Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File:                     Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier:          QJXq717lQHkm8dEW06T8/pYOEIlvk1e64L+KOxHTx24=
Subject key identifier:   F8:D6:F2:6D:D2:A7:2F:16:62:D1:3E:0B:ED:E6:FE:F7:73:4B:A9:22
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer:       /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial:       01951134EF0DCF16C175A5E04162256BC879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number:          11AC
Signing time:             Mon 17 Feb 2025 00:00:36 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:36 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:36 +0000
Files and hashes:         1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: eJk/4NetG9E99IpgyHiCMqUm8DAlJrbg3d8azEHq/LM=)
                          2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
                          3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
                          4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:ef:0d:cf:16:c1:75:a5:e0:41:62:25:6b:c8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
        Validity
            Not Before: Feb 17 00:00:36 2025 GMT
            Not After : Feb 18 00:00:36 2025 GMT
        Subject: CN=f8d6f26dd2a72f1662d13e0bede6fef7734ba922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:77:06:ac:5f:61:7d:ef:16:33:4f:99:3f:
                    6b:ae:3e:7d:14:14:d8:24:bb:5f:b5:de:a4:d7:e8:
                    2f:7a:de:95:6c:ec:26:10:c2:81:16:44:72:d1:e1:
                    bf:65:20:cf:98:7a:94:18:51:a0:aa:86:7a:c1:84:
                    ae:2c:15:87:eb:ac:a2:e1:4a:f6:1c:c5:99:18:6a:
                    61:7c:84:56:ba:56:e0:aa:32:be:dd:e3:7d:ce:83:
                    53:92:6c:7c:e9:05:25:66:1d:16:ed:f4:91:d5:f5:
                    87:e3:fc:b2:cc:65:cd:b7:58:61:5e:2c:a5:25:ac:
                    24:22:ed:52:9a:cc:f5:67:8e:e1:56:fd:08:29:29:
                    13:68:73:22:f4:e8:0a:24:41:b7:d0:c0:8b:6a:d1:
                    ed:49:9e:a9:d2:9a:58:35:5d:11:94:57:73:79:3a:
                    45:5e:e3:ba:c0:74:2e:ce:f3:1e:0d:8b:ec:2c:57:
                    3a:50:10:ba:20:c3:79:de:ff:7a:5d:9b:cc:d2:70:
                    9d:f1:a8:68:0f:b9:d2:06:9a:6d:5b:b3:8f:e6:71:
                    d4:21:58:f6:a6:78:8e:e7:c9:ad:d2:4e:fe:91:d7:
                    d4:13:86:cf:fc:d3:7a:f6:af:c3:db:fb:10:e1:f5:
                    f5:42:61:9a:70:41:56:63:a4:f0:46:b5:66:53:d8:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D6:F2:6D:D2:A7:2F:16:62:D1:3E:0B:ED:E6:FE:F7:73:4B:A9:22
            X509v3 Authority Key Identifier:
                keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:15:58:e4:fb:42:83:da:c4:20:6b:b7:46:42:44:db:f5:
         24:e3:82:a3:2f:f8:bb:27:df:cf:25:bc:97:ad:83:80:7f:b5:
         c9:e9:16:94:f4:95:d6:34:42:9f:c2:b4:39:f7:ca:a0:84:28:
         b5:e9:5d:3f:69:da:c5:05:c3:2f:a6:87:95:b8:9b:cb:58:87:
         bc:6d:89:85:bd:c3:e0:6c:bb:7f:17:de:74:f0:67:d4:63:1d:
         b8:b1:79:1a:d0:f4:0a:30:0a:44:40:e9:43:bd:a4:19:d1:91:
         56:ff:6e:8e:c1:6b:1c:d2:e8:dd:2c:94:96:39:ea:04:44:b7:
         ff:3a:0b:d6:1f:b5:0e:f3:45:85:86:b8:63:d2:15:ae:87:7d:
         08:a9:c6:a8:59:2f:c5:38:65:04:f4:12:4f:98:e7:b6:9d:b9:
         7e:cc:53:64:9c:a1:16:51:13:11:e4:19:d6:fb:b4:97:e4:08:
         2c:7c:e3:80:e0:79:3c:33:df:4f:50:2f:1f:c6:f7:c7:c2:89:
         4a:49:74:b6:a2:80:69:42:6e:d2:bc:ed:41:73:3b:84:79:a7:
         44:72:6e:51:4a:1f:e5:c6:6a:30:c8:58:30:35:07:79:f0:71:
         be:84:02:e7:f6:17:60:d5:01:64:de:d2:86:dd:68:37:e2:91:
         fc:8b:45:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNO8NzxbBdaXgQWIla8h5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWU0MTk2MGQ1OTBlOTk4MDRlOTBiOWFmMDM2NTU4NGM3
MTJjNzIwHhcNMjUwMjE3MDAwMDM2WhcNMjUwMjE4MDAwMDM2WjAzMTEwLwYDVQQD
EyhmOGQ2ZjI2ZGQyYTcyZjE2NjJkMTNlMGJlZGU2ZmVmNzczNGJhOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz13BqxfYX3vFjNPmT9rrj59FBTY
JLtftd6k1+gvet6VbOwmEMKBFkRy0eG/ZSDPmHqUGFGgqoZ6wYSuLBWH66yi4Ur2
HMWZGGphfIRWulbgqjK+3eN9zoNTkmx86QUlZh0W7fSR1fWH4/yyzGXNt1hhXiyl
JawkIu1Smsz1Z47hVv0IKSkTaHMi9OgKJEG30MCLatHtSZ6p0ppYNV0RlFdzeTpF
XuO6wHQuzvMeDYvsLFc6UBC6IMN53v96XZvM0nCd8ahoD7nSBpptW7OP5nHUIVj2
pniO58mt0k7+kdfUE4bP/NN69q/D2/sQ4fX1QmGacEFWY6TwRrVmU9hqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjW8m3Spy8WYtE+C+3m/vdzS6kiMB8GA1UdIwQY
MBaAFENeQZYNWQ6ZgE6Qua8DZVhMcSxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAt
MDFiYjVmZDUzNGY1LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAtMDFiYjVmZDUzNGY1
LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANH0VWOT7
QoPaxCBrt0ZCRNv1JOOCoy/4uyffzyW8l62DgH+1yekWlPSV1jRCn8K0OffKoIQo
teldP2naxQXDL6aHlbiby1iHvG2Jhb3D4Gy7fxfedPBn1GMduLF5GtD0CjAKREDp
Q72kGdGRVv9ujsFrHNLo3SyUljnqBES3/zoL1h+1DvNFhYa4Y9IVrod9CKnGqFkv
xThlBPQST5jntp25fsxTZJyhFlETEeQZ1vu0l+QILHzjgOB5PDPfT1AvH8b3x8KJ
Skl0tqKAaUJu0rztQXM7hHmnRHJuUUof5cZqMMhYMDUHefBxvoQC5/YXYNUBZN7S
ht1oN+KR/ItFXg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:20 2025 by rpki-client