Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File:                     qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier:          wtDqqcugdpPzRQ2hJfGX9b3017rkAUL5nK5YD3+HaZA=
Subject key identifier:   5F:40:11:9B:3F:FC:26:96:ED:0D:A5:6B:AA:3B:75:4A:F0:D6:CE:7D
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer:       /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial:       01974AE88FAE77CE0412002E190A6DB51144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number:          0446
Signing time:             Sat 07 Jun 2025 15:00:44 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:44 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:44 +0000
Files and hashes:         1: 49r3EiPqYIwA3FVnQ3pruyaEeaY.roa (hash: S4fah+Hi++9D/Vhg9/JWPzVOXskqt4CfJ/0z6MaI0ok=)
                          2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: 4IJaZYlg2c3XhLyZlRwfZGyP0yx07fIG19ZkWV2F7oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:8f:ae:77:ce:04:12:00:2e:19:0a:6d:b5:11:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
        Validity
            Not Before: Jun  7 15:00:44 2025 GMT
            Not After : Jun  8 15:00:44 2025 GMT
        Subject: CN=5f40119b3ffc2696ed0da56baa3b754af0d6ce7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:c8:b5:14:8c:70:15:4e:d1:10:d9:e2:ff:
                    39:f3:b9:74:ad:3b:77:60:80:8c:c1:d5:02:d2:ea:
                    6e:15:b3:f5:7c:7e:f1:76:d2:6a:5c:a6:f3:9d:9b:
                    8b:ac:44:a9:01:56:75:29:26:10:e9:63:4c:5c:65:
                    9a:34:11:97:dd:d7:33:d6:dc:d6:1a:23:ec:7d:46:
                    30:d6:7e:49:e8:38:67:a7:75:e6:d0:94:18:68:77:
                    ad:7a:cf:3e:dc:21:13:22:9d:bf:ba:41:6c:ec:92:
                    b4:d1:c6:42:76:8d:47:a8:7b:0d:7e:59:ee:23:d0:
                    42:ba:1c:85:89:48:bf:dc:56:22:7b:9c:be:de:22:
                    da:13:d5:86:28:e2:9f:be:e5:30:c7:a3:09:00:cf:
                    8d:04:b8:a7:8e:65:ec:9c:55:59:f0:d5:d5:30:cf:
                    13:a3:9e:0b:61:59:1a:7f:91:26:91:f6:ec:68:31:
                    39:b9:a2:4a:b5:57:e3:95:a4:f4:af:5c:bd:a2:44:
                    2d:cd:54:21:ad:51:81:6b:a4:06:82:45:9d:c9:24:
                    b9:a4:63:fe:5e:8a:b7:7d:21:89:9c:3e:f0:8c:d6:
                    19:97:98:73:7c:45:cf:e3:4b:26:7f:13:fb:e0:4d:
                    18:b1:ae:2c:54:49:38:67:56:f2:26:05:5b:33:71:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:40:11:9B:3F:FC:26:96:ED:0D:A5:6B:AA:3B:75:4A:F0:D6:CE:7D
            X509v3 Authority Key Identifier:
                keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:75:ae:24:db:ab:01:26:05:1a:51:27:62:2e:02:19:7a:
         14:c4:7b:a4:29:be:2b:1b:84:83:9a:63:45:6d:8a:94:4c:6d:
         85:a4:dc:09:54:87:60:b7:a8:0c:d1:71:1c:16:fc:80:34:ee:
         2a:10:5b:15:56:ee:a1:30:18:fe:f9:39:7e:d1:2f:89:d7:d5:
         e0:48:45:7b:f2:06:1f:8a:f4:0b:06:0f:8a:d3:c2:29:66:93:
         27:2d:73:f9:cd:a1:1e:e5:19:a3:66:5b:ef:43:4e:19:6e:b6:
         0a:1c:25:03:e0:a9:16:c2:1f:58:ee:89:c2:8f:92:b5:6c:67:
         05:a1:a5:95:b1:ed:f9:1e:89:16:d1:9a:da:6b:66:f6:95:95:
         7f:c8:ea:93:e1:6b:c1:71:e7:94:dc:2e:84:2e:15:f7:1c:e4:
         24:19:32:33:ac:5a:ec:e0:fa:d8:be:ac:7b:f4:d6:06:6c:60:
         10:f6:32:2c:0c:0f:6b:09:fc:b8:a1:84:a9:18:14:75:28:59:
         dc:6c:3a:d5:be:28:eb:ed:8f:06:44:f3:f1:48:05:5d:f7:ad:
         9b:94:0b:41:2b:ca:30:83:35:3f:bb:a1:e2:9e:c9:80:d2:e0:
         8b:68:7d:5b:1f:61:1e:1d:06:a1:ca:4d:a3:14:a3:44:ca:d6:
         d7:c4:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:21:32 2025 by rpki-client