Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File:                     QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier:          gNFA/mF8KzJONpiAj5Y2Xepo2chfxUpj1ZOdZhl/IM4=
Subject key identifier:   8C:DE:00:9E:67:24:E7:6C:0E:25:A0:2B:1C:F2:6C:7E:AD:2A:B9:F6
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer:       /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial:       0197658444932C41EFE05B263D6A75A16D70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number:          0998
Signing time:             Thu 12 Jun 2025 19:00:56 +0000
Manifest this update:     Thu 12 Jun 2025 19:00:56 +0000
Manifest next update:     Fri 13 Jun 2025 19:00:56 +0000
Files and hashes:         1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: 1I4f0NC/TkjvcQcRcd7rKejA/wMqp1+49+kXs+IJadQ=)
                          2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:84:44:93:2c:41:ef:e0:5b:26:3d:6a:75:a1:6d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
        Validity
            Not Before: Jun 12 19:00:56 2025 GMT
            Not After : Jun 13 19:00:56 2025 GMT
        Subject: CN=8cde009e6724e76c0e25a02b1cf26c7ead2ab9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:08:d4:d1:ba:b8:03:18:ef:14:3f:dc:06:
                    58:32:2a:28:23:96:a7:8b:3c:8b:2a:e7:1e:a7:c2:
                    d5:71:07:3e:40:cc:8e:7c:3c:23:0c:6d:b1:8a:cd:
                    2e:9a:3c:09:50:9a:0f:53:8e:7e:ad:89:c8:4b:3d:
                    1a:19:bc:ec:1f:3a:9c:80:04:14:2b:46:4a:34:ad:
                    95:be:3c:68:5c:9e:22:09:85:0b:fa:c7:81:3d:aa:
                    65:33:2f:36:0d:10:a3:54:70:21:45:9e:97:75:b4:
                    ff:77:51:70:53:fb:09:8d:84:c2:aa:5b:6e:51:93:
                    fe:db:cf:57:0e:62:51:7d:81:48:78:7e:d6:25:1d:
                    5a:2a:e9:98:2a:24:42:29:95:41:5d:6b:ac:3c:e8:
                    36:81:4d:be:e6:cf:5b:c1:9a:ff:67:7d:63:70:c3:
                    96:7e:ac:36:8c:b2:45:15:29:bd:23:61:8a:e8:2f:
                    04:0b:b2:f2:88:62:5b:9d:f3:dd:16:d1:e3:55:09:
                    71:03:be:ec:bb:4b:b6:b9:69:3b:af:a9:42:6f:0f:
                    f1:08:84:6c:cc:8b:13:78:b6:c1:68:c2:c4:9d:a8:
                    5c:21:ee:cf:2c:6f:2e:06:d7:21:51:43:77:f0:be:
                    70:a0:13:28:38:c6:34:c3:76:71:6f:d9:98:35:ae:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DE:00:9E:67:24:E7:6C:0E:25:A0:2B:1C:F2:6C:7E:AD:2A:B9:F6
            X509v3 Authority Key Identifier:
                keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:81:18:bd:78:4a:05:f6:3d:51:85:ef:fc:7e:cc:77:19:
         22:2d:08:6f:40:91:7d:1e:b6:aa:c0:58:07:5b:8e:9c:cc:a7:
         f3:3b:3e:98:5d:9f:2f:be:75:69:1d:c1:7a:71:f5:ab:72:f6:
         c9:be:9b:6c:0a:df:4b:86:1c:6f:ee:e8:a7:d2:2e:e8:a5:73:
         f7:76:4d:06:33:33:f8:2e:dd:bd:5c:6d:21:d5:ca:d8:4a:80:
         1d:23:80:bf:4f:c2:0b:25:8a:c5:33:22:c6:9d:32:9e:ec:da:
         69:9b:46:f1:c3:9f:84:12:a0:bf:e8:b3:f1:77:f5:3a:94:94:
         b4:e5:b6:25:fa:31:ef:02:93:31:71:9f:c9:b2:b5:b2:06:e9:
         53:2a:df:e9:ea:a7:30:2d:82:43:6b:74:24:1c:bf:30:dc:fa:
         65:f0:d7:55:a1:22:3a:b2:af:32:a7:c3:62:83:35:da:d8:9b:
         42:32:42:dd:a5:ca:ca:c3:16:71:59:74:fa:b2:4b:42:13:ef:
         3b:6b:3e:a1:66:98:00:4a:12:10:95:97:9a:c5:6b:79:83:e8:
         ed:37:5d:cc:54:87:97:f4:4f:a7:04:af:6c:1f:83:c3:9d:9e:
         73:e6:b9:ea:38:a4:9d:cb:70:32:ae:c5:53:ca:af:e5:d5:f9:
         04:14:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:23:05 2025 by rpki-client