                    fd:4c:09:84:38:13:3f:c3:a0:58:2d:5d:0f:3b:fc:
                    7c:71:08:0d:b4:35:f3:29:27:e4:ff:5a:5a:e8:6f:
                    37:36:71:55:e5:1f:f8:6f:9e:c9:91:0d:e8:28:f0:
                    a6:66:a3:4e:c9:ed:be:7a:00:71:56:f4:f6:f3:e0:
                    3e:67:f5:9b:b2:2a:34:44:c5:4f:ca:d2:c1:3b:88:
                    94:7c:73:47:c0:37:fa:7d:eb:ea:22:f0:b5:bd:b6:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:17:4E:9C:98:2D:2C:88:8E:49:2B:D9:6B:0B:06:67:57:86:92:59
            X509v3 Authority Key Identifier:
                keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:db:f0:7f:8b:cc:3c:b0:f0:51:a3:a6:29:43:db:61:31:
         22:36:cd:83:1c:ae:70:2a:ae:6b:95:9c:98:0d:de:19:9c:03:
         af:ec:83:ed:d7:f1:00:24:11:b7:8c:10:e6:4c:74:f9:b1:37:
         a8:b6:c2:d8:4c:7e:0e:4d:35:44:cc:5d:8e:06:ef:96:b7:16:
         c2:55:98:00:ac:87:9c:ad:d7:75:5e:dd:65:73:1a:ae:bc:93:
         83:fe:a7:ea:e5:65:4b:2b:c9:52:71:1e:a1:89:6e:1c:ea:8e:
         59:c5:dd:d5:81:35:bd:85:52:10:bc:2e:5b:2d:ad:25:40:53:
         7a:ab:2f:ed:64:3d:8e:ee:18:85:d6:24:ed:5f:dd:36:5a:43:
         ab:a0:c4:7c:b4:db:7c:86:ce:80:4b:17:71:e7:b1:ee:1c:ba:
         a0:6c:6e:f4:a6:16:e4:53:e5:34:5d:60:c3:ea:ce:68:21:24:
         d1:96:84:f0:b2:8b:9b:5e:80:26:de:d2:ca:33:d7:dc:45:f9:
         62:69:a2:ef:49:67:37:7f:b6:8e:2e:35:69:eb:8d:40:f7:61:
         e5:50:60:ff:09:09:9b:2a:37:42:4c:2e:9f:dd:df:6e:1f:71:
         a3:22:4a:35:0e:06:cd:3b:1d:db:00:88:01:24:48:4b:2b:8c:
         73:59:17:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:44:00 2025 by rpki-client