Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File:                     QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier:          u+8t/BZxx/ydyha5ArldwJVZyggl9BoC21M0VLvR5vY=
Subject key identifier:   C3:A2:75:2E:04:A5:01:33:68:0C:4A:8A:03:C0:61:C3:BA:95:BC:F7
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer:       /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial:       019763966C7D124A31F3AC75E8CFD5E80E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number:          0997
Signing time:             Thu 12 Jun 2025 10:01:31 +0000
Manifest this update:     Thu 12 Jun 2025 10:01:31 +0000
Manifest next update:     Fri 13 Jun 2025 10:01:31 +0000
Files and hashes:         1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: WJhIddRwCXAiYRmGvDRSe4a9TXsyDlMlaXGPVpf7DwU=)
                          2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:96:6c:7d:12:4a:31:f3:ac:75:e8:cf:d5:e8:0e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
        Validity
            Not Before: Jun 12 10:01:31 2025 GMT
            Not After : Jun 13 10:01:31 2025 GMT
        Subject: CN=c3a2752e04a50133680c4a8a03c061c3ba95bcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:17:9f:58:53:ba:0a:de:ff:90:79:e0:e4:
                    02:67:8f:ba:d7:bd:f8:6f:b0:f4:9d:38:f6:2e:84:
                    14:7d:03:3e:63:24:de:f6:fd:83:c9:ee:ef:4d:93:
                    90:0c:66:6c:ec:97:7c:2e:87:90:3c:c2:64:2d:6f:
                    19:06:14:65:89:fe:84:ed:d0:b6:bd:98:a2:ca:76:
                    45:39:54:06:aa:a9:43:cf:0d:5e:a9:3d:ad:76:93:
                    92:d0:1e:77:ab:1c:66:61:9b:84:78:c7:44:4c:23:
                    db:67:ae:de:c6:0a:20:fb:fa:8e:ad:49:e9:03:e3:
                    21:55:54:3b:7c:c5:71:f3:2d:ea:76:1e:84:e1:68:
                    60:10:01:57:be:b5:88:d8:47:8c:8b:ce:c9:72:68:
                    b8:60:2f:3c:66:89:ea:5d:da:cd:43:4c:bb:6f:7e:
                    fc:10:c4:00:14:ac:89:a5:96:ba:60:b6:bc:8d:1d:
                    b0:a5:f0:31:d0:36:57:cb:d2:24:85:20:98:c7:c5:
                    4a:4b:a8:d4:93:7d:20:a6:a7:89:82:ef:85:ae:de:
                    30:d5:68:e6:15:3c:d5:00:3a:45:80:92:c5:63:72:
                    4f:d7:db:fc:c5:4b:93:5b:70:11:62:08:4e:ad:5a:
                    ec:c4:a0:0a:e5:18:54:1e:ec:5e:1e:2c:ae:99:47:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A2:75:2E:04:A5:01:33:68:0C:4A:8A:03:C0:61:C3:BA:95:BC:F7
            X509v3 Authority Key Identifier:
                keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c2:fd:81:05:11:01:0d:93:f7:5d:ce:6a:9f:4d:61:64:fc:
         77:c1:f5:76:ec:bf:6f:50:9b:bf:b2:50:91:19:0f:d1:13:56:
         b7:8e:04:c4:55:db:3d:6b:aa:82:cd:b0:6e:7e:61:49:49:97:
         2f:5a:1e:e2:45:bd:61:e4:f7:b7:99:ce:cf:20:0e:a0:45:cf:
         76:ca:80:94:2a:63:c9:a4:50:a9:00:2e:ee:bd:14:dc:b0:46:
         2f:5f:82:52:50:5a:ee:84:5a:e5:2f:7d:44:2c:e0:e9:e5:a8:
         95:06:c7:47:09:66:08:44:c3:08:a3:57:13:19:7d:fb:e8:aa:
         88:25:f1:77:15:24:b1:9c:9f:94:b4:1e:42:04:b7:92:ab:09:
         43:3a:22:86:19:45:be:95:f8:29:c4:1b:37:f8:3d:ca:52:ea:
         53:e0:96:6a:1d:48:d6:84:ee:dd:5f:99:5e:d6:a6:b3:12:e1:
         02:65:af:56:33:86:77:60:67:fe:32:3e:5c:1d:b4:3c:a9:de:
         91:47:7d:3d:a1:a8:43:47:85:64:87:8a:fe:cb:bc:67:6f:fc:
         7c:67:36:c0:24:19:9e:aa:97:a6:75:04:13:a4:51:c5:81:5b:
         98:a9:eb:79:b9:97:28:e8:86:c8:9c:ea:21:d6:7f:d1:34:8e:
         7b:10:5c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:44:31 2025 by rpki-client