Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File:                     qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier:          dnJDgnkNxNJ7tMc6F9T3IAl+T/Ys9JRJvRbmKKaLKKQ=
Subject key identifier:   A1:98:AA:B5:C3:41:98:89:91:A0:F4:BD:37:1A:9F:4A:5D:62:20:CE
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer:       /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial:       01974A439DD4B70142BAED05F4C4F524058D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number:          0750
Signing time:             Sat 07 Jun 2025 12:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:34 +0000
Files and hashes:         1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: PEbSgjjKSExglhqioLARsq1FLd4M+3rFaWJr9V23S00=)
                          2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:9d:d4:b7:01:42:ba:ed:05:f4:c4:f5:24:05:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
        Validity
            Not Before: Jun  7 12:00:34 2025 GMT
            Not After : Jun  8 12:00:34 2025 GMT
        Subject: CN=a198aab5c341988991a0f4bd371a9f4a5d6220ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:c9:34:01:7c:85:16:92:ee:53:ff:9e:92:
                    13:ce:75:db:a9:98:64:46:b2:9b:ba:50:67:5c:ea:
                    06:6b:bb:be:d0:a3:fe:3f:3b:03:97:cc:74:b5:45:
                    7e:a9:d8:5e:c0:6d:33:61:f6:f3:4c:90:e5:7f:dd:
                    90:29:09:78:43:eb:97:98:c7:59:bc:b6:61:0e:97:
                    c8:e4:e2:e3:e9:6a:4b:0f:8f:1f:44:04:45:f0:2d:
                    e4:ca:e6:cb:74:66:c1:2f:c9:f1:75:d3:96:72:04:
                    8f:85:36:ac:5b:a7:c2:d6:36:48:40:45:8d:0c:b2:
                    bb:45:5b:f8:52:9a:83:e0:a6:7b:a0:77:67:18:72:
                    60:12:bb:57:8f:a7:10:ab:7e:0a:18:87:21:fe:fe:
                    12:df:ea:86:aa:33:1d:d9:d7:c8:30:4f:93:c1:2a:
                    4d:f3:84:34:64:c5:d2:c0:4d:32:5f:79:28:20:28:
                    78:47:fd:f5:3a:6c:6f:1f:c4:df:b3:f7:f4:89:3d:
                    74:ea:4a:17:a0:5c:3b:6c:9d:35:fc:0d:c2:42:a6:
                    a3:3d:20:cc:42:ad:2e:fd:4d:d3:20:07:3e:04:19:
                    af:d9:db:e5:b6:57:f2:af:74:f2:c7:88:e2:57:e7:
                    44:ad:94:20:b8:76:e6:2d:cf:31:13:d0:54:17:68:
                    3f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:98:AA:B5:C3:41:98:89:91:A0:F4:BD:37:1A:9F:4A:5D:62:20:CE
            X509v3 Authority Key Identifier:
                keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:32:cd:d4:ad:8b:8a:9a:b6:7e:0a:e0:4e:ca:88:59:77:b9:
         dd:8f:b5:73:0e:98:8d:d5:ae:71:4f:36:c6:f2:bd:d6:f2:94:
         f2:18:34:c3:74:6b:ea:85:ca:4f:9c:7f:88:1e:20:f3:c7:b6:
         dd:42:8c:96:5e:0d:7c:eb:34:e6:fc:dc:a1:37:4b:d1:fe:80:
         68:ac:f4:db:82:15:fc:c8:cb:da:52:46:11:09:c2:b4:f5:00:
         2f:b5:36:82:9a:8a:7c:40:32:e9:8d:bc:cf:ce:46:9d:4a:b9:
         12:d4:7a:08:5e:78:d6:52:38:4a:77:4c:3c:0d:69:78:cf:7d:
         90:90:f6:f2:70:f3:a9:39:a5:5e:eb:32:59:d9:8a:97:01:4f:
         13:64:10:cb:2c:50:46:40:ea:8a:79:25:13:d8:82:b0:41:d2:
         88:2e:2d:86:9f:fe:99:4e:36:90:0e:f7:f9:b0:7c:4c:8d:69:
         9a:65:f9:57:1c:6e:20:d1:3b:cb:02:94:61:f0:ca:1d:00:cd:
         67:5f:49:7d:66:3d:81:71:83:c3:61:2e:df:45:bb:5b:12:22:
         b9:a2:4a:47:b4:f6:14:55:a0:b1:09:12:e1:52:6a:b9:20:01:
         76:4a:f7:9c:7d:a6:a6:d7:32:c3:35:3a:24:21:35:d8:cc:3f:
         a9:9a:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:04 2025 by rpki-client