Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          NcJn+Ba5nDeTUe9HYA359L9fiQDJP9VYTo1YtQz7ukE=
Subject key identifier:   AA:E0:DC:46:7B:E7:41:5A:2D:B6:76:7C:CD:9A:95:9C:6E:98:0B:18
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       01958CCE971AAD4D4DEF1E14E2EE80EA48D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          1499
Signing time:             Thu 13 Mar 2025 00:01:44 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:44 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:44 +0000
Files and hashes:         1: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: aV5KcnehISeboWKqfAt7r7eM4qr6gxPTmEL84CRoq68=)
                          2: S6s1MZvjGFTRPk9vZPziFkYY6qM.roa (hash: ToU3MZhIjvRp74FUEtCCsRrFPES+LOdbmLPRk+Oahhc=)
                          3: dsWRyZzKIXE-_o05dhzwQLK-Lbk.roa (hash: VWsGICYRCZ2YCd/cztWs6r3W91Apf8NSGDgQ7RjrOcc=)
                          4: g-0mYXlZCCbY8bUpprXLVbOiC9A.roa (hash: hFmcyS+hXU9/y3wiy+mf+wC/haCuFA1o+qKC1n/PUV4=)
                          5: o1EPY-XxVbxJyaIoWSUC8RQCjcc.roa (hash: Kquty1N0A29MJH0xvyL5yuCvTt71jZz0jcczxSEKzL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:97:1a:ad:4d:4d:ef:1e:14:e2:ee:80:ea:48:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Mar 13 00:01:44 2025 GMT
            Not After : Mar 14 00:01:44 2025 GMT
        Subject: CN=aae0dc467be7415a2db6767ccd9a959c6e980b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d6:7b:8c:fc:7e:7c:90:2e:8a:e5:9e:cc:7a:
                    aa:e2:f2:7f:2b:3c:10:ff:5a:80:c5:95:0b:15:ce:
                    02:91:e7:17:78:56:82:29:3a:85:bf:04:c4:6d:d6:
                    14:6d:0b:45:ac:20:ff:c3:81:f3:24:74:9e:ee:82:
                    d8:c6:24:c4:cc:12:3e:f8:21:de:69:87:9c:e3:4b:
                    ca:e0:39:2d:65:b7:c1:e3:44:5f:5c:a5:72:4b:b5:
                    20:7c:f1:ff:16:ea:16:2c:e1:ff:e0:ec:19:fa:00:
                    90:81:b3:a2:d6:3c:2a:87:0d:56:b3:8f:ac:6b:ac:
                    e6:2e:cf:54:7f:53:ba:24:35:5d:3f:db:a1:0e:d1:
                    aa:4f:ff:3c:3c:be:06:8a:51:0c:dc:33:39:f3:2f:
                    fc:ba:14:2b:92:26:10:88:6e:97:36:f6:6e:81:6f:
                    c7:5f:d2:0e:71:b0:ec:98:dc:bd:ae:3f:1d:ac:da:
                    93:8c:1b:9c:84:a0:8c:80:d6:e4:60:d8:ad:12:8e:
                    1f:8d:50:1b:65:e7:e1:c1:da:1b:a7:ce:9b:99:91:
                    1f:6d:3f:72:bd:94:76:84:54:5c:12:fe:77:a2:45:
                    11:86:01:d3:8d:bf:ec:e7:48:e5:95:32:b0:ad:46:
                    60:28:6f:c8:bd:8d:26:94:43:55:86:93:be:c6:ba:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:DC:46:7B:E7:41:5A:2D:B6:76:7C:CD:9A:95:9C:6E:98:0B:18
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a0:98:b3:0b:df:bb:02:7a:5d:92:cf:f8:a7:77:dd:a9:68:
         40:54:8c:b6:f0:3c:05:54:d1:21:07:0e:22:20:76:6e:50:2c:
         29:aa:de:ff:d8:de:89:5e:ed:c0:65:0f:ff:d0:0b:95:cd:5d:
         27:89:9c:20:dc:7f:7a:d9:0a:c3:97:9d:7a:2d:f3:e9:d3:e7:
         20:eb:82:7d:b1:c1:9c:0c:be:88:f3:94:69:0d:50:d6:1c:d7:
         0b:54:c8:e0:3a:ff:72:28:ad:e7:94:b7:14:d0:34:15:06:47:
         4d:d7:11:e2:ce:a1:c9:6b:88:ac:31:60:20:96:f3:6a:da:37:
         f0:31:b8:06:8b:81:ff:4a:2f:ba:95:ee:3d:2a:61:2f:5d:57:
         69:bd:92:15:0e:df:28:38:a7:60:da:4a:fe:d0:d3:fd:ef:bf:
         a0:4c:c1:9e:6c:61:74:4e:9d:b8:b2:59:09:1e:75:04:39:fc:
         d7:b8:d7:1f:9e:94:b4:3d:d4:bb:f1:7f:dc:5b:04:86:05:0e:
         40:ab:68:54:6d:3c:aa:79:c9:5f:0f:50:3e:63:43:be:6d:ba:
         ac:15:48:5b:52:a3:fe:d3:e9:60:79:5c:94:6f:e4:7e:91:31:
         ff:54:bd:f4:16:66:e5:3e:9d:0b:0a:a7:7a:73:29:bb:da:9d:
         8b:3d:db:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMzpcarU1N7x4U4u6A6kjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWM1NGJlMWRhN2U3MzhlM2M5NmZmYjQxZjFlYTM5MDBh
NjdiZTgwHhcNMjUwMzEzMDAwMTQ0WhcNMjUwMzE0MDAwMTQ0WjAzMTEwLwYDVQQD
EyhhYWUwZGM0NjdiZTc0MTVhMmRiNjc2N2NjZDlhOTU5YzZlOTgwYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NZ7jPx+fJAuiuWezHqq4vJ/KzwQ
/1qAxZULFc4CkecXeFaCKTqFvwTEbdYUbQtFrCD/w4HzJHSe7oLYxiTEzBI++CHe
aYec40vK4DktZbfB40RfXKVyS7UgfPH/FuoWLOH/4OwZ+gCQgbOi1jwqhw1Ws4+s
a6zmLs9Uf1O6JDVdP9uhDtGqT/88PL4GilEM3DM58y/8uhQrkiYQiG6XNvZugW/H
X9IOcbDsmNy9rj8drNqTjBuchKCMgNbkYNitEo4fjVAbZefhwdobp86bmZEfbT9y
vZR2hFRcEv53okURhgHTjb/s50jllTKwrUZgKG/IvY0mlENVhpO+xrqO5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrg3EZ750FaLbZ2fM2alZxumAsYMB8GA1UdIwQY
MBaAFEKcVL4dp+c448lv+0Hx6jkApnvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEt
M2Q4NTg0Y2Y1M2ZlLzEvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEtM2Q4NTg0Y2Y1M2Zl
LzEvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqCYswvf
uwJ6XZLP+Kd33aloQFSMtvA8BVTRIQcOIiB2blAsKare/9jeiV7twGUP/9ALlc1d
J4mcINx/etkKw5edei3z6dPnIOuCfbHBnAy+iPOUaQ1Q1hzXC1TI4Dr/ciit55S3
FNA0FQZHTdcR4s6hyWuIrDFgIJbzato38DG4BouB/0ovupXuPSphL11Xab2SFQ7f
KDinYNpK/tDT/e+/oEzBnmxhdE6duLJZCR51BDn817jXH56UtD3Uu/F/3FsEhgUO
QKtoVG08qnnJXw9QPmNDvm26rBVIW1Kj/tPpYHlclG/kfpEx/1S99BZm5T6dCwqn
enMpu9qdiz3bSg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:06 2025 by rpki-client