Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File:                     QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier:          dTwkan4T5XX2h0l1yzQOlSv5V9vdz9RSG1K2669OYmY=
Subject key identifier:   6E:0D:14:F0:AD:3E:F0:B4:7E:28:9D:55:8F:8C:A1:4B:86:3A:BF:B0
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer:       /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial:       01958B168558A017A003EA73E1AEB44E72DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number:          11E3
Signing time:             Wed 12 Mar 2025 16:01:03 +0000
Manifest this update:     Wed 12 Mar 2025 16:01:03 +0000
Manifest next update:     Thu 13 Mar 2025 16:01:03 +0000
Files and hashes:         1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: El9lrL+h1GypnbHu4uMfUDa1r2oYaGXoX6ejHZQKDuI=)
                          2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:85:58:a0:17:a0:03:ea:73:e1:ae:b4:4e:72:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
        Validity
            Not Before: Mar 12 16:01:03 2025 GMT
            Not After : Mar 13 16:01:03 2025 GMT
        Subject: CN=6e0d14f0ad3ef0b47e289d558f8ca14b863abfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:eb:e8:7e:70:4b:99:94:4d:e4:a6:2b:51:
                    13:4a:a3:8d:e7:8d:a8:ca:c4:19:e1:86:b4:d9:11:
                    d2:39:04:d8:61:e7:cf:c9:3a:b9:be:c8:fc:ff:ef:
                    dd:9d:46:5d:fe:5c:8c:ee:d3:48:12:5e:e6:d9:e0:
                    1a:ec:4b:ef:28:0e:0e:85:d5:9f:c4:6e:eb:8c:56:
                    56:18:c6:39:23:b9:a4:41:0b:cf:4a:08:f3:84:64:
                    2d:3d:76:de:95:9e:81:07:d0:f4:0e:0e:14:af:ab:
                    40:f8:b3:76:14:06:78:6e:6c:a9:d7:e6:fe:c9:da:
                    5e:a2:00:21:2e:45:59:46:65:b1:4b:ac:20:92:f5:
                    cc:02:45:f3:ac:7e:d5:da:eb:92:7a:ef:5b:c9:9e:
                    5d:36:69:50:1c:ff:c1:4c:17:aa:6a:2d:af:77:ac:
                    47:46:c2:c5:59:61:0e:99:ea:0c:83:f4:1a:5a:fe:
                    bd:cf:a3:3b:1a:1a:09:df:5d:55:0f:f7:b6:84:83:
                    2f:82:8f:35:75:bd:da:49:b6:d4:50:81:5c:70:78:
                    0d:5a:51:96:9a:55:94:80:33:1d:ad:cb:92:e8:f7:
                    b9:28:c0:f1:ab:17:28:98:f1:8a:a2:77:c0:9a:68:
                    0d:30:3e:66:c8:12:3f:1d:31:28:52:a7:01:53:10:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0D:14:F0:AD:3E:F0:B4:7E:28:9D:55:8F:8C:A1:4B:86:3A:BF:B0
            X509v3 Authority Key Identifier:
                keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:63:11:08:eb:57:8e:4a:7d:33:7e:3b:a7:9d:75:55:48:b9:
         7e:65:6d:52:b6:63:c4:cc:f5:f0:9d:19:ef:28:16:fd:03:cb:
         d0:c5:0c:c3:c7:fd:0f:f0:77:bd:86:f7:41:f3:bc:fb:54:ca:
         19:b6:4f:f5:2a:1f:85:da:c5:0f:5b:d1:a9:ff:14:53:ca:a6:
         08:5b:84:5c:49:76:4d:6b:be:5b:44:b9:59:d3:b5:48:d1:1a:
         fb:7d:24:10:f5:da:ed:c1:9d:8a:45:a5:c6:38:a5:99:a3:d2:
         c5:39:85:d5:c8:36:d8:80:2b:32:86:e3:57:d6:0c:c1:be:75:
         b8:f8:f1:97:17:51:2e:cf:52:00:98:5f:12:0f:6f:b8:27:4a:
         61:11:ba:77:b0:e0:6d:92:3d:3b:94:81:74:76:01:e7:bb:31:
         d0:4a:b5:9b:44:86:ad:74:10:6c:7b:42:95:a7:5e:16:20:08:
         17:6a:eb:79:43:18:bd:9f:39:70:48:d3:fe:5d:2c:f2:b0:c1:
         43:cb:f3:b9:af:aa:45:98:7f:9f:7d:d1:d3:5e:b9:bd:e9:d4:
         df:f0:75:ee:28:19:e3:61:4b:8a:be:30:18:b4:50:26:dd:67:
         e4:40:94:69:4c:e7:76:81:14:c4:cc:72:c7:15:49:69:80:fb:
         ac:18:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:07 2025 by rpki-client