Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File:                     1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier:          I8A//tehPfJa66SNCbu8kkzmajS1lY48yJ2F+5AEvYs=
Subject key identifier:   5D:23:2B:74:97:93:9E:7F:62:FF:BD:1A:FB:F2:7E:98:8D:29:FF:6E
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer:       /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial:       01976DAB83DA64F223665423C4A06AE6CF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number:          0F41
Signing time:             Sat 14 Jun 2025 09:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:46 +0000
Files and hashes:         1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: 9AsHaRFpUV4h5yTRpEc4AOdWpffnj1RZpgxfFtsvdiY=)
                          2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
                          3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
                          4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
                          5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
                          6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
                          7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
                          8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:83:da:64:f2:23:66:54:23:c4:a0:6a:e6:cf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
        Validity
            Not Before: Jun 14 09:00:46 2025 GMT
            Not After : Jun 15 09:00:46 2025 GMT
        Subject: CN=5d232b7497939e7f62ffbd1afbf27e988d29ff6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:aa:f8:64:7b:57:94:55:39:32:b9:21:cc:
                    71:72:89:2d:74:e5:ab:c1:64:c7:7d:f7:9c:fc:5c:
                    e8:09:ff:77:f9:42:39:ff:8a:42:b4:0d:cd:40:d8:
                    2d:2a:a0:ba:b6:20:e2:85:16:c7:14:84:76:d4:56:
                    ea:a4:a9:85:04:5e:fb:46:35:36:1b:dd:77:6d:d7:
                    70:52:e7:f9:56:58:d7:cb:96:8b:ac:08:0c:ec:a3:
                    a6:4f:e7:3c:f8:09:06:03:53:55:ac:ff:a4:3d:88:
                    09:7a:73:92:7c:0f:cc:1f:4a:6e:51:64:16:ba:08:
                    ab:60:ab:3c:b7:68:55:e5:c1:60:36:fe:71:64:fe:
                    f4:50:72:97:31:d9:7a:fe:85:dd:9d:6f:06:1c:d2:
                    dd:5d:37:16:07:7b:ec:05:28:4d:98:7b:23:89:0b:
                    66:42:43:d2:e0:fa:e7:3f:f0:eb:0f:3a:14:23:ef:
                    5f:56:d6:90:ea:54:6c:ed:f1:43:60:74:13:bf:c5:
                    b6:83:ba:56:06:be:84:e4:c7:a8:2b:09:d0:c5:58:
                    b4:0e:f6:be:5e:8f:97:c4:00:03:22:11:2d:44:70:
                    19:7c:00:1e:ba:4a:04:45:e3:03:17:be:50:61:96:
                    8d:09:ca:c8:46:77:76:cd:82:d8:d6:9c:f3:7e:d5:
                    9f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:23:2B:74:97:93:9E:7F:62:FF:BD:1A:FB:F2:7E:98:8D:29:FF:6E
            X509v3 Authority Key Identifier:
                keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:43:b4:11:7a:ec:21:6c:3c:e4:75:93:a5:4c:66:00:82:59:
         50:e8:bf:ab:5e:64:3d:49:11:8d:6b:ac:47:7b:b9:1a:62:8f:
         a4:de:9a:64:96:32:10:c5:20:ba:d6:37:9d:bc:a0:d9:90:32:
         ca:84:e2:19:74:ec:28:46:e0:b4:57:a3:92:e8:82:a0:0e:2e:
         eb:fc:3c:a0:f7:20:56:33:a3:2c:39:6f:7f:8a:e9:c2:3f:60:
         7f:9b:b2:ca:1e:5d:6a:a1:8e:02:96:4b:89:45:76:08:a9:1c:
         16:fc:df:3c:6e:51:2d:ce:18:14:43:18:8a:7b:ac:7b:76:41:
         a0:e0:68:ed:75:6d:3a:2f:60:3e:42:cc:24:a6:75:23:1b:11:
         36:42:5d:26:57:75:a0:9e:b0:38:04:a3:7e:52:43:df:73:b1:
         f3:15:55:62:4d:19:c7:e3:1f:ef:ec:22:63:f8:af:af:50:10:
         f8:4b:67:eb:92:33:1b:02:78:1e:4e:4d:62:b1:f6:ac:35:bf:
         da:00:61:52:79:64:6a:43:99:d8:66:d2:df:42:92:61:6d:d3:
         58:c5:2b:0b:98:d2:06:ce:e5:81:7c:f4:e7:61:80:a4:81:d9:
         9e:cc:18:9e:2d:49:33:f5:79:bc:a2:7b:9c:e8:3c:87:f9:26:
         88:0b:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:46 2025 by rpki-client