Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File:                     Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier:          x2JZ3nYKisCgv+iiNEhW7dSnTnA9EZz+LsHACOtdHKA=
Subject key identifier:   08:43:1E:A4:C5:A3:A3:AB:A7:60:1E:DA:86:28:64:B1:C4:DE:BC:01
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer:       /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial:       01964A0FA746FA6669920C870DFAAF14E9D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number:          124E
Signing time:             Fri 18 Apr 2025 18:01:01 +0000
Manifest this update:     Fri 18 Apr 2025 18:01:01 +0000
Manifest next update:     Sat 19 Apr 2025 18:01:01 +0000
Files and hashes:         1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: MRWTpm72GCcyyUD6CjsUu9/yeoZLaE84H84ElSu6qB8=)
                          2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
                          3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
                          4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 18:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0f:a7:46:fa:66:69:92:0c:87:0d:fa:af:14:e9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
        Validity
            Not Before: Apr 18 18:01:01 2025 GMT
            Not After : Apr 19 18:01:01 2025 GMT
        Subject: CN=08431ea4c5a3a3aba7601eda862864b1c4debc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:bd:75:fe:ee:7d:b6:d3:dc:c6:d6:5f:b4:
                    5c:0c:dd:d6:73:bf:95:25:8b:bd:a2:a4:2b:62:f1:
                    74:37:a8:3f:3d:41:8f:f0:e9:7c:c5:0c:2b:a3:70:
                    5b:5d:06:7c:5b:ef:5e:10:0d:87:7a:e2:3e:a3:64:
                    c1:1e:b0:a6:f9:ae:77:de:44:d5:7b:7f:de:f4:9e:
                    bb:fc:1d:dd:71:0b:2b:b9:86:30:12:23:1a:7a:9a:
                    c2:47:51:7b:63:ca:29:42:72:a7:67:0b:f5:df:65:
                    a5:62:18:0d:41:4b:30:47:fa:e8:16:de:4c:b2:0c:
                    f0:39:8c:1b:c8:27:65:c2:2c:ff:2e:65:33:7b:11:
                    d8:d2:fa:90:b6:b9:8a:fd:16:0c:63:98:b3:55:8a:
                    09:63:c5:86:2a:24:10:4b:a4:b8:2e:18:d0:7a:fe:
                    50:91:8a:52:31:4a:17:ae:97:ff:09:e9:91:ef:c7:
                    a1:36:51:55:5a:2a:b6:ea:5c:0c:ef:b2:ef:fa:98:
                    07:55:ad:14:e7:43:0a:05:6a:d6:82:8a:f9:4c:9f:
                    e7:da:17:0b:9d:04:08:64:14:cc:69:b3:47:b9:41:
                    af:81:a3:15:17:af:ba:eb:02:09:52:af:07:b9:54:
                    d2:08:ac:b7:70:f2:1b:42:35:cd:cb:01:0f:6a:96:
                    d1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:43:1E:A4:C5:A3:A3:AB:A7:60:1E:DA:86:28:64:B1:C4:DE:BC:01
            X509v3 Authority Key Identifier:
                keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:76:a7:97:ad:b4:ff:32:7c:9e:16:59:d5:52:bf:97:fb:5a:
         06:e0:09:c5:65:38:a2:88:50:22:ed:ad:d5:6d:d4:dc:9a:67:
         34:74:68:cf:0e:5c:c3:e1:e7:94:93:4d:a9:fc:bb:a7:04:07:
         78:36:52:bd:51:c1:8a:8f:f4:11:f0:d7:7f:c8:e7:80:ed:88:
         1a:fc:5e:65:69:cc:08:80:76:19:4b:0a:d5:1a:03:a9:a8:7c:
         27:8e:96:23:0a:92:03:00:51:5f:d4:66:37:39:96:b8:af:9b:
         4d:68:3e:c2:d4:4b:bf:64:15:61:00:9c:63:8d:1d:a2:a1:a2:
         80:19:b7:56:76:db:5c:bf:46:2e:66:63:03:71:6e:3a:ba:4f:
         3d:c1:49:d6:c3:22:dc:ec:c2:2b:5c:7d:7b:ad:e3:67:f9:e3:
         2f:01:8e:7d:52:a5:26:73:de:e6:68:59:b2:3c:59:a1:5a:96:
         12:ee:d5:cd:47:19:db:83:4a:40:40:2e:10:50:62:79:76:f0:
         2b:a2:d7:70:a3:e5:6d:c2:14:18:69:d2:02:de:5e:d8:89:e8:
         97:49:9e:34:86:52:c0:71:5c:5f:1f:a0:76:0b:37:29:b4:6a:
         9d:d9:75:95:6e:94:b0:72:5a:9e:e7:a1:a6:97:91:8a:7e:8e:
         ee:72:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:26:38 2025 by rpki-client