Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File:                     QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier:          qPrOvtDmMRSOi0Lz61Ed9Z1um7pjoEHsmxnPFw+p8T4=
Subject key identifier:   B3:41:56:DF:2C:B4:E8:C4:BB:DF:02:EF:96:0C:CC:7E:D6:13:E1:0F
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer:       /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial:       01976D3E61DC3D3DBA76F8297064814C0E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number:          099C
Signing time:             Sat 14 Jun 2025 07:01:34 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:34 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:34 +0000
Files and hashes:         1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: 4O6bEvSKc2CDW7vDgI7nzKum+IiEIMlRblRkK0wg99w=)
                          2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:61:dc:3d:3d:ba:76:f8:29:70:64:81:4c:0e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
        Validity
            Not Before: Jun 14 07:01:34 2025 GMT
            Not After : Jun 15 07:01:34 2025 GMT
        Subject: CN=b34156df2cb4e8c4bbdf02ef960ccc7ed613e10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:6a:9b:9c:e9:78:25:4d:06:fb:53:c2:b9:
                    af:eb:0d:d1:ae:9e:95:03:81:b2:e0:a4:30:ae:41:
                    ae:25:b2:27:63:4b:fd:51:52:30:71:64:47:f6:22:
                    da:b1:35:02:27:b3:48:ea:6f:50:78:2b:79:00:6c:
                    a0:51:63:a1:72:af:c0:a0:42:47:35:b3:b1:f3:2b:
                    3a:53:cc:6c:bc:1a:c7:1c:25:d6:35:ac:4d:3e:60:
                    7e:0e:40:86:b1:1d:7a:b9:4f:6f:b8:5a:d2:aa:46:
                    1a:56:04:7e:0a:6d:70:1b:7d:1a:4a:53:61:30:ff:
                    0a:81:a4:2f:cd:69:77:9f:88:9a:d9:ac:d5:09:8f:
                    89:38:f6:7a:d1:93:93:2e:1e:6c:56:c3:b6:d2:09:
                    e0:3e:8f:fe:11:f7:5f:ff:c6:f8:4f:1d:fc:da:0b:
                    75:04:04:e0:dd:73:63:f8:70:bf:82:3f:c6:0b:13:
                    f2:e6:7c:f7:6c:20:ae:20:e7:f0:5a:3c:77:36:10:
                    b6:3b:2c:a6:e8:93:58:0b:90:95:3a:08:41:5f:ea:
                    39:78:4e:91:ad:30:3f:ac:91:de:7b:bc:1c:30:57:
                    20:28:70:f7:f3:1c:cf:da:d6:6d:24:b7:04:26:e7:
                    b9:d0:22:c7:07:2f:f7:99:a9:72:9c:7f:15:96:59:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:56:DF:2C:B4:E8:C4:BB:DF:02:EF:96:0C:CC:7E:D6:13:E1:0F
            X509v3 Authority Key Identifier:
                keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:ef:3e:a9:d2:41:54:9a:b3:c5:60:c6:21:7d:e9:97:8a:
         7d:1c:94:72:4f:dc:e1:29:f2:34:a2:51:0e:a8:de:c5:90:4e:
         02:71:97:65:6d:33:62:97:9c:98:04:cd:b9:7c:ca:36:5a:2b:
         fe:17:f8:a6:80:7e:0b:0e:7f:96:0f:e6:08:27:be:26:ec:3a:
         0d:51:ec:d8:d0:db:27:6d:07:71:a1:ce:67:91:41:9c:7d:20:
         04:86:20:d4:05:a5:8e:65:f2:19:e7:09:09:10:54:e2:b4:70:
         d6:17:64:a1:a8:ba:1c:5d:09:1e:0f:a6:5c:54:c2:7d:24:a6:
         a8:9d:8d:7b:05:c7:8f:4e:44:70:ba:ab:32:52:be:12:09:05:
         77:1f:f8:9f:bf:7c:1e:2d:a9:cb:f2:59:b2:86:eb:89:5e:94:
         9d:8e:0b:62:59:79:97:2a:e5:84:27:c0:46:4b:7a:5d:ba:ef:
         cc:70:a0:e8:ac:85:92:4e:54:1c:47:62:3b:33:0c:9f:83:0f:
         f3:8a:7a:0a:be:e0:2d:a4:ad:d4:80:d7:7d:3c:31:a7:30:1b:
         5e:5e:75:b7:ea:77:c5:f7:a0:8f:0a:4c:f3:25:06:d7:f4:3e:
         18:50:76:8e:00:f5:65:37:7d:a0:2e:81:0f:5c:b5:4f:b0:5f:
         c3:2d:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:40:52 2025 by rpki-client