Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File:                     QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier:          nZAId7Dcnyjt1RuQDIFK3o4RXlVrRLvyQkgmwPzRbkY=
Subject key identifier:   8C:64:E4:0A:2E:15:D4:33:35:0C:9D:26:4E:D0:F5:66:5C:82:F6:CC
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer:       /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial:       019650B635A2E7317D156C8FDE2E3C031436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number:          1511
Signing time:             Sun 20 Apr 2025 01:00:40 +0000
Manifest this update:     Sun 20 Apr 2025 01:00:40 +0000
Manifest next update:     Mon 21 Apr 2025 01:00:40 +0000
Files and hashes:         1: LxK49wQNApdxyp8v_k05CLgMI5E.roa (hash: cyuNB9STnC1KALLJGwZIhbMMjarSRyXyHryPQj2j9DA=)
                          2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: qWGlt2IV+yJCfI91kca6tx1aO50fEJA+jZGgR17O1kg=)
                          3: cIaNp2bTtQ5M6jCssmyGRmD8_eg.roa (hash: DakUxNySLzPYiUEmVKH8Wuu4g1X+hz1O/JIQ3JCKnTY=)
                          4: qNueyq_ZoTbC4yFoRImera8I8G8.roa (hash: 0QLi9xBNjhGIdVQu2iU+1fR1OTjQ09YNPx13rOGAPmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:b6:35:a2:e7:31:7d:15:6c:8f:de:2e:3c:03:14:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
        Validity
            Not Before: Apr 20 01:00:40 2025 GMT
            Not After : Apr 21 01:00:40 2025 GMT
        Subject: CN=8c64e40a2e15d433350c9d264ed0f5665c82f6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:14:ec:ca:54:21:7b:fc:eb:09:f3:2f:3b:
                    3a:cc:b3:36:4f:4a:c7:1c:f2:96:7f:19:21:55:4a:
                    4e:70:4c:a7:14:b1:c3:a0:8c:b2:60:a5:16:c2:b4:
                    86:38:bb:1b:8a:22:58:65:32:9d:71:d2:a5:7e:45:
                    cf:5c:8a:34:b5:a2:b2:ae:84:8d:e6:30:26:f0:c4:
                    dd:34:45:1c:08:92:2d:ac:d8:e1:41:95:e0:88:a1:
                    f8:43:40:b7:c0:18:f5:a1:64:00:6a:9c:8e:83:4f:
                    d4:d9:32:2c:59:54:10:36:f7:88:5a:a8:65:e3:2d:
                    2f:d2:bf:f5:23:da:c2:0f:df:96:83:68:63:a9:8f:
                    80:21:59:17:2f:7f:4a:8c:d3:e9:54:7c:ed:5b:a7:
                    b2:52:52:35:11:9a:09:83:ba:fc:dc:ba:69:fb:ee:
                    ea:81:cf:23:89:d3:08:49:c4:25:ec:30:ee:5e:bc:
                    ea:41:91:66:d0:f4:1b:77:e6:6c:c6:3e:19:8d:de:
                    f6:59:2b:ba:a3:48:78:03:2b:d7:1b:6f:53:4b:4e:
                    de:c0:98:4b:d8:9d:b0:9c:00:58:07:17:cf:da:a2:
                    42:ab:0a:e8:2c:1f:2e:47:e9:ef:98:e2:44:73:f2:
                    41:f6:86:29:d5:48:3e:3d:61:a3:e9:0f:7f:7b:b1:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:64:E4:0A:2E:15:D4:33:35:0C:9D:26:4E:D0:F5:66:5C:82:F6:CC
            X509v3 Authority Key Identifier:
                keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:bc:0c:bc:40:65:6d:da:48:df:5f:41:1d:23:07:0e:c1:
         4c:52:43:54:b4:f3:ae:da:e7:84:fa:62:74:92:3d:2d:5a:79:
         30:77:e3:60:09:5a:45:d3:4a:35:a9:bd:7e:ce:bf:5d:c6:2b:
         79:bd:23:9e:68:e0:89:bc:c2:a5:65:96:e2:20:37:36:a6:0d:
         ff:6c:f3:a2:59:d8:a5:fd:f2:c6:70:09:b7:8f:39:23:64:a1:
         ba:38:39:f7:44:9a:64:ad:99:71:7c:c2:d1:61:97:c7:51:a9:
         d0:f4:b1:fe:62:4c:be:0b:71:4a:06:a9:44:cc:2f:51:24:ed:
         42:fb:2c:f2:ba:c4:66:d4:f9:46:4b:8a:8a:0c:73:c9:d9:e7:
         4e:5c:20:db:18:ea:a1:e1:e5:53:2e:6c:bb:be:b2:ad:f1:be:
         21:79:6a:43:2c:b5:be:d7:9c:a1:57:22:1c:89:6a:48:79:33:
         b8:2d:b2:bf:83:43:19:76:6f:f4:58:41:b1:53:cf:7b:ee:1c:
         3e:b7:a8:11:aa:48:ee:c0:a0:91:3e:76:ab:a1:15:9c:57:9a:
         4d:ab:74:c6:e1:4b:61:11:dd:df:e9:55:65:ee:b0:50:9b:ca:
         64:3b:0a:0f:10:79:27:06:18:b4:e0:c5:ea:7d:88:5a:7d:2a:
         50:2b:a3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:09 2025 by rpki-client