Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File:                     qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier:          hg4edlZxqu9QHGwMvkUehXjHZm5/NeXvHDQS4peUFdA=
Subject key identifier:   5D:75:16:44:F0:67:28:BC:B5:76:23:92:31:49:D2:4F:F1:DD:C6:0F
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer:       /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial:       0196150FBB3ECE3790B76E52F973C2E87FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number:          0881
Signing time:             Tue 08 Apr 2025 11:01:14 +0000
Manifest this update:     Tue 08 Apr 2025 11:01:14 +0000
Manifest next update:     Wed 09 Apr 2025 11:01:14 +0000
Files and hashes:         1: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=)
                          2: 9Ahx80pbKuxq2Y2zQQGlzVkFvSE.roa (hash: jZsow3febERZylEEbhS1HJlyFdjV2wAsubJNdWS00Js=)
                          3: SAABZkEQbTfeoiZylh7IAj2UKJY.roa (hash: tT5S9auXfqJCWExDbLcMxXWvB7zI8R71Em3Ix9poLF4=)
                          4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: eKlES+tkP9DXF5DSdqpI/vMCLbGlhvlPQPm3A/owcis=)
                          5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:15:0f:bb:3e:ce:37:90:b7:6e:52:f9:73:c2:e8:7f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
        Validity
            Not Before: Apr  8 11:01:14 2025 GMT
            Not After : Apr  9 11:01:14 2025 GMT
        Subject: CN=5d751644f06728bcb57623923149d24ff1ddc60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:6c:68:07:46:5b:7a:c2:05:aa:1a:d0:02:
                    a7:84:70:3a:87:80:0e:3c:6e:0a:3c:4b:24:3f:0e:
                    66:0c:d2:2d:04:64:8a:d7:a2:e6:1a:ee:15:c9:a4:
                    35:d7:e2:2b:82:6e:fd:b9:32:96:32:5f:3d:34:80:
                    98:57:87:ea:1e:4a:15:43:19:66:6c:23:b7:d9:68:
                    19:bb:e3:c1:77:20:61:de:61:f7:b1:67:de:fb:16:
                    3e:8c:d5:af:1a:11:bc:e6:b2:bd:62:c0:e3:21:82:
                    11:3d:45:d4:f3:56:9f:ca:a8:16:83:9e:6c:5f:9f:
                    11:65:2d:d6:64:58:1d:08:2e:75:ec:3a:b6:5a:a2:
                    29:c8:05:ce:bc:30:13:44:3e:3e:35:0f:ca:fa:e9:
                    d6:41:ca:4d:7a:88:55:0d:2b:b2:a8:d9:c7:d5:7e:
                    29:21:45:74:16:92:db:0a:b5:9f:79:f8:02:4b:ea:
                    27:ce:82:9b:fc:91:2a:0f:8d:d8:f0:dc:c9:ff:e1:
                    cb:ec:76:0f:b0:60:e2:bc:65:1d:8c:02:1c:df:ac:
                    d6:49:24:12:cc:3b:8e:53:29:1a:54:61:5f:d8:20:
                    43:a9:2b:c2:c9:ee:e6:63:ac:40:40:a4:a7:e1:a5:
                    2c:b2:72:78:d9:e0:28:9a:36:6c:3a:7c:b7:a9:03:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:75:16:44:F0:67:28:BC:B5:76:23:92:31:49:D2:4F:F1:DD:C6:0F
            X509v3 Authority Key Identifier:
                keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:99:2e:36:18:8e:f1:83:91:35:5d:b7:bd:f5:ce:9a:d3:a1:
         65:e6:85:67:21:10:2e:77:23:a4:e2:7a:ef:e5:47:c4:d2:19:
         db:34:61:b6:c3:05:14:08:50:d1:3f:b7:91:1b:5a:ad:b7:00:
         59:85:06:e5:ca:1a:83:82:17:6b:90:bd:7b:45:96:01:8d:ff:
         77:a1:9e:c6:e9:b7:18:61:26:03:e2:10:a7:46:0c:a2:87:e5:
         5d:d6:3d:07:77:72:68:24:87:a4:61:8c:57:7a:4e:a7:56:08:
         a4:59:8f:14:e3:f0:6b:95:a4:39:fd:e5:01:2f:eb:a2:c3:d1:
         04:db:f1:29:1e:42:ff:51:b4:9d:01:ba:e8:e3:64:d1:86:f4:
         6c:09:35:6a:3c:df:9b:f4:73:ce:0a:c6:f2:2e:5e:ce:99:bf:
         8f:6d:20:7e:d0:7b:87:4d:1b:1a:c2:b0:61:b0:6b:19:a8:d5:
         fd:07:eb:10:ed:26:5c:24:e6:19:7a:82:f1:cb:91:29:84:46:
         64:85:32:b0:89:11:50:92:62:3d:c2:6f:2e:ec:0a:a4:bc:7d:
         a3:60:76:6e:54:c4:f4:c2:49:17:b6:e1:83:ca:df:5f:b9:bf:
         f3:63:7b:a9:95:7b:d5:de:c4:c6:5a:ee:65:f2:18:c5:ea:01:
         07:0b:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:30:25 2025 by rpki-client