Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File:                     QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier:          ard78P7T7+HweZ7vxnTuvKn9jWJVTgZALzSo8XVXyhY=
Subject key identifier:   64:8A:8E:72:56:8A:04:26:75:C4:64:FB:25:C0:0B:63:C2:63:83:E7
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer:       /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial:       01964C34B19CF644E0F91F71E7D8337CD1F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number:          1247
Signing time:             Sat 19 Apr 2025 04:00:43 +0000
Manifest this update:     Sat 19 Apr 2025 04:00:43 +0000
Manifest next update:     Sun 20 Apr 2025 04:00:43 +0000
Files and hashes:         1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: e4alDNPeGJxupuBq2FRNgiOBOilIb4g5FdEHpala02Q=)
                          2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:34:b1:9c:f6:44:e0:f9:1f:71:e7:d8:33:7c:d1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
        Validity
            Not Before: Apr 19 04:00:43 2025 GMT
            Not After : Apr 20 04:00:43 2025 GMT
        Subject: CN=648a8e72568a042675c464fb25c00b63c26383e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:9c:6f:c2:ae:01:23:06:4d:7c:e0:f9:b4:
                    49:78:af:61:9e:1c:cb:7d:bc:98:72:e7:64:13:dc:
                    cb:61:15:fe:7c:3f:96:ad:4f:54:96:1d:36:8a:8f:
                    1e:6e:3a:fa:b4:f7:87:66:14:ab:4d:bc:d1:d3:e5:
                    21:42:8a:8b:fb:4b:7e:f8:a0:2a:1b:91:80:d1:86:
                    30:42:1b:14:8b:26:ea:ec:64:bd:8d:95:1a:d6:be:
                    12:2f:9f:51:8c:f2:a4:4b:4d:5c:8f:7d:33:40:c6:
                    c1:e6:58:85:f2:c0:75:3c:92:c2:cc:ae:c2:ce:95:
                    8a:a9:e0:77:c7:de:83:7d:c2:ac:01:65:f3:aa:13:
                    7d:93:30:33:1a:8a:8b:13:3c:5d:94:2b:bf:1f:28:
                    2b:2b:68:51:34:1b:d8:13:70:f4:4b:87:13:0a:ef:
                    6d:be:3f:6d:31:e1:c9:42:c6:fc:64:7b:a6:43:e8:
                    3e:42:5a:83:0e:c4:24:1c:fd:a5:a5:95:19:8b:23:
                    3e:7f:e3:b1:08:e9:87:ad:d3:15:83:1e:bb:70:8c:
                    f9:fd:20:69:08:ed:f9:3b:e0:3b:c5:17:b4:3a:0e:
                    eb:26:e6:af:0f:79:c8:5d:b6:bf:84:91:dd:08:f9:
                    44:28:ec:4b:35:c4:ae:27:3e:70:3e:87:70:36:7d:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8A:8E:72:56:8A:04:26:75:C4:64:FB:25:C0:0B:63:C2:63:83:E7
            X509v3 Authority Key Identifier:
                keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:bd:34:fc:f5:08:16:49:3a:c0:50:f2:32:47:b8:96:14:1c:
         6e:dc:b0:a9:1d:e8:ff:bd:bc:40:15:37:8a:7c:15:7e:b1:d2:
         6b:32:3e:ab:39:a4:1a:e5:e2:5d:39:6d:42:82:e6:52:56:c0:
         7a:8b:6e:a1:ed:a3:28:03:01:e5:4a:72:e6:64:f3:e7:b5:27:
         25:f8:f5:e9:f5:dc:e3:2d:81:64:b2:3d:89:ad:0b:f6:fc:39:
         19:17:c2:4e:65:69:39:05:a7:c9:41:ea:b2:e8:c7:14:f9:7d:
         32:7d:53:9f:22:6e:a6:69:ef:a3:85:2a:48:c2:f4:50:23:dd:
         a5:93:c3:21:d4:6f:06:7c:0a:5a:75:a5:16:b5:8f:0c:93:dd:
         03:e6:5b:94:14:53:3e:f5:d1:bc:20:50:9a:e8:42:c1:49:35:
         c0:e7:13:d8:28:b2:46:bd:74:c3:b2:9c:a7:0e:8b:d7:6d:54:
         98:27:b1:98:c6:a8:e7:36:38:8f:72:34:bf:3c:ef:7a:d8:64:
         2a:b0:5b:59:2c:c2:e1:94:20:72:4e:44:64:4f:71:00:81:fa:
         25:a5:c5:28:9b:8f:17:fc:fc:68:5f:0f:36:22:0e:b3:b6:15:
         9b:b5:8d:c5:03:86:32:1e:45:f2:f3:c9:e1:f7:03:e0:fb:99:
         05:e0:71:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:16:30 2025 by rpki-client