Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
File:                     Q4T2-m3sztVXioWlHgvWVwHqNOw.mft (raw, json)
Hash identifier:          +MruiriNwkF68eY1S8it2CTuJB6GFvn5STpFFnCyHk4=
Subject key identifier:   65:2A:DE:6F:F3:BF:3C:04:34:DE:47:D0:CF:82:41:C7:A9:33:95:82
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Certificate issuer:       /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial:       01961622164909F5E1AC3500A26452CE3973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
Manifest number:          14F0
Signing time:             Tue 08 Apr 2025 16:00:54 +0000
Manifest this update:     Tue 08 Apr 2025 16:00:54 +0000
Manifest next update:     Wed 09 Apr 2025 16:00:54 +0000
Files and hashes:         1: 29wssqErvKQtR_9f6uK-OYzddNM.roa (hash: Bh05SYc8VBmf4zaIv99zE5UZHb6fBJqOGBDvempbpVM=)
                          2: 6ydkCTIO-cNnh8Hv2Ok88IlcHaI.roa (hash: wLv2JoucZBkU56L2p9pXvAWsrjbYGSWjGCERyhVvXsw=)
                          3: AN-DGU807Zi1GLozE0Ye6tyK7Ic.roa (hash: +/Pg+LZh0oTnlaPXWDZsXPiFa0OXAsSR/g5vgnMvqME=)
                          4: Q4T2-m3sztVXioWlHgvWVwHqNOw.crl (hash: Hrckoh/+KtRYGAxitKdAGHdoY1raRSRZF564d9YM/o4=)
                          5: akr2zEciBp0bAf10VTnQBF8A5hE.roa (hash: SJfaT9rqeoFgX5bxM6d8wxAKVaMpQ7a7c0aJKadx3yo=)
                          6: maXcZQ7N2y2_afrzV1oMNjT4O7g.roa (hash: D+pc8oR4WM9Y/chv55U8MqOsuEcIXejdvRWZ+f3Pszg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 13:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:16:22:16:49:09:f5:e1:ac:35:00:a2:64:52:ce:39:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
        Validity
            Not Before: Apr  8 16:00:54 2025 GMT
            Not After : Apr  9 16:00:54 2025 GMT
        Subject: CN=652ade6ff3bf3c0434de47d0cf8241c7a9339582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:60:d3:65:df:9e:4f:9d:f1:1f:1f:47:bd:
                    8d:af:bf:10:60:03:cf:a9:3f:0f:86:ad:3b:83:e2:
                    d1:8a:2e:cd:13:4f:18:56:9e:54:68:b3:c1:df:39:
                    3d:8f:19:65:28:9a:e0:2b:8e:f3:9f:bf:54:cf:3f:
                    b7:9c:32:73:dc:79:b0:44:d1:db:1b:46:15:fb:9c:
                    99:e2:ce:49:6b:2f:90:9d:bb:a2:48:a0:1a:4b:e2:
                    80:49:b2:5f:ad:2d:62:cd:a1:f5:20:01:8e:6e:91:
                    c7:f0:c0:70:2f:1e:eb:67:e8:b7:b8:ec:aa:02:bc:
                    2c:76:ad:96:e2:5e:51:ea:f2:b9:17:dc:d3:59:b8:
                    a9:27:da:dc:a4:11:4d:d6:31:29:20:30:10:3a:d0:
                    80:5c:3e:3a:c4:cf:3f:9f:cc:cb:c7:0a:2b:a1:29:
                    90:72:9f:59:8f:d4:25:39:e0:9e:bd:1c:47:92:23:
                    90:f8:ef:0d:aa:7f:82:b6:09:f7:c2:28:52:a2:ba:
                    b8:52:2e:2f:39:d9:87:3c:69:aa:10:fe:3c:61:3e:
                    ca:9e:8d:1f:3d:7d:9f:d5:84:94:74:83:31:66:5c:
                    be:ad:fb:ed:1a:b6:43:af:6e:84:4d:dc:f1:74:b0:
                    9c:3b:85:4b:69:cd:72:dc:4b:04:08:de:18:32:ec:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2A:DE:6F:F3:BF:3C:04:34:DE:47:D0:CF:82:41:C7:A9:33:95:82
            X509v3 Authority Key Identifier:
                keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:08:73:6a:2b:bc:93:f7:e3:7d:32:51:90:3a:4f:4b:2d:
         d6:74:c8:cf:ff:b5:2b:43:25:ad:04:b2:14:70:bc:27:51:37:
         68:51:f3:fb:da:74:be:25:78:68:87:d4:da:3b:dd:b1:bc:92:
         a2:69:24:17:ce:08:86:7e:21:86:f7:80:07:90:b9:d2:65:07:
         51:2b:99:52:26:5e:87:45:f4:a8:82:90:aa:a4:01:38:f8:ef:
         1d:f2:b9:1a:fa:46:e6:e2:b9:3a:25:da:d0:cb:eb:1e:a4:57:
         98:89:7b:ee:2a:aa:ce:9f:75:99:47:bf:f7:8b:63:69:3c:c9:
         17:ea:d5:ac:29:a2:43:43:5a:22:94:ed:8d:c6:09:39:ce:b6:
         59:2a:09:e8:9e:7c:75:03:63:6b:e4:1d:fa:8a:29:14:e9:6b:
         81:ed:f9:22:83:87:84:d4:c7:21:10:23:e5:f5:0c:0b:76:2c:
         68:2f:e1:b8:72:dc:cf:14:8b:ec:c0:53:fc:29:f5:1e:4e:77:
         ef:a3:48:37:ff:b3:4b:72:3d:85:b1:08:02:65:fe:54:ac:66:
         b3:e9:de:6a:27:7f:b0:78:41:13:4c:51:8a:4d:b6:2d:49:c6:
         ee:eb:d2:0c:3f:97:4a:13:30:39:0f:eb:48:2b:40:8d:52:c3:
         15:31:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:06 2025 by rpki-client