Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File:                     QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier:          sK6NDYrp4hOwJyRbOe+Dc0Qu3UjAX2k6AL4HfNfChBE=
Subject key identifier:   AD:61:16:31:81:50:8F:EB:6E:27:9D:87:E9:0E:5B:F4:92:37:A4:F3
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer:       /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial:       01965D5F0D7E81811B09EA55F386819650E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number:          01F3
Signing time:             Tue 22 Apr 2025 12:00:32 +0000
Manifest this update:     Tue 22 Apr 2025 12:00:32 +0000
Manifest next update:     Wed 23 Apr 2025 12:00:32 +0000
Files and hashes:         1: DuKvCk6weo_jRBIvDVj8Yjk0KTM.roa (hash: V+Me01+23/zbVQCoEw1CvcMCR84Y0P8j12b7Z3im4Sk=)
                          2: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: aL82kByIsRndV0bfV82S/BlDW4pYMCBih5c/5aYBhZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 12:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5d:5f:0d:7e:81:81:1b:09:ea:55:f3:86:81:96:50:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
        Validity
            Not Before: Apr 22 12:00:32 2025 GMT
            Not After : Apr 23 12:00:32 2025 GMT
        Subject: CN=ad61163181508feb6e279d87e90e5bf49237a4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:c2:88:b8:93:66:e1:2a:5d:7b:01:37:20:
                    bc:6a:87:d6:a6:0c:3c:dc:ea:92:1c:03:fb:dc:28:
                    38:bb:97:c9:d8:17:6f:0f:7d:03:bd:a8:7d:f5:8b:
                    df:bf:14:c3:4e:b0:3d:49:6f:66:21:da:d0:31:c8:
                    97:e0:da:7b:4f:74:3c:68:e9:6c:e6:c2:a7:0d:9a:
                    72:a0:b4:6b:00:bf:a6:c2:62:5a:99:13:1f:6b:b2:
                    b0:e0:a9:5f:59:5c:49:cc:0f:fe:29:aa:91:80:ea:
                    bb:60:9c:26:c3:97:19:6e:e5:aa:4c:06:2c:6c:d4:
                    0d:6e:93:99:7c:30:dd:a2:3b:70:e4:16:9a:3f:10:
                    ad:b7:ec:26:11:28:a8:da:c5:1a:05:b6:4a:b8:4d:
                    ae:21:4b:27:19:56:1e:02:d4:35:49:d0:e9:29:76:
                    cb:68:1d:f2:ff:de:5f:41:b2:44:9a:3a:b2:97:1a:
                    52:4d:bd:d3:af:7b:5d:e8:51:6c:b1:c1:01:2d:3c:
                    95:db:f2:29:78:3b:dd:46:04:09:e6:bd:5e:df:d1:
                    ba:4a:d3:1a:3c:13:3d:10:91:fd:57:f6:09:40:5c:
                    7c:bb:17:d0:60:62:22:ca:3e:c4:b7:78:23:c6:1d:
                    8b:36:5a:85:b2:84:a5:28:8c:cb:30:88:08:65:c6:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:61:16:31:81:50:8F:EB:6E:27:9D:87:E9:0E:5B:F4:92:37:A4:F3
            X509v3 Authority Key Identifier:
                keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:14:c3:6b:b5:78:41:5f:eb:b0:94:e8:c4:f7:b6:c9:6e:
         50:8a:4f:32:5c:92:dd:3a:b8:9d:f6:d1:48:39:db:a5:ab:d2:
         6e:33:4c:e0:ed:0e:7a:48:72:68:ba:db:34:3d:a1:47:d1:39:
         b1:ee:85:f0:a0:6a:d8:cc:8b:82:15:f8:93:b5:28:2d:aa:59:
         08:9b:36:c4:6e:d7:fe:10:3f:ad:b9:3a:c4:a6:7d:24:f0:61:
         36:fa:08:89:95:8f:4f:aa:ae:9a:02:fb:1d:0e:59:f7:46:9a:
         3c:0d:fc:55:ce:e3:e0:ee:76:24:c1:cb:da:43:9b:85:2e:3e:
         18:c2:e5:3f:0a:40:2c:1d:2c:20:3b:7a:38:95:d5:03:04:84:
         dc:90:c9:3f:7e:20:e4:f6:3c:42:d9:2d:05:d1:cf:9d:e3:35:
         e7:02:3c:bc:8b:7e:95:9e:6c:29:61:06:16:76:53:c5:ce:e1:
         b9:f4:8f:c2:fb:fb:a9:c9:3d:02:eb:0c:2b:6d:8a:a6:d7:8d:
         59:b2:db:06:8a:7f:fe:83:c0:47:73:f6:b5:89:bf:39:f0:af:
         7b:7d:fc:c5:3d:7e:95:28:cc:2a:3c:ab:28:b8:65:06:14:31:
         d8:98:ea:a0:73:ef:33:8c:4e:94:82:ef:0d:d0:78:6e:24:f2:
         ac:1e:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:29 2025 by rpki-client