Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File:                     QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier:          KYERIAsqp5susyUwtSKAWpL2q5oN/UakjN786lwkSRg=
Subject key identifier:   CC:9A:B2:AE:9F:75:05:3F:77:AA:F8:4B:8A:E8:E4:34:65:0D:55:01
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer:       /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial:       0197421C5FC5B3290D1629CAEBF635D32C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number:          0726
Signing time:             Thu 05 Jun 2025 22:00:45 +0000
Manifest this update:     Thu 05 Jun 2025 22:00:45 +0000
Manifest next update:     Fri 06 Jun 2025 22:00:45 +0000
Files and hashes:         1: KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa (hash: AFMADJ+EdA++truR6oHaQkzeXGaM562uJumCeUqnVzo=)
                          2: MHGZA5Y3PVpWBImn85tARMZRftQ.roa (hash: bnJhZwRrO7KGALVUCy1om+i/htb3dvM6lJ1uAmGl2G8=)
                          3: O1UMqFY4UYla6Wia0-cx5UTbNYo.roa (hash: yk9XmbWdQVbHd1Fk+ePRsax442yqoQX1eANsND8ceoU=)
                          4: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: 17EalOLDVLEsTsGOTteQBUaPFo1izp160thD6hERKys=)
                          5: TNSMUQvHGS8vGJs7QmyW0_jz86Y.roa (hash: qI6N5+Q6nkQDs5kBZ+Upq2gzqwGu3xE2kqSgmDsGATI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:42:1c:5f:c5:b3:29:0d:16:29:ca:eb:f6:35:d3:2c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
        Validity
            Not Before: Jun  5 22:00:45 2025 GMT
            Not After : Jun  6 22:00:45 2025 GMT
        Subject: CN=cc9ab2ae9f75053f77aaf84b8ae8e434650d5501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:94:fc:1b:f8:9f:38:7e:d0:24:6f:1d:92:
                    07:a5:0f:aa:a8:8f:9d:12:88:4e:48:00:09:d5:47:
                    ef:33:a0:17:c7:08:05:ae:a6:c0:24:72:e4:12:fe:
                    a4:da:54:86:b5:ea:44:d1:c1:0d:2d:d8:b4:12:a4:
                    59:81:f4:2f:b2:7a:05:39:69:92:12:a0:83:21:96:
                    cc:4b:67:24:23:00:e3:09:0f:ff:7a:32:76:bc:0e:
                    64:3e:a1:f2:2c:4f:d2:2d:4c:1d:b9:7c:2d:bf:46:
                    bc:97:73:42:18:64:5a:7f:19:e0:d3:54:07:8f:ae:
                    c6:51:21:84:d5:04:ea:9d:8e:3c:ad:04:09:74:88:
                    c9:05:d8:b1:53:a9:bb:00:7d:a6:80:98:8f:08:40:
                    c3:29:f8:63:a4:af:9e:8e:5a:cb:6c:12:e8:ed:19:
                    80:5c:db:6a:3b:32:76:16:37:64:31:93:80:8b:be:
                    44:73:26:1e:3f:9e:19:8e:95:de:19:74:fa:c3:ed:
                    8c:f3:cd:3f:ce:55:e6:21:5d:a1:b8:42:8d:e7:55:
                    2c:ba:65:4a:a2:1c:da:f0:74:9f:33:c3:80:c4:1c:
                    5a:d4:d3:34:27:e1:73:03:3e:b6:9b:c4:5a:24:f9:
                    d0:27:fd:92:c1:fd:c6:cf:47:85:99:40:47:68:87:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9A:B2:AE:9F:75:05:3F:77:AA:F8:4B:8A:E8:E4:34:65:0D:55:01
            X509v3 Authority Key Identifier:
                keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:13:74:d8:ce:04:c3:1d:eb:2d:f7:b4:05:d0:8b:28:80:82:
         b3:44:35:0a:29:3a:62:19:18:91:30:16:7b:b5:50:d5:58:f3:
         78:53:7d:ad:9b:ec:0e:26:be:ad:8e:97:62:8d:b0:19:d6:76:
         d5:78:b2:ee:64:03:08:4e:fd:b6:ee:77:bd:f9:b4:1c:6f:22:
         2f:52:93:44:5f:b4:ae:c9:e7:06:3c:16:d7:ba:e1:cc:b9:39:
         2b:d8:57:ae:2f:93:a6:ad:e5:cb:f7:7d:be:5a:0d:dd:e4:f4:
         75:05:01:28:20:00:f5:c6:1b:47:44:d5:2e:09:9c:39:e4:a6:
         42:bb:ae:69:39:d1:45:29:11:f5:0e:ed:e6:34:0e:a6:ab:86:
         dd:da:d0:32:77:77:1e:38:52:33:61:8e:0f:dd:d5:0c:08:79:
         46:a9:22:f5:4b:90:7d:db:52:c6:8e:8c:56:3e:f5:c3:4c:4b:
         2b:49:79:0d:91:12:88:f5:82:d6:46:87:a0:fb:54:45:71:f4:
         b5:01:31:76:56:e2:4e:58:e0:14:00:04:8b:06:e9:b0:d5:61:
         f2:17:35:b7:4c:ff:c8:6d:03:2f:f7:4b:c3:09:44:7b:55:01:
         96:2d:86:b0:ab:0e:95:e8:23:21:e8:95:a6:87:14:ef:43:52:
         03:91:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:07:57 2025 by rpki-client