Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          FfQK02LyiRE3T3kP+XWz13/Y9WzFEci7gCOCDXrKkxs=
Subject key identifier:   5F:EA:E6:F9:B3:5C:AD:77:AA:AD:4D:15:F8:CD:69:5F:C5:65:72:49
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       0197466705EF83A24005D7973E6991607214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          0176
Signing time:             Fri 06 Jun 2025 18:00:46 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:46 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:46 +0000
Files and hashes:         1: 9GDBOU9_J7es0wo35klUOn0T51U.roa (hash: cMQbqhsLcUBPEgQ9vc2CK4bGp5osIlpssNdk9BGiNMw=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: u/dyx22/TdJj2m4s8TWF4eqcPKKeOlCNVk8P0xDlAPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:05:ef:83:a2:40:05:d7:97:3e:69:91:60:72:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Jun  6 18:00:46 2025 GMT
            Not After : Jun  7 18:00:46 2025 GMT
        Subject: CN=5feae6f9b35cad77aaad4d15f8cd695fc5657249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:72:e8:35:55:af:d8:39:d8:49:b5:e1:5c:
                    d3:2f:1c:f0:34:f1:5b:aa:d4:2e:e0:13:65:70:48:
                    fb:c4:98:40:22:3c:b0:bd:88:18:3c:60:9a:a7:50:
                    a7:ff:19:1e:a6:dc:67:da:83:65:3d:07:08:2a:0b:
                    e3:81:58:e0:07:9d:c5:5e:cb:0b:21:47:3e:c0:03:
                    6a:a3:80:b9:8f:0f:45:d3:7c:b2:f7:9e:17:e6:67:
                    2d:21:bc:cc:7c:03:5f:f6:03:49:d7:2a:2a:24:65:
                    7c:07:d7:bf:e0:47:97:0a:52:bf:51:11:cf:2b:e1:
                    f3:87:e7:74:c0:a1:b9:14:96:a7:2b:45:29:96:54:
                    0d:73:a6:6f:e1:24:d8:7c:1f:39:80:71:44:85:da:
                    6f:54:1e:a8:9b:d7:63:e5:6f:e8:f7:f1:2f:ad:4b:
                    89:fd:6d:f4:2d:65:46:c1:28:2b:ef:de:69:2f:7f:
                    e5:6b:29:f8:1f:1e:4b:33:42:1c:78:2f:21:80:a9:
                    88:66:94:4f:6d:32:1b:ec:57:d5:c0:b6:9f:ee:fe:
                    e6:c3:36:16:8e:11:88:c1:c2:65:13:6e:d8:96:83:
                    2a:64:39:45:7c:23:7a:ff:8e:54:b4:d4:0a:a1:18:
                    d4:0c:5a:fc:7e:3a:9f:d2:53:a2:f1:68:b8:7f:ed:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EA:E6:F9:B3:5C:AD:77:AA:AD:4D:15:F8:CD:69:5F:C5:65:72:49
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:70:49:0c:fe:aa:09:65:c6:a5:22:a5:43:ca:d3:f9:13:0e:
         39:6c:b0:5b:ed:90:c0:e6:81:91:d9:f1:d6:0d:73:d0:dd:87:
         94:14:14:74:b7:4d:7b:71:c5:a5:2a:a0:f5:78:c1:13:0d:60:
         64:80:7d:08:00:f8:0d:77:41:7e:bf:c7:60:5b:73:b2:3a:5d:
         6c:1d:28:95:b6:19:c2:90:93:26:42:10:ac:25:2c:59:37:25:
         ac:29:87:06:1c:4b:38:35:00:14:ba:b3:f7:a4:f5:05:57:e2:
         0f:33:39:e3:bd:7c:61:cd:68:b0:23:de:8e:50:38:d8:ad:20:
         6b:9b:8b:ef:a4:21:79:90:1f:11:79:c7:9f:13:2c:47:db:dd:
         25:5a:63:a8:30:a8:88:d7:32:e9:a7:99:68:80:5a:c7:0c:41:
         89:0d:8f:8c:87:ae:28:48:e4:1e:21:1b:2f:94:05:39:69:ff:
         b3:37:7b:91:2e:7b:7d:b7:48:59:c1:ed:89:1e:93:3c:e5:b2:
         25:13:b1:f9:9f:11:bc:00:13:45:52:ae:1b:1b:f2:09:4b:34:
         e2:53:5a:fb:64:cd:ad:94:c2:c1:7c:e0:49:6f:73:69:43:a7:
         1d:00:fb:b1:92:fd:2e:3b:bf:13:74:95:c0:6f:54:c1:e4:43:
         22:fb:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:48 2025 by rpki-client