Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
File:                     QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json)
Hash identifier:          PtAo69HrtvXV4cmLDqo7/ZfbWQFBb6Y61q43YN53/l0=
Subject key identifier:   7D:41:D2:9B:16:1C:C7:28:A0:0E:F0:89:37:DA:BA:9D:B9:3E:58:58
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Certificate issuer:       /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial:       019640673AF871F77C3197F3781DC578C3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
Manifest number:          075C
Signing time:             Wed 16 Apr 2025 21:00:29 +0000
Manifest this update:     Wed 16 Apr 2025 21:00:29 +0000
Manifest next update:     Thu 17 Apr 2025 21:00:29 +0000
Files and hashes:         1: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: EClcl0Cerld7rYbMOnZnjs09IwKvcreBVJsaUn09noQ=)
                          2: bysUciiIqYU9vJ8UfK9pbwZkqG0.roa (hash: JZVYwqtyAp0nMHO1FDIE6qYD96KGmAzDi7aqiaMlMrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:3a:f8:71:f7:7c:31:97:f3:78:1d:c5:78:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
        Validity
            Not Before: Apr 16 21:00:29 2025 GMT
            Not After : Apr 17 21:00:29 2025 GMT
        Subject: CN=7d41d29b161cc728a00ef08937daba9db93e5858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:58:85:63:c6:20:85:6f:66:e1:49:27:91:97:
                    67:85:e8:6a:8a:05:f6:b4:b8:4c:ca:bf:be:81:b6:
                    cc:ab:2c:57:9b:12:4f:0e:1e:82:f4:aa:67:06:fd:
                    06:ed:0f:23:ec:25:88:24:17:2e:6d:2b:03:15:ae:
                    a9:16:91:a9:fd:f1:4a:9e:77:60:50:21:0a:18:8b:
                    b0:4e:b7:65:7e:d6:a2:df:cb:0d:0a:f0:62:d0:9c:
                    91:3e:70:7e:3c:ed:b8:99:8d:ab:ce:03:6c:f8:6e:
                    36:b2:63:7a:ef:99:d3:c7:d3:68:31:46:51:1f:c8:
                    c0:67:64:c1:21:46:03:8f:81:95:0a:77:73:81:66:
                    24:f9:f7:af:2b:03:c9:be:a5:46:00:7c:82:2b:ee:
                    92:8d:fc:55:45:8d:0c:21:82:7d:be:e0:c8:6c:eb:
                    84:d7:a4:77:3d:14:45:f5:ad:04:08:73:fc:5f:7c:
                    5b:c5:ef:9d:ec:08:3b:99:f3:52:80:66:c6:6b:06:
                    09:ce:8c:bd:5a:fa:90:30:93:6f:37:2c:6e:83:9a:
                    b6:0c:92:75:22:2a:52:af:96:d3:e6:a0:32:46:2c:
                    56:89:ad:59:e1:9d:e5:08:58:91:ca:74:4e:8a:ca:
                    dc:03:45:ad:07:bd:f4:1b:e3:92:21:f4:54:09:82:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:D2:9B:16:1C:C7:28:A0:0E:F0:89:37:DA:BA:9D:B9:3E:58:58
            X509v3 Authority Key Identifier:
                keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:0e:83:68:37:60:a0:93:e2:8d:e2:38:16:df:f1:0b:e6:
         5a:17:97:20:8c:fb:5a:a2:6c:93:02:45:1e:30:86:22:c5:39:
         96:0a:2d:89:e7:42:49:e8:f5:50:af:ff:b0:66:64:89:e7:2b:
         50:c1:5c:f9:83:c0:40:95:9b:14:84:d7:32:16:47:b9:90:6a:
         9b:54:e5:f0:fd:e3:c1:86:cb:ef:59:12:d3:75:99:13:ba:e7:
         ce:90:1e:83:38:ce:a8:91:9b:06:bc:1a:71:63:c3:8f:d9:d3:
         8f:5a:21:b1:c6:a2:8d:27:df:33:44:04:a0:07:4c:0e:53:25:
         1e:5c:aa:63:6b:12:a5:21:b7:10:d3:88:36:b8:02:e7:cf:ed:
         3a:17:ce:a8:7e:1b:a8:29:da:6b:dc:5c:83:1c:4b:b5:4f:73:
         da:39:a4:1e:3c:13:50:7f:c2:54:d9:86:55:32:08:49:8d:e9:
         c3:b0:17:8c:e4:aa:0a:02:8f:36:46:8f:f3:5e:3d:ce:09:c8:
         bb:48:4b:f7:43:50:81:d8:27:b5:e4:d8:46:d8:15:03:00:c9:
         42:d9:74:7d:23:68:1d:19:ca:30:85:09:b6:b0:ae:f7:ee:58:
         fc:82:5e:63:14:5d:ae:04:41:0f:0e:c6:fd:45:82:de:4e:90:
         91:9f:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:09 2025 by rpki-client