Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File:                     QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier:          NVmgbiP6HgNfxNkcwHygvAzXW8gxvqI3ozl4jGa7Ypo=
Subject key identifier:   44:C6:22:44:BF:3C:47:FE:43:76:6D:25:12:D7:35:56:6F:4C:C4:11
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer:       /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial:       01976D3DCBC4BA0CA1CB9148377D483B470A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 07:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:55 +0000
Files and hashes:         1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: 80BHbBfZdG3k4YQoX2l5zzJBMrGJa3G1arnC0Z+4XeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:cb:c4:ba:0c:a1:cb:91:48:37:7d:48:3b:47:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
        Validity
            Not Before: Jun 14 07:00:55 2025 GMT
            Not After : Jun 15 07:00:55 2025 GMT
        Subject: CN=44c62244bf3c47fe43766d2512d735566f4cc411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:d4:84:85:0a:ea:04:06:c6:eb:64:32:37:
                    2a:f4:6e:f5:aa:08:85:61:b6:75:d8:8f:dc:d1:14:
                    0e:a4:dd:7f:0a:60:c4:90:f4:86:fa:96:69:fd:bc:
                    ce:95:f0:7e:e4:29:70:3c:8f:fa:f2:3c:98:22:7d:
                    16:62:14:e7:f5:d5:d4:9e:97:6b:73:5b:34:4e:f1:
                    96:38:4f:71:95:8b:b3:ac:e7:03:ef:a1:75:ca:35:
                    de:93:37:c8:58:d2:3e:72:de:e5:15:e1:d5:64:0f:
                    09:9f:0e:cb:44:f9:4b:ef:ef:cb:06:23:d6:23:45:
                    ff:16:0f:2d:be:aa:c0:2c:00:e6:bc:d6:45:e8:45:
                    cc:37:70:58:f0:72:96:e5:38:4e:27:26:51:0a:19:
                    e2:55:20:7f:9a:44:a7:a9:73:be:9a:cd:0b:05:6d:
                    80:63:15:ab:52:3b:ef:1b:55:9d:ab:c0:92:21:d9:
                    2c:18:cb:5c:2a:5a:d0:8b:e2:f0:73:b5:0c:af:56:
                    73:5a:88:7c:38:37:11:8a:86:11:94:81:8a:65:a8:
                    b7:8c:3e:36:f9:ef:86:eb:9d:e4:39:a3:f2:19:84:
                    c1:19:d9:35:6c:9c:7f:a3:b7:f7:3a:ec:d5:68:20:
                    84:51:9f:94:53:76:d5:67:c9:d7:5a:41:56:0d:91:
                    26:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C6:22:44:BF:3C:47:FE:43:76:6D:25:12:D7:35:56:6F:4C:C4:11
            X509v3 Authority Key Identifier:
                keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:76:f8:f6:e9:c1:ff:08:3d:2e:ed:a1:7a:f8:5b:4d:f5:
         84:aa:91:87:5a:52:34:11:e8:3a:7d:a5:82:bb:20:a6:d0:83:
         73:ca:01:19:59:a0:23:2c:ae:c6:a2:67:a5:a3:b6:d3:10:2b:
         62:71:d3:9f:c1:d9:78:77:f2:0b:f0:d0:bb:d7:ee:bb:08:d2:
         91:84:fa:7a:22:c5:dd:5b:13:e1:22:2d:41:e3:ac:84:c4:d0:
         56:8f:32:9d:35:f7:e6:2f:cd:0e:e0:4b:f7:4f:39:1f:4c:16:
         a9:75:47:1d:05:aa:ed:2f:07:a8:e8:4b:d7:f4:53:fb:2d:9b:
         4f:f9:de:1d:3f:88:3f:00:99:53:95:59:58:52:96:f0:ea:49:
         ed:9e:17:fc:65:5d:d9:cc:f7:e8:9b:c9:f0:eb:2e:e7:17:86:
         68:0a:bb:09:27:0e:ea:7d:73:3e:3f:56:e9:5b:c3:7a:ed:88:
         4f:85:b2:15:13:13:77:12:0d:77:5f:11:04:9c:35:a3:65:e7:
         db:be:f8:7e:94:ab:aa:27:97:e2:74:09:9e:f6:24:f3:1c:83:
         02:1c:7f:7c:3a:0d:4b:3d:d8:8b:00:70:dd:e5:d2:73:54:e1:
         d1:cc:94:77:c3:12:16:20:c5:8c:6e:e2:63:c1:9a:9e:1e:8b:
         87:5e:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:05 2025 by rpki-client