Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File:                     QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier:          zksrYCbuEoBX9RnhPAGbDuZk/Q1QLU+0OoFChTotVMM=
Subject key identifier:   6A:E5:5F:DA:28:6A:6E:E4:F3:E9:8E:69:1A:6A:CD:81:01:3A:FE:73
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer:       /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial:       01963207AE149ED47E47D037C37794A35AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number:          02B6
Signing time:             Mon 14 Apr 2025 02:01:26 +0000
Manifest this update:     Mon 14 Apr 2025 02:01:26 +0000
Manifest next update:     Tue 15 Apr 2025 02:01:26 +0000
Files and hashes:         1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
                          2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: RXdeWP4NCitkZm5TxHeIaFb+Nt1Cf3qb8Kfj/5/Xbs0=)
                          3: nz1XOf28Ogcs8fiWug2xbFcdTSI.roa (hash: ztlz9ATge0wUo5eGVXQllv/BlyjO+lbBdkDSEy3I//E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:32:07:ae:14:9e:d4:7e:47:d0:37:c3:77:94:a3:5a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
        Validity
            Not Before: Apr 14 02:01:26 2025 GMT
            Not After : Apr 15 02:01:26 2025 GMT
        Subject: CN=6ae55fda286a6ee4f3e98e691a6acd81013afe73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:3d:98:a2:11:4e:0a:ad:b9:da:c9:0f:0f:
                    d4:ea:0d:21:8e:69:7d:e0:68:ec:61:31:d1:58:35:
                    c4:25:b0:91:b4:99:4a:95:54:86:39:68:3d:56:6a:
                    75:71:c8:dc:0f:cf:6c:7e:8b:7a:0f:cf:20:88:9e:
                    d8:59:a6:d2:38:90:5c:e2:5e:85:a8:74:8b:63:de:
                    d9:eb:22:e3:7d:3c:14:92:8a:b4:4a:d0:57:84:81:
                    30:fc:c9:e5:2a:db:e6:eb:96:b2:0b:58:e7:03:f9:
                    eb:1f:ff:f2:76:2d:97:6a:5f:8f:1a:69:b1:63:b4:
                    f3:d2:5d:1a:53:d7:ba:f6:62:0a:f4:06:d3:63:b3:
                    d2:95:11:78:74:af:e0:61:da:71:55:46:f0:b6:dc:
                    69:b0:b0:48:ad:39:1a:77:91:07:7f:f3:70:31:8e:
                    97:f8:c2:cc:0f:8a:12:5c:b3:c0:27:b7:11:d1:a2:
                    7e:41:d9:2e:cf:6f:39:2a:02:cd:1b:f8:1b:07:96:
                    78:79:13:25:ea:34:f2:67:af:51:c0:4e:11:14:1f:
                    2a:ba:9a:60:42:e5:22:2a:9b:51:f0:a4:f0:f2:0a:
                    59:dc:4d:d3:45:42:91:4b:f0:f1:ad:08:7e:cc:f8:
                    b2:c3:70:f6:df:d5:87:73:40:66:ba:ad:c4:cc:90:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:5F:DA:28:6A:6E:E4:F3:E9:8E:69:1A:6A:CD:81:01:3A:FE:73
            X509v3 Authority Key Identifier:
                keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:4b:3b:40:83:66:97:9a:88:6f:ec:fb:7e:9d:72:37:eb:
         c8:0a:87:1f:a4:41:87:7c:8b:9c:bf:62:3a:94:50:19:36:58:
         7e:59:fa:bc:5e:7b:25:26:7a:f1:61:b6:59:cd:29:c0:82:4a:
         57:11:b1:f1:fb:d7:a7:94:99:88:57:e6:10:2f:f4:5a:72:09:
         13:7a:ea:ac:b4:92:76:5b:78:34:59:ff:58:68:11:6e:dc:02:
         08:6f:dc:d4:88:a6:6c:03:f9:46:af:3f:f0:b3:38:8e:92:d5:
         97:a0:5d:00:e6:50:d7:ea:f6:3f:39:58:70:ca:5c:16:1b:0d:
         f4:b4:ff:67:75:1f:ba:c9:af:c1:34:53:5b:71:a5:05:05:93:
         a7:50:8d:25:93:e6:c9:b0:a5:12:cd:9d:5e:1a:ec:0e:e8:f8:
         f5:c6:52:73:e4:9d:c5:82:86:e1:61:f6:f5:bb:1d:1e:37:47:
         05:44:13:35:cc:5e:d2:a4:e9:ae:72:99:58:f4:f4:ef:ee:bd:
         6e:73:28:07:28:90:b7:58:94:1a:9a:65:dd:44:2c:fe:e9:13:
         be:5f:bf:8a:a8:e1:db:9f:48:f9:5d:3a:a8:a8:52:16:24:b4:
         a0:b9:5f:12:d8:b5:ad:21:3b:16:10:6e:7f:0d:d9:98:ce:e8:
         d5:13:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:32:47 2025 by rpki-client