Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File:                     qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier:          l3y4eUIU8nFlskfY0a6CPmxJ4P/w6u2mIiijNg8kRMk=
Subject key identifier:   0B:6E:1B:97:E4:77:29:4B:FF:1C:76:4B:81:2A:B0:70:A6:C6:CC:80
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer:       /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial:       01964B90660903A02E3D765C20043083F6EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 01:01:16 +0000
Manifest this update:     Sat 19 Apr 2025 01:01:16 +0000
Manifest next update:     Sun 20 Apr 2025 01:01:16 +0000
Files and hashes:         1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
                          2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: gfQ/YPEzXPwEX7jD8RdWC4g+f73UcZ7fAeHcQcjVYjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:90:66:09:03:a0:2e:3d:76:5c:20:04:30:83:f6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
        Validity
            Not Before: Apr 19 01:01:16 2025 GMT
            Not After : Apr 20 01:01:16 2025 GMT
        Subject: CN=0b6e1b97e477294bff1c764b812ab070a6c6cc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:cb:24:3f:c5:49:ae:3d:77:e7:0a:9b:b1:
                    71:ab:70:ab:e9:56:4f:33:f1:cd:f3:d3:36:7f:f8:
                    c3:21:91:9f:88:be:a8:35:c4:42:9a:ab:ff:93:41:
                    46:17:79:ba:ea:58:04:b9:dd:32:31:8c:52:d4:3b:
                    75:64:ad:e8:54:2f:65:7d:74:c2:cf:07:a3:33:f0:
                    b1:31:0e:12:e0:12:6b:ae:62:35:cf:4e:ea:85:be:
                    6a:43:27:34:8f:64:93:a8:60:07:a3:9f:60:5f:65:
                    9c:2b:3c:8a:72:a9:02:a9:0f:5d:2e:11:05:a7:3f:
                    9a:77:20:a1:eb:9b:dc:48:cc:34:3d:ee:e3:cc:87:
                    dd:cd:e0:e5:f4:88:05:a6:3e:fb:c7:4e:3d:99:75:
                    3a:ee:e0:23:8e:57:3e:c3:e9:a9:ec:eb:2f:69:98:
                    b8:1a:c0:9e:f8:b4:97:ef:10:fb:3a:30:14:26:88:
                    d4:3c:bc:26:0b:30:ab:02:45:02:8a:36:47:b6:ad:
                    f3:16:0d:4f:80:84:17:10:aa:0f:0b:fd:45:7e:fa:
                    96:9d:4b:b9:98:77:50:8a:c3:60:85:f4:66:9d:77:
                    47:b7:35:d5:d5:d5:00:d3:1d:b2:61:34:53:d2:a0:
                    55:0a:92:69:7a:55:ff:07:35:76:bf:77:f4:94:e6:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6E:1B:97:E4:77:29:4B:FF:1C:76:4B:81:2A:B0:70:A6:C6:CC:80
            X509v3 Authority Key Identifier:
                keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:42:79:9f:ba:52:e3:fb:ac:ff:22:3d:29:f4:f0:a0:f2:a2:
         40:9c:70:54:ce:1d:5d:cd:70:e0:06:18:38:1b:46:54:6b:75:
         51:a4:f2:4f:72:c4:20:30:c8:48:df:88:9e:f9:55:8c:3f:c9:
         83:62:36:7e:e2:c2:ee:d0:a6:52:62:4c:df:3c:3a:01:57:97:
         ae:1f:c4:a2:35:77:9b:63:16:dd:0c:48:6c:94:11:a1:ea:fe:
         3d:5b:6b:c1:61:d3:a5:b0:54:7e:ea:b6:0b:cf:03:07:17:bc:
         7d:54:0d:c4:eb:74:a7:e9:50:b1:49:b8:68:0b:bf:35:73:90:
         d8:19:4c:d7:24:3a:ea:e5:c3:3b:1b:a1:11:ee:9b:4c:73:8c:
         43:37:a6:a6:b2:ac:c7:3c:03:54:a0:24:57:9d:17:05:eb:7a:
         ad:9f:77:e3:5d:66:1b:cd:37:94:c0:b8:5d:43:44:48:91:5f:
         91:00:45:b2:3b:d4:e9:ca:ee:98:5b:be:8f:e7:99:a9:07:ad:
         ea:80:c8:ea:89:5e:12:51:05:b9:23:71:20:e4:29:ff:c4:a9:
         47:78:6a:43:4e:e6:23:47:16:0c:e4:d6:e5:ed:a4:c3:0e:70:
         88:92:79:7e:c6:cb:f3:7a:03:1a:a0:22:28:7c:96:73:fd:4d:
         fc:d1:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:52 2025 by rpki-client