Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File:                     QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier:          8P0015w/me+51HW9/zX2PBVS1rHIFgRcs/vlxhpYQ+0=
Subject key identifier:   1B:66:37:8F:D5:D4:ED:BF:52:C6:D0:EB:8C:F4:18:BE:01:CA:05:B9
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer:       /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial:       019651FFDDA935E7BCD4E2E4949A3E61CFEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number:          081C
Signing time:             Sun 20 Apr 2025 07:00:45 +0000
Manifest this update:     Sun 20 Apr 2025 07:00:45 +0000
Manifest next update:     Mon 21 Apr 2025 07:00:45 +0000
Files and hashes:         1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: rfXyO1nZa5Zs/l3MQzhZblfCuJPOOCaueDHnO30PV3k=)
                          2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:ff:dd:a9:35:e7:bc:d4:e2:e4:94:9a:3e:61:cf:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
        Validity
            Not Before: Apr 20 07:00:45 2025 GMT
            Not After : Apr 21 07:00:45 2025 GMT
        Subject: CN=1b66378fd5d4edbf52c6d0eb8cf418be01ca05b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:5c:91:48:3d:bf:f9:69:f3:43:40:eb:33:
                    7a:d8:5b:35:99:53:d5:84:4f:b2:0c:b9:88:05:eb:
                    20:a9:48:8b:eb:eb:95:d8:2b:7b:b2:e1:3f:ea:97:
                    0b:1c:33:6c:3c:dd:54:93:be:8b:41:3c:c5:89:57:
                    d7:f1:a5:8b:42:4c:c7:75:d5:0c:2b:ba:88:b6:d0:
                    75:3e:b6:28:4a:b4:0d:83:81:20:7a:70:a5:54:ec:
                    8f:6a:47:1e:1c:0f:c0:72:75:6e:be:2f:54:b3:f5:
                    b2:78:5b:71:f3:9a:55:8f:a5:59:1a:90:70:73:77:
                    4c:99:81:4a:8c:7a:02:ed:da:3f:12:00:11:9c:fc:
                    36:8d:17:db:22:fe:e8:04:87:0f:ec:ae:f3:9a:c9:
                    9c:30:2e:b1:14:6c:f5:d4:57:f9:05:a8:eb:6a:86:
                    4c:f2:41:3c:61:fa:70:27:73:c4:0a:4b:1e:49:93:
                    7b:c1:1d:77:97:1c:ba:39:1f:ff:10:5c:8f:2d:28:
                    62:e3:c7:5a:3d:03:6f:1b:3f:0f:19:47:a5:2b:25:
                    6c:d5:d2:77:b2:93:c1:9a:de:34:50:b4:fa:9a:da:
                    7a:5c:00:1d:be:80:ca:e3:e0:bc:0d:5d:93:50:c0:
                    28:b2:6a:d7:f4:12:46:cb:02:c2:61:36:75:8e:d7:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:66:37:8F:D5:D4:ED:BF:52:C6:D0:EB:8C:F4:18:BE:01:CA:05:B9
            X509v3 Authority Key Identifier:
                keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0f:94:03:6d:0c:b3:a0:fd:5e:b2:eb:54:bb:9a:89:f5:5f:
         f8:fb:3b:c4:1e:17:56:cb:ad:d3:22:7b:20:4c:f3:3d:7b:61:
         31:05:a0:a1:48:07:b6:eb:d5:cd:dd:bc:a9:58:19:4d:b9:58:
         c3:46:3e:1a:70:dd:33:38:c5:39:21:7c:53:d4:3b:ca:35:da:
         37:b8:42:7c:57:10:b1:ee:66:89:0b:e4:93:f9:9a:56:6a:a7:
         99:27:b6:d4:43:c5:b1:4c:27:6c:4f:f7:21:7b:0e:56:12:64:
         40:4f:3c:75:fe:be:de:42:87:b2:76:aa:2d:b0:9c:fd:ba:f6:
         1e:3d:3e:67:5f:c9:04:c4:9a:2c:75:ac:eb:4b:1a:93:e8:dd:
         81:03:e7:8b:61:89:37:5a:f0:62:c9:6a:c2:42:58:49:a9:db:
         64:3a:9f:b3:50:d7:cc:96:bf:e1:ce:61:70:b1:a1:e1:89:fe:
         77:7c:33:5f:04:be:b1:7e:8a:03:69:e2:32:d9:34:b4:9e:90:
         b6:b9:9c:9d:ae:0c:8a:c8:32:5e:99:1e:7f:2c:e7:6f:53:9b:
         41:13:c6:54:7a:53:e6:2e:a6:52:2e:ee:ac:7f:17:59:04:cf:
         fa:df:93:13:05:28:73:13:55:9f:17:9c:50:d2:6b:46:0b:52:
         ea:20:7f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:20 2025 by rpki-client