Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
File:                     QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json)
Hash identifier:          B+mdQRaUYY1FddFW2WqE0vGruC4ndS3QMz58Zha6OuE=
Subject key identifier:   BC:EF:2D:81:9B:53:57:40:B5:4F:1B:FF:1F:7F:A9:B6:CD:32:D3:24
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Certificate issuer:       /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial:       01974AE83F608922099F994AD4EC55C7A55C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
Manifest number:          04FE
Signing time:             Sat 07 Jun 2025 15:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:23 +0000
Files and hashes:         1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: evommOxuzmmYgtgxj5vKIzh6xpmMMBbuJeSFIeGkQRs=)
                          2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:3f:60:89:22:09:9f:99:4a:d4:ec:55:c7:a5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
        Validity
            Not Before: Jun  7 15:00:23 2025 GMT
            Not After : Jun  8 15:00:23 2025 GMT
        Subject: CN=bcef2d819b535740b54f1bff1f7fa9b6cd32d324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:4e:cc:dd:14:52:78:94:0c:a4:2b:c0:76:
                    9c:a5:c0:6a:61:bc:83:51:c2:49:db:24:44:84:20:
                    e7:26:ef:8e:b3:0d:75:29:ea:36:4a:8c:50:f6:1c:
                    ba:91:81:82:1b:be:15:17:0d:3b:99:25:bc:e4:e1:
                    fb:0b:86:03:44:56:d5:93:e4:b3:82:00:fd:46:0d:
                    fe:ee:45:fb:6e:bb:14:0d:f3:90:4b:41:d5:70:ec:
                    de:31:26:fd:ba:14:36:9c:a3:1a:d4:dd:72:db:9b:
                    25:6e:4f:5b:9e:c3:0d:58:90:60:ee:12:55:11:0b:
                    23:51:df:bb:17:17:a1:e1:dd:70:cc:17:7a:38:c7:
                    9a:21:4a:21:de:04:6b:4c:0b:52:92:44:d8:ca:7a:
                    8a:da:20:ff:0a:2d:8b:5b:a7:ce:46:5b:5e:90:f7:
                    d9:b4:ea:65:a1:69:ac:b7:e1:f1:4f:bf:ab:ce:44:
                    f4:32:a7:8a:a9:54:ce:3b:20:83:38:39:56:4c:cd:
                    c0:8b:2c:97:7c:9f:c8:f0:8d:06:ec:d9:b1:e1:8e:
                    28:84:f9:6c:95:a7:05:92:53:36:37:2d:c5:e6:19:
                    64:da:cd:dc:84:94:61:cf:e8:90:bb:1b:56:a6:4b:
                    87:02:50:38:17:34:3c:ec:01:1a:52:98:07:c3:c3:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EF:2D:81:9B:53:57:40:B5:4F:1B:FF:1F:7F:A9:B6:CD:32:D3:24
            X509v3 Authority Key Identifier:
                keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a4:a9:21:a5:f4:04:b1:a8:9c:36:be:d2:9d:44:31:25:6b:
         cb:4f:15:db:f3:91:e5:d2:36:7a:a7:6b:66:bc:14:f8:a8:b5:
         73:39:24:ea:19:2e:f0:0d:a9:8a:c2:c4:1b:e8:9e:67:ae:2c:
         5a:20:29:2d:d8:fd:9c:54:30:80:90:85:15:5f:5d:80:c7:f6:
         7e:ef:d1:03:91:fb:f2:23:4b:cc:6f:7b:9d:d7:ff:08:38:4d:
         13:18:f0:69:99:60:cb:4e:e7:ec:27:61:f3:df:0a:9e:56:32:
         cc:4c:ea:86:10:09:5e:90:ef:f4:36:4e:d8:aa:2f:a1:bb:9b:
         a1:b3:83:46:a3:63:33:cd:4a:41:35:f8:69:f8:ef:b7:2b:fb:
         d8:df:9a:27:65:86:41:9e:2e:4c:a1:f4:83:c5:97:82:6f:d6:
         3b:e5:6c:bb:89:51:13:a1:23:7d:b5:be:80:aa:93:24:11:2b:
         f8:47:ae:96:36:1e:31:52:68:3e:dc:f6:1b:32:bf:f6:32:d5:
         2f:96:b9:75:2c:e9:13:2f:b8:e9:81:d3:d6:de:4f:8d:06:ba:
         ed:1c:3c:11:4b:51:01:f0:e1:6a:d5:ae:21:d2:a7:e6:10:bf:
         b4:8f:bb:41:14:6b:b7:af:3b:78:d6:ea:3d:cc:48:72:34:3b:
         1b:24:93:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:05 2025 by rpki-client