Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
File:                     R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json)
Hash identifier:          tbPni34PGsBiTYEpOtFy0nTuh3lUZZDGpMEBxs+gka0=
Subject key identifier:   20:AC:72:B0:E0:C6:27:79:1B:08:22:08:23:AB:5B:2B:F5:56:E5:4C
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Certificate issuer:       /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial:       01974967B8EE2539133D14B14C2D67745FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 08:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:23 +0000
Files and hashes:         1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: IeDlm2bFxRHSJgFXPiA8f9DgaY8txFBGl4hb9pU/oYM=)
                          2: UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa (hash: dU40dyYAxG0jUVXRYy3IsfQ8lbv7vAwEo5+BvKJGXqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:b8:ee:25:39:13:3d:14:b1:4c:2d:67:74:5f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
        Validity
            Not Before: Jun  7 08:00:23 2025 GMT
            Not After : Jun  8 08:00:23 2025 GMT
        Subject: CN=20ac72b0e0c627791b08220823ab5b2bf556e54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:d1:a3:c3:e6:73:d3:bb:85:22:96:36:d2:
                    a2:27:24:7c:56:b9:bf:d4:38:6b:86:c2:0c:7c:c9:
                    66:99:d1:b1:ea:6b:91:95:50:7a:d5:76:74:fa:1d:
                    a7:3a:95:0c:41:f5:8b:2a:e1:f8:8b:70:f2:80:f2:
                    c6:18:fb:99:e1:45:b7:b0:3c:70:99:38:6f:de:67:
                    2a:9a:f7:b0:b1:de:8b:f5:09:a5:ab:15:f0:81:e2:
                    93:5c:94:f6:40:15:15:0b:dc:58:a1:23:01:cb:6b:
                    03:aa:7b:01:42:d4:48:d2:24:b1:62:ca:d5:ad:a1:
                    16:17:3c:ef:d8:fe:7c:7c:df:7e:be:a3:64:cb:05:
                    58:de:d5:07:e4:c8:21:35:57:44:1f:7f:86:da:9f:
                    12:2a:4b:5f:1b:d3:d0:80:21:5b:c0:76:16:23:10:
                    f8:53:21:04:8c:c7:f3:c1:e0:ee:c7:20:af:1e:8a:
                    d4:09:18:6b:a4:85:2a:18:8e:33:26:b3:ca:a7:db:
                    ee:0c:e6:fe:94:2a:d4:83:40:0c:46:8a:b4:21:09:
                    26:af:ab:29:f8:02:76:94:34:1f:e2:7e:a3:55:ed:
                    ab:92:d2:f2:15:7c:19:7a:49:73:69:4d:d6:5b:d8:
                    f9:7f:7b:f3:02:32:d6:e2:52:27:ce:24:77:b1:6c:
                    43:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AC:72:B0:E0:C6:27:79:1B:08:22:08:23:AB:5B:2B:F5:56:E5:4C
            X509v3 Authority Key Identifier:
                keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:67:af:4d:4d:8c:9a:22:4b:bd:fe:30:71:72:ba:29:ee:
         9c:b6:4e:f6:be:86:8d:d3:1a:5e:9d:96:41:80:41:2f:12:fc:
         38:2b:4e:a7:ee:7f:e8:71:cd:2d:db:71:47:90:25:f9:8a:ec:
         cc:1d:2a:bd:a6:05:f0:36:80:d0:d6:29:60:e6:3d:d7:23:7a:
         0a:4f:46:f7:5d:7f:63:10:4d:90:33:e0:c8:47:a0:e6:77:28:
         d5:c2:eb:a5:ac:77:65:f5:c9:93:48:3b:56:c6:4b:e9:b7:70:
         97:b9:73:dc:f4:3b:38:73:a7:dd:56:e0:c5:83:31:bd:ee:77:
         e0:86:94:13:c0:68:24:2d:b6:ff:0a:fb:18:c3:72:98:ed:98:
         18:4a:a9:ef:f9:04:ce:ce:4b:5a:b9:0a:36:69:7b:39:e7:d5:
         8d:5f:e6:f8:69:32:00:80:1c:8b:39:23:67:5d:d5:48:8b:16:
         78:64:d2:a0:7c:a5:f4:11:50:b2:4e:28:03:8a:5d:f7:3a:d6:
         c2:cb:2f:4f:21:8f:bb:0a:da:42:62:e5:d0:fe:02:3b:a5:b7:
         01:c3:5e:cc:ac:18:54:2e:be:c8:22:95:b1:52:8e:08:1d:aa:
         91:31:63:63:1c:63:dd:ef:16:e7:74:08:d4:6f:c6:bf:4d:9e:
         fb:12:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:33 2025 by rpki-client