Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File:                     qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier:          gD1JqizAZTRt0ujZwu8VNiIsWofSIud4UbaIUPYinSk=
Subject key identifier:   4F:72:BB:36:CB:1A:43:F8:97:30:D9:BD:86:96:11:BE:21:8C:B2:71
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer:       /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial:       019649D8806E9453D6E8FA05839997F1E940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number:          14F8
Signing time:             Fri 18 Apr 2025 17:00:47 +0000
Manifest this update:     Fri 18 Apr 2025 17:00:47 +0000
Manifest next update:     Sat 19 Apr 2025 17:00:47 +0000
Files and hashes:         1: ZQzI8pwKz3Y9UFOTdtU4b9ctJXY.roa (hash: m2HxLCCi/fQqzx7YAu5gwnUGUYg0wp/lcNW6PdEdels=)
                          2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: oMDVF4kGdIb6QJfL7vz3ZjS4JpuhYigaJX6YAe1hmBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:d8:80:6e:94:53:d6:e8:fa:05:83:99:97:f1:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
        Validity
            Not Before: Apr 18 17:00:47 2025 GMT
            Not After : Apr 19 17:00:47 2025 GMT
        Subject: CN=4f72bb36cb1a43f89730d9bd869611be218cb271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:66:cc:1d:ae:aa:aa:62:0e:15:46:1b:53:
                    1b:0d:dc:77:c3:16:11:b4:8b:b6:0e:72:1e:cf:1a:
                    ba:4f:ae:1b:02:58:d7:63:72:43:48:41:61:d3:5b:
                    d9:c9:e5:03:8c:c9:51:1d:0c:86:5f:a5:90:c4:f2:
                    2e:46:54:80:2c:4c:c7:17:71:93:28:eb:fd:64:14:
                    28:2c:b0:1d:86:01:82:1c:4c:ea:a5:8e:99:44:7a:
                    af:9a:84:7a:2e:96:02:14:e1:33:23:35:2f:03:e9:
                    c1:a1:71:53:ab:c5:76:cf:6e:f6:0b:14:9d:94:7e:
                    4a:d0:c8:a2:1f:c3:ce:44:ae:db:ae:5d:a5:b8:27:
                    4c:74:f3:50:79:af:65:cd:07:48:53:23:6b:ac:97:
                    3b:9e:51:a2:4c:9a:1b:b6:c3:dd:76:2a:81:70:5a:
                    56:6e:d6:df:c2:69:9d:2a:25:46:2c:93:02:9a:61:
                    25:ad:f3:98:c7:8e:09:f8:34:6d:7e:c2:9e:7d:87:
                    8a:91:fe:2d:76:61:a4:18:50:c7:a7:85:dd:ad:d6:
                    4b:65:ab:be:5d:42:d0:8a:6b:bc:c1:32:8b:0e:86:
                    b4:bb:55:55:3c:08:8d:42:b2:13:ff:ac:8e:e1:78:
                    43:00:97:b4:cc:f1:9f:9a:48:47:2c:a4:6c:ec:a6:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:72:BB:36:CB:1A:43:F8:97:30:D9:BD:86:96:11:BE:21:8C:B2:71
            X509v3 Authority Key Identifier:
                keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fe:69:1a:10:06:ac:c0:6f:17:b8:d8:3f:ae:b9:b3:1f:9a:
         2d:37:6d:6f:94:5c:e8:ae:5c:72:4c:e1:bf:23:83:6e:e7:84:
         6b:59:89:bc:96:48:df:72:dc:f7:21:38:96:2f:f7:ca:a9:4d:
         26:3a:10:80:60:ad:e5:48:69:51:ac:3f:05:30:e6:5e:bb:a0:
         95:9c:76:50:f0:d5:28:ed:85:0f:61:5a:b5:e7:50:e0:15:cf:
         84:58:14:f0:4e:00:27:15:21:2e:f2:47:cf:7e:6c:42:bc:bb:
         af:27:ab:bd:35:8c:c7:9b:46:8e:57:a9:32:12:90:4c:5c:6c:
         a8:52:b5:ba:45:e3:54:36:cf:d0:91:ff:6a:3c:8e:70:e7:71:
         8f:80:3b:1c:bd:bf:db:72:f2:20:6a:09:5c:47:24:cd:71:57:
         b3:e9:41:c3:c2:0b:2e:ba:28:05:46:b6:f8:59:3d:3a:a8:40:
         48:c1:f2:be:5c:6a:87:cb:c7:34:f8:f1:da:14:fd:f4:a0:6a:
         4b:77:ad:90:d9:06:61:71:48:3d:6b:1d:b8:63:aa:5c:02:78:
         4e:b4:5c:54:a1:c2:b6:c8:62:29:de:65:7d:68:be:6c:53:81:
         4e:9d:e9:1c:1d:3e:1d:2c:c1:ba:af:10:9c:f9:2b:9e:84:bb:
         ce:78:89:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJ2IBulFPW6PoFg5mX8elAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Nzc4MjBlYTYxYjExYjViMzg1OWFiNGE0YmM3ZWMwYTdi
NzM4OGMwHhcNMjUwNDE4MTcwMDQ3WhcNMjUwNDE5MTcwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZjcyYmIzNmNiMWE0M2Y4OTczMGQ5YmQ4Njk2MTFiZTIxOGNiMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HZmzB2uqqpiDhVGG1MbDdx3wxYR
tIu2DnIezxq6T64bAljXY3JDSEFh01vZyeUDjMlRHQyGX6WQxPIuRlSALEzHF3GT
KOv9ZBQoLLAdhgGCHEzqpY6ZRHqvmoR6LpYCFOEzIzUvA+nBoXFTq8V2z272CxSd
lH5K0MiiH8PORK7brl2luCdMdPNQea9lzQdIUyNrrJc7nlGiTJobtsPddiqBcFpW
btbfwmmdKiVGLJMCmmElrfOYx44J+DRtfsKefYeKkf4tdmGkGFDHp4XdrdZLZau+
XULQimu8wTKLDoa0u1VVPAiNQrIT/6yO4XhDAJe0zPGfmkhHLKRs7KblNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9yuzbLGkP4lzDZvYaWEb4hjLJxMB8GA1UdIwQY
MBaAFKl3gg6mGxG1s4WatKS8fsCntziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUt
YjE4ZDc2YjAxMmU3LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUtYjE4ZDc2YjAxMmU3
LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/5pGhAG
rMBvF7jYP665sx+aLTdtb5Rc6K5cckzhvyODbueEa1mJvJZI33Lc9yE4li/3yqlN
JjoQgGCt5UhpUaw/BTDmXruglZx2UPDVKO2FD2FatedQ4BXPhFgU8E4AJxUhLvJH
z35sQry7ryervTWMx5tGjlepMhKQTFxsqFK1ukXjVDbP0JH/ajyOcOdxj4A7HL2/
23LyIGoJXEckzXFXs+lBw8ILLrooBUa2+Fk9OqhASMHyvlxqh8vHNPjx2hT99KBq
S3etkNkGYXFIPWsduGOqXAJ4TrRcVKHCtshiKd5lfWi+bFOBTp3pHB0+HSzBuq8Q
nPkrnoS7zniJEw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:10 2025 by rpki-client