Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
File:                     Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft (raw, json)
Hash identifier:          DD7psyYo50prsnLBTvhop6FMlzKK3d2Mwxi7W1Y7SYQ=
Subject key identifier:   81:4F:BF:55:27:BB:4A:EB:DA:1C:2C:B3:B8:8E:F0:DC:B3:51:17:BD
Authority key identifier: 42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB
Certificate issuer:       /CN=429fe46633e4d3276251b3b261af727d35d4dffb
Certificate serial:       01964B8FDE6C6419E913B06F597A8F7952B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
Manifest number:          0475
Signing time:             Sat 19 Apr 2025 01:00:41 +0000
Manifest this update:     Sat 19 Apr 2025 01:00:41 +0000
Manifest next update:     Sun 20 Apr 2025 01:00:41 +0000
Files and hashes:         1: Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl (hash: XHYqbTeL+qC4CVoXjG3q4Fsu8YQMTwPDeW2p7UfnVuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:8f:de:6c:64:19:e9:13:b0:6f:59:7a:8f:79:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429fe46633e4d3276251b3b261af727d35d4dffb
        Validity
            Not Before: Apr 19 01:00:41 2025 GMT
            Not After : Apr 20 01:00:41 2025 GMT
        Subject: CN=814fbf5527bb4aebda1c2cb3b88ef0dcb35117bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:94:59:ce:7b:c5:78:f4:ce:9d:39:c6:6c:
                    93:e6:d6:37:4c:45:02:32:55:19:19:b9:1a:40:42:
                    ec:bf:9f:70:32:d6:26:af:c1:a3:f1:24:01:f9:ef:
                    15:da:04:fb:2b:55:08:fd:6d:8a:01:19:bf:1a:8f:
                    9e:8d:a4:dc:f6:d8:75:cc:22:74:11:ea:c8:70:69:
                    db:c5:f3:4c:83:f3:ea:05:59:19:26:79:09:82:0f:
                    5a:82:f4:5e:43:b6:33:25:ff:5e:77:80:45:4d:0e:
                    28:e7:63:49:4c:89:03:e4:f3:0f:2a:0e:2d:29:c0:
                    6d:8f:51:d4:71:db:f5:da:69:2d:ba:c8:d3:a9:db:
                    80:d6:19:4c:1d:7b:5f:a1:20:0f:cf:fc:df:f1:b6:
                    4f:a5:6b:27:67:4d:d5:2a:ad:39:84:5d:37:7a:71:
                    1f:8f:a9:4f:5f:24:fd:36:40:08:19:d5:b2:ff:12:
                    ce:f4:b5:6f:81:a8:fc:06:54:2d:35:8b:dc:41:cb:
                    66:e7:a4:80:35:e8:b9:ba:5d:e8:94:bd:ca:32:1a:
                    0f:1d:eb:07:68:af:8b:9c:86:6d:9a:83:80:36:9e:
                    14:cb:5d:da:03:bb:45:75:15:18:41:52:e4:bb:c9:
                    a0:a6:8f:0a:03:d2:b6:35:43:1c:f0:2a:cd:f6:09:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4F:BF:55:27:BB:4A:EB:DA:1C:2C:B3:B8:8E:F0:DC:B3:51:17:BD
            X509v3 Authority Key Identifier:
                keyid:42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:e4:1f:1b:5b:fb:f8:5b:6b:75:e8:2d:f4:5e:fd:39:13:
         6b:0b:f9:45:1d:ad:d9:9c:78:05:1c:54:c6:5f:be:8e:94:60:
         4a:20:ac:e1:96:5d:69:86:96:00:81:e9:ae:be:fd:64:4c:c3:
         22:57:91:db:f1:ce:3f:c8:d2:f6:04:32:a7:c5:0a:62:ac:a6:
         0b:01:1c:26:b7:7f:b9:cf:c2:30:be:a2:32:de:49:27:41:a9:
         c2:45:57:e1:e7:b1:ad:a1:6f:b3:23:03:56:db:4d:fc:63:3b:
         33:62:fa:9e:95:60:2e:45:42:6f:05:85:58:30:91:de:c2:de:
         ef:86:56:eb:a5:3d:e3:31:b5:7d:58:6d:17:00:56:80:68:17:
         e3:f4:51:4e:0f:a4:23:63:dc:73:5f:fc:f6:8e:ab:e1:d8:52:
         01:0e:0e:5f:b7:ab:eb:c9:64:75:98:d9:ea:be:37:77:27:1c:
         ef:b1:a3:8e:99:4b:a6:c1:47:92:ba:64:b1:74:87:61:d5:88:
         20:24:84:83:98:d4:b4:06:ee:d8:a6:ea:b1:ca:16:1d:29:39:
         0f:68:4f:64:fb:f4:8f:77:4e:5b:16:c4:b8:28:1e:11:3c:e3:
         a4:3f:45:e2:53:c3:36:dc:33:57:3b:b0:b3:44:13:40:32:0c:
         3e:a0:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:53:27 2025 by rpki-client