Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File:                     MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier:          ic3YXd+5FYdHGbd72ZrK2xUh0RY4ElNYzpQtv92RRdU=
Subject key identifier:   16:5C:8A:6C:FC:3E:5C:35:72:5B:8B:30:21:73:C9:96:B5:3C:0D:84
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer:       /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial:       01964F6D2164E9B9B1DBFAE43981E53ECA9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number:          1500
Signing time:             Sat 19 Apr 2025 19:01:14 +0000
Manifest this update:     Sat 19 Apr 2025 19:01:14 +0000
Manifest next update:     Sun 20 Apr 2025 19:01:14 +0000
Files and hashes:         1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
                          2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: LVaY0JIfRuIZmd3RrdcX0l6vkIzL8hE3Bf20gDSgVV0=)
                          3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6d:21:64:e9:b9:b1:db:fa:e4:39:81:e5:3e:ca:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
        Validity
            Not Before: Apr 19 19:01:14 2025 GMT
            Not After : Apr 20 19:01:14 2025 GMT
        Subject: CN=165c8a6cfc3e5c35725b8b302173c996b53c0d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:f3:b4:54:2a:6e:48:20:69:fb:00:d1:d2:
                    38:dd:20:28:a0:b7:2c:2d:3d:4d:a7:5e:dc:fd:c4:
                    04:49:2f:29:97:ae:84:c9:8a:46:d6:f2:f5:d7:bf:
                    95:27:fa:8e:86:36:c1:6c:56:7e:6c:26:c3:a1:fa:
                    2d:27:a2:a9:09:6d:86:28:84:5a:3d:d5:2d:95:cc:
                    d5:c4:da:60:06:0f:36:f8:fd:82:2a:10:58:ef:86:
                    2c:d1:03:67:53:38:9a:05:27:1b:e8:b8:0e:0b:18:
                    9d:ad:1a:b2:00:e6:94:a2:69:9a:48:81:f6:3c:e7:
                    52:eb:f8:d1:e4:7f:c8:bf:65:55:59:93:cb:f1:a2:
                    24:b4:25:d6:8e:59:91:6a:bf:d7:ca:2a:61:21:f9:
                    82:52:1a:dd:f2:e0:a7:31:58:4b:83:90:2b:f3:ab:
                    07:9d:20:9b:9b:69:44:fc:0b:f6:fb:a5:d2:57:13:
                    b1:ed:34:55:3e:c8:92:00:62:3c:cb:c5:7d:c4:14:
                    ed:cf:f4:81:a8:95:db:15:b9:5c:b4:d4:4f:3d:52:
                    fb:0c:3f:cb:fb:85:9b:be:97:fb:17:f1:52:cc:e9:
                    1f:0b:af:8e:fb:66:9c:d2:13:b0:c2:ec:7c:ac:0a:
                    31:b5:72:63:f3:0d:3d:11:5e:be:cc:ca:1a:21:cb:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5C:8A:6C:FC:3E:5C:35:72:5B:8B:30:21:73:C9:96:B5:3C:0D:84
            X509v3 Authority Key Identifier:
                keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:25:a5:f7:c2:0c:dd:70:f2:35:86:22:f1:92:b1:41:77:
         9e:26:ba:d3:f3:8a:b9:44:9d:5a:b7:b6:0c:49:8c:43:97:51:
         c8:3a:55:ea:24:ca:e5:53:32:6a:d7:29:87:d1:d2:71:2a:9e:
         ab:b4:f2:01:c9:d7:26:5f:fb:c5:73:c2:44:37:8a:e5:46:30:
         d6:d6:94:df:68:02:03:79:48:ac:f0:77:99:d1:fc:0b:6e:b4:
         4e:d4:fa:a3:73:e0:be:27:46:9a:90:7d:25:5f:aa:96:7b:23:
         a0:a6:8d:12:9f:5d:b6:0d:6d:63:62:ca:e3:04:36:99:71:c6:
         7d:cf:f0:31:44:9f:8c:75:71:a8:dc:68:e4:a6:3c:30:68:29:
         e3:13:b1:ad:2c:58:eb:e8:78:ec:7f:46:d3:26:47:8a:14:8e:
         7d:db:dd:f8:ff:24:55:de:1e:02:40:5d:c9:7d:8b:91:5c:fc:
         60:44:20:a9:ba:e3:2f:ff:63:ef:3b:35:72:86:db:8f:68:d3:
         d9:b9:ae:2b:3f:56:4f:ae:d8:a1:63:ef:90:6c:f4:7f:09:c9:
         d2:03:e8:8e:bc:d3:8f:e4:2f:cd:26:df:12:30:2f:76:b2:52:
         78:3f:b8:ef:02:33:d4:4c:4f:ba:9c:92:1e:70:ad:b1:6c:5d:
         b8:c5:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:57 2025 by rpki-client