Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          j7GE12dyneC61sI2gY9baIJfvNp3U4RWp7qpozJ8gPM=
Subject key identifier:   FE:18:29:3C:90:7F:47:F3:04:19:16:38:6B:E9:9E:1F:3C:41:57:51
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       0197470B8E65E8DB27B32175B56F2EFC930C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 21:00:28 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:28 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:28 +0000
Files and hashes:         1: LQ0UyMo_r23ofQXV0yOGIa-qTpo.roa (hash: X9yChjYALTQXRzmOEi06/C9TIxnvZMLcDXd49hI5SlU=)
                          2: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: X/qC18HXQ33FQNSPoi7bzA/2WQ+4u6vjX/H+ijuxU/c=)
                          3: V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa (hash: zskZj/n1B6PJEz/jXex9+d4fpdYJ2j+Fk5JUolMcUls=)
                          4: jGS8snyePsO074NpCXFdKhJggqU.roa (hash: 1J9tKlx/RXf3qd/GUWmpIunUTtsz/Ug0Nekl3umQnis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:8e:65:e8:db:27:b3:21:75:b5:6f:2e:fc:93:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Jun  6 21:00:28 2025 GMT
            Not After : Jun  7 21:00:28 2025 GMT
        Subject: CN=fe18293c907f47f3041916386be99e1f3c415751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:45:21:8a:9e:97:e9:d8:b3:3f:35:cd:e3:
                    f6:35:90:70:d7:91:73:27:7a:b4:ce:7e:3a:f3:b5:
                    99:28:7e:3d:c7:02:a3:99:b4:e4:e0:e8:98:19:67:
                    57:15:e0:c4:db:b3:91:1a:0f:14:8c:f6:f7:94:d0:
                    d7:30:79:69:38:fc:37:f6:c1:14:20:27:57:97:d0:
                    03:7e:ef:11:8c:e8:43:ca:68:30:9d:03:d5:1c:15:
                    2c:39:e7:3c:ed:cc:03:01:d6:b3:43:55:83:9a:41:
                    23:29:f0:cf:61:19:b0:5a:5a:96:e2:0d:a4:28:12:
                    04:0e:71:73:12:06:b3:c3:82:1d:53:a6:ee:f3:af:
                    09:6e:7b:b8:49:cb:ef:8f:17:7a:57:76:18:ac:89:
                    f6:d0:8c:ca:6e:fc:9a:f5:3f:4d:ee:20:da:19:69:
                    f1:8b:10:c8:0e:23:9b:ee:c2:0f:45:24:08:56:6e:
                    95:b5:53:46:12:18:7e:c7:36:e7:f9:fb:3a:36:21:
                    92:d3:4c:5d:86:71:e6:fe:71:32:80:e4:11:2d:b7:
                    85:c1:4b:4f:a0:94:ad:72:d9:cf:bc:c2:80:a2:fd:
                    c4:ba:eb:cd:c4:2b:27:8f:ca:86:56:aa:8e:52:b3:
                    0f:b4:ec:82:16:71:95:bb:ca:5b:52:d7:a7:ca:28:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:18:29:3C:90:7F:47:F3:04:19:16:38:6B:E9:9E:1F:3C:41:57:51
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:38:a1:88:ee:02:5e:2f:f9:c4:2a:e6:56:1d:9c:02:9e:7e:
         fb:02:28:ee:f8:22:3d:4b:9c:00:de:67:0b:1d:e6:6f:11:57:
         7e:10:46:b1:93:15:ff:5c:bd:0b:75:e0:15:6b:ef:56:49:e0:
         6c:f8:cb:fe:10:a4:bb:32:b5:23:7c:ea:f5:7b:8a:86:8b:96:
         b1:7d:22:a9:24:ee:1e:e6:cb:bc:fd:cd:7f:2b:8f:9c:9a:dd:
         05:ea:d0:98:4f:db:78:9a:22:91:d5:19:2d:b2:e5:6b:91:4d:
         45:c8:9c:88:86:28:79:92:ba:4f:b6:f3:a6:9f:8d:7c:2f:92:
         43:b8:4f:0f:1c:5e:01:af:f0:eb:83:d0:76:44:30:02:a9:c2:
         f2:8d:2f:d4:9f:3f:07:fb:b7:76:1e:fd:81:0a:38:ab:90:03:
         c7:0e:e5:72:b5:78:5c:40:88:5a:f5:38:1a:5e:43:10:37:ec:
         94:d3:17:3b:b4:e9:b5:eb:f8:0f:8e:9e:6a:6d:2f:cf:7e:49:
         47:5d:23:5e:82:f4:0b:49:93:57:93:f2:9d:15:cf:27:d2:cf:
         20:b5:8a:de:14:65:97:5b:b9:00:14:e0:3e:0e:9f:6c:ff:4b:
         d1:a0:dc:7b:a8:44:a7:4c:9f:92:9d:ae:d5:05:8c:f6:5f:3c:
         05:91:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:46 2025 by rpki-client