Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File:                     mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier:          L3n7rQo4r6v3Nhbf2Uneq6XeuS4O38QZixtfxH2aFaE=
Subject key identifier:   89:17:92:06:F7:1E:40:24:BB:45:90:5D:ED:27:A9:48:25:88:D9:63
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer:       /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial:       01962CE12488587FC2358EDA25B75C2D8123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number:          0EE2
Signing time:             Sun 13 Apr 2025 02:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 02:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 02:01:14 +0000
Files and hashes:         1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: yazoCFq8r7Pk7RHoz0wwAyfrTeRQhZ6B+sTXII7fbww=)
                          2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2c:e1:24:88:58:7f:c2:35:8e:da:25:b7:5c:2d:81:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
        Validity
            Not Before: Apr 13 02:01:14 2025 GMT
            Not After : Apr 14 02:01:14 2025 GMT
        Subject: CN=89179206f71e4024bb45905ded27a9482588d963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:05:1c:3a:2b:2d:d8:58:60:3c:c7:62:aa:a9:
                    f3:56:2f:c5:fc:93:9b:51:d5:12:a5:0c:51:e0:9e:
                    d6:48:4d:bc:95:f7:e4:88:32:b5:d5:9b:79:e3:2c:
                    5c:a6:de:12:4e:ea:0f:30:bb:9f:5f:24:02:ad:ae:
                    4a:2c:81:e6:7b:e1:b9:55:9d:7d:d5:34:7f:fa:f9:
                    f9:bd:d4:e6:5e:f2:cd:3e:30:ce:35:bb:18:ed:3d:
                    4b:77:8e:d3:25:69:d6:c4:29:75:48:ca:1c:70:f5:
                    01:55:49:7c:63:5b:7c:9e:cb:cf:ee:f8:cc:5a:af:
                    c4:9e:21:eb:83:b5:84:aa:1b:28:26:85:3e:ec:ea:
                    06:c5:66:fe:44:1e:ae:d5:04:e3:20:e2:32:a7:31:
                    08:7f:0f:9e:e7:e1:bb:1b:84:4f:4f:5e:3d:22:0b:
                    bc:4d:7d:e0:c5:35:1b:ac:b7:c1:2b:13:8a:14:72:
                    6a:e8:7b:c4:98:14:39:94:76:1b:de:04:22:df:80:
                    d1:f2:7d:cf:7f:ee:06:97:f3:ef:35:60:a4:61:ea:
                    57:84:3b:0e:ed:ad:7d:e6:e7:72:da:b5:7f:ef:53:
                    7e:bf:58:26:d1:e0:e2:52:24:10:54:33:ed:69:a3:
                    7c:4e:60:e9:26:2c:7d:5e:5c:ae:8d:47:fa:08:04:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:92:06:F7:1E:40:24:BB:45:90:5D:ED:27:A9:48:25:88:D9:63
            X509v3 Authority Key Identifier:
                keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:94:69:3f:43:9b:5e:ab:04:15:4b:0a:5b:9f:c5:e2:46:66:
         4b:d5:17:f9:9e:3d:48:7a:96:58:75:c9:09:d2:b1:89:b5:39:
         0e:2f:c1:69:82:c3:0b:2b:e1:44:77:03:6d:6c:2f:53:e2:fb:
         74:73:bc:fb:53:dd:09:19:e5:ba:2d:c4:0d:80:a7:9c:06:39:
         fe:0c:56:cb:51:3a:fa:6e:ff:22:a1:aa:a4:93:06:81:51:20:
         5c:ca:e8:91:6a:f4:30:2f:8d:94:60:94:b8:d3:06:5f:dc:f5:
         b9:fb:fb:ad:20:bc:4a:d3:63:2d:83:0c:cb:b4:97:8f:7c:a3:
         5b:38:e5:ab:0a:dc:53:af:c7:64:c5:80:a8:ce:a2:95:7f:50:
         93:a1:d6:40:dd:71:4a:50:e9:90:b0:7b:1d:51:55:f0:f8:46:
         45:4c:2d:2e:e3:9f:b6:20:2b:ea:ad:95:4f:82:2d:3a:69:ea:
         81:0b:b4:8d:eb:b8:b7:93:20:03:c3:89:e2:19:92:b7:e4:74:
         60:25:d0:e8:a6:4e:f7:cb:09:39:f7:c2:cb:07:dd:61:9a:19:
         37:ab:88:b7:4f:fb:4b:9d:f3:22:8d:b2:7b:36:2b:55:b6:35:
         79:c6:00:f1:9d:38:81:9b:47:ab:f7:d7:43:5b:0c:2f:3a:a4:
         bf:07:dd:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYs4SSIWH/CNY7aJbdcLYEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYWMwZGEzNTEwMDY2ODA2MGQzMGYxNzNkNjEwMmUxODJk
MWI5ZWEwHhcNMjUwNDEzMDIwMTE0WhcNMjUwNDE0MDIwMTE0WjAzMTEwLwYDVQQD
Eyg4OTE3OTIwNmY3MWU0MDI0YmI0NTkwNWRlZDI3YTk0ODI1ODhkOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wUcOist2FhgPMdiqqnzVi/F/JOb
UdUSpQxR4J7WSE28lffkiDK11Zt54yxcpt4STuoPMLufXyQCra5KLIHme+G5VZ19
1TR/+vn5vdTmXvLNPjDONbsY7T1Ld47TJWnWxCl1SMoccPUBVUl8Y1t8nsvP7vjM
Wq/EniHrg7WEqhsoJoU+7OoGxWb+RB6u1QTjIOIypzEIfw+e5+G7G4RPT149Igu8
TX3gxTUbrLfBKxOKFHJq6HvEmBQ5lHYb3gQi34DR8n3Pf+4Gl/PvNWCkYepXhDsO
7a195udy2rV/71N+v1gm0eDiUiQQVDPtaaN8TmDpJix9XlyujUf6CAQKowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkXkgb3HkAku0WQXe0nqUgliNljMB8GA1UdIwQY
MBaAFJqsDaNRAGaAYNMPFz1hAuGC0bnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUt
NTFiMTA3ZGM5ZjM5LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUtNTFiMTA3ZGM5ZjM5
LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5RpP0Ob
XqsEFUsKW5/F4kZmS9UX+Z49SHqWWHXJCdKxibU5Di/BaYLDCyvhRHcDbWwvU+L7
dHO8+1PdCRnlui3EDYCnnAY5/gxWy1E6+m7/IqGqpJMGgVEgXMrokWr0MC+NlGCU
uNMGX9z1ufv7rSC8StNjLYMMy7SXj3yjWzjlqwrcU6/HZMWAqM6ilX9Qk6HWQN1x
SlDpkLB7HVFV8PhGRUwtLuOftiAr6q2VT4ItOmnqgQu0jeu4t5MgA8OJ4hmSt+R0
YCXQ6KZO98sJOffCywfdYZoZN6uIt0/7S53zIo2yezYrVbY1ecYA8Z04gZtHq/fX
Q1sMLzqkvwfdYg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:15:49 2025 by rpki-client