Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File:                     qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier:          daBZcXsUhM5+ALoxsVYgXeoTZkkcLv+1vL3N/TkuB9E=
Subject key identifier:   0B:42:AF:36:ED:3D:09:5A:CB:19:FE:7E:D3:F0:C4:BF:AC:CF:9D:91
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer:       /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial:       01974BC4A5F06ED291402776EDF607D484CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number:          1457
Signing time:             Sat 07 Jun 2025 19:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:07 +0000
Files and hashes:         1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
                          2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: 7o2OQYz38/hGL1ScmywuvGpuI9r39knNh5oDWqZ8bdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:a5:f0:6e:d2:91:40:27:76:ed:f6:07:d4:84:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
        Validity
            Not Before: Jun  7 19:01:07 2025 GMT
            Not After : Jun  8 19:01:07 2025 GMT
        Subject: CN=0b42af36ed3d095acb19fe7ed3f0c4bfaccf9d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:a9:7f:e3:d8:65:97:43:2b:41:98:c9:67:
                    64:70:c8:8e:33:1b:86:65:08:ce:64:e1:a0:49:fc:
                    c4:f0:39:73:c1:62:20:6e:c7:92:70:4a:6d:a8:9f:
                    a7:54:2a:97:0b:35:f7:47:aa:c8:07:1f:26:72:c4:
                    0a:5d:25:3f:ea:dd:70:27:fc:1a:52:e4:84:cd:6d:
                    e8:25:dc:72:aa:fb:2c:b5:59:ae:c9:43:74:0d:29:
                    e3:46:c2:ab:52:35:01:82:d2:8a:99:43:ad:78:f2:
                    c5:55:69:57:83:d6:38:06:f6:78:f1:6d:b7:10:af:
                    96:95:b8:1f:79:ad:1f:08:c7:7f:58:39:6f:ad:e2:
                    a6:6f:ab:d4:ac:a6:6e:57:27:a3:6f:8c:7e:5e:ab:
                    ad:ef:04:b6:ed:e2:63:a1:6e:45:26:f0:6c:8f:64:
                    1b:15:bb:1f:00:ef:c5:a1:04:16:92:68:e0:e3:c6:
                    2c:39:95:9e:f4:dd:81:c2:7b:ca:0b:e1:fa:04:e4:
                    ce:d9:00:51:70:cd:6c:0a:51:5f:da:69:7e:74:87:
                    d6:1b:b1:73:82:dc:cb:e0:ce:c1:e8:56:06:76:b5:
                    ba:95:e6:8c:86:57:5d:8d:44:e1:3a:1c:53:52:44:
                    40:06:29:78:6d:31:62:ea:bd:35:f5:1f:a0:96:77:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:42:AF:36:ED:3D:09:5A:CB:19:FE:7E:D3:F0:C4:BF:AC:CF:9D:91
            X509v3 Authority Key Identifier:
                keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:a9:f4:a1:d8:65:51:b2:1b:f9:3a:05:34:1e:e4:95:9c:
         07:49:43:df:f4:1b:ca:e8:31:cc:e4:ce:9b:fa:18:a5:a3:39:
         cc:66:9c:fe:8c:67:a9:df:de:10:a1:b1:fe:8b:82:39:27:24:
         e3:63:d1:67:60:8d:90:a7:f0:0f:59:d2:ad:68:eb:e9:67:5d:
         a4:41:57:a1:7e:c7:0a:b7:30:b7:43:12:f8:fb:39:fd:f5:ff:
         14:f5:5e:17:59:f5:3b:48:f5:b7:32:d3:bd:3e:ab:98:25:7c:
         62:0d:a5:e3:d3:9d:df:5e:d0:2d:dc:f1:35:f9:24:9b:b0:e9:
         fc:d0:06:fe:8f:d2:29:3d:8c:5d:a2:47:8e:ed:a5:a2:8d:6d:
         04:d4:1d:8d:44:d7:26:f3:37:55:09:2e:51:18:4f:ae:c2:92:
         ad:24:fc:52:ca:b6:81:bc:c9:2d:6b:21:ee:2d:60:58:62:e4:
         87:60:79:9a:ac:07:8a:c6:a1:21:0d:fd:9b:27:93:88:cf:ce:
         94:5b:c1:8f:6f:03:5e:af:4c:73:9d:c0:0a:ab:94:f9:5d:16:
         f3:e8:64:96:eb:68:13:b8:73:27:a6:c6:a9:1d:49:f5:95:8e:
         10:a0:3b:f6:1e:e1:3f:67:e9:62:7e:3a:fc:52:a7:6a:83:e6:
         e1:2b:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:12 2025 by rpki-client