Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File:                     Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier:          gP/ir5SJrmCj4C/aU1bI4pUMQJz6lU4FAI9dV3tzeJY=
Subject key identifier:   03:DA:5B:AC:D3:9A:54:4E:A2:CA:C5:C3:D0:43:1D:11:D5:6C:B0:68
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer:       /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial:       01960D8D2ED7025B1FABB5D3C0181587F095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number:          03DC
Signing time:             Mon 07 Apr 2025 00:01:18 +0000
Manifest this update:     Mon 07 Apr 2025 00:01:18 +0000
Manifest next update:     Tue 08 Apr 2025 00:01:18 +0000
Files and hashes:         1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
                          2: OGowf2WEKM-skig3VJkvUQd-0gk.roa (hash: l4GHRqUF3zigOregk/7osWSfttuJS7LG0PoEdo83VPY=)
                          3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: O4Qcc1YanyWnJKrXPa1Wp47ctj3ByCAV9LVWWnxS6To=)
                          4: eZIEFgBJU4XMsDODJF_Qh5daqig.roa (hash: QB6Ap2HopDkfiGK/ll+DE26kM8PVZ0ppQSxKwCrTbr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0d:8d:2e:d7:02:5b:1f:ab:b5:d3:c0:18:15:87:f0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
        Validity
            Not Before: Apr  7 00:01:18 2025 GMT
            Not After : Apr  8 00:01:18 2025 GMT
        Subject: CN=03da5bacd39a544ea2cac5c3d0431d11d56cb068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:69:d0:67:db:8e:5a:e5:27:e2:ef:fe:a8:
                    5d:57:06:86:6b:b7:76:0d:1e:14:7b:d3:aa:43:d2:
                    46:42:ba:a0:1e:44:54:4a:55:d6:9b:2c:4d:79:ca:
                    88:64:a4:de:b0:98:1d:b8:26:47:fb:13:3b:48:73:
                    8c:08:29:2c:e8:f3:59:a4:dd:9b:68:04:37:cb:33:
                    c6:de:e2:7d:10:5f:5c:a6:84:c6:7e:1d:85:3e:f0:
                    6b:ba:94:7f:3e:d0:be:62:02:9d:2f:95:74:bd:1f:
                    f2:8f:26:c0:36:51:b1:09:65:c1:b0:fc:5c:83:19:
                    f6:5b:92:d7:f3:85:ae:1c:d1:95:87:7c:1b:d0:e3:
                    f6:79:59:73:66:8b:f6:a5:4f:ed:9d:ee:aa:9f:03:
                    98:3c:66:b7:f7:ee:4e:ea:f5:62:52:71:eb:8a:12:
                    42:ff:e4:8a:2a:ee:91:b5:64:82:8f:87:91:7c:e1:
                    39:4e:a6:29:e9:60:b0:e3:69:a3:63:ba:00:ef:95:
                    35:71:2d:bd:c6:21:64:5b:63:b7:b7:31:99:8f:4f:
                    6c:df:bf:68:21:87:b9:d0:2c:1e:93:45:21:9b:4a:
                    40:39:5d:ed:6c:04:1d:18:71:d8:eb:54:b9:11:3d:
                    dc:f1:0f:48:4d:17:d0:7c:2f:16:76:f5:3f:c7:cb:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DA:5B:AC:D3:9A:54:4E:A2:CA:C5:C3:D0:43:1D:11:D5:6C:B0:68
            X509v3 Authority Key Identifier:
                keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:96:a3:44:5a:74:76:a8:ec:9b:79:dc:4c:84:13:2d:79:2f:
         6e:5d:eb:a0:28:75:f9:a6:c8:b0:2e:8a:68:b7:3a:8b:92:6e:
         d9:83:d3:ae:02:30:1e:29:80:f1:94:e1:3a:ae:e3:63:01:14:
         6a:2c:96:86:8e:66:0f:24:f9:a1:83:a2:b4:4c:6c:15:c6:4c:
         58:67:5f:57:b9:65:2b:c4:a8:e5:9b:36:fb:c9:0a:86:b1:7a:
         a7:e2:d9:8a:c6:f8:1d:3d:1e:d4:3c:56:d8:c8:4c:a7:92:b9:
         0a:11:0b:dc:4f:14:35:ff:9e:1a:7e:5e:43:e5:f2:c0:bf:71:
         63:11:cc:38:b5:9f:87:71:6b:d6:45:a6:2a:5e:e0:62:39:5b:
         49:80:1b:eb:88:bd:ec:5e:47:c9:18:18:41:5f:87:97:df:d9:
         82:15:08:e0:d8:73:9e:9e:e1:10:2f:97:fb:4b:95:11:e3:d3:
         a7:83:4d:05:ff:8b:a9:c2:71:c4:84:2d:0d:1d:09:66:7c:09:
         18:94:5a:66:d8:33:9e:69:13:5c:05:38:ca:4d:24:8e:a6:da:
         ff:e6:00:a3:bd:0f:e3:69:89:67:f7:92:b2:56:9a:bd:c1:06:
         55:ce:d7:90:46:bb:ff:b6:3b:fb:da:9f:e4:dc:f5:a7:90:02:
         c7:58:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:43:00 2025 by rpki-client