Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File:                     4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier:          vK5hvLeFe0qBy7pVFBXPRdpwDfRuv8q2AI7aPf5m9ws=
Subject key identifier:   24:49:90:F8:6A:45:FF:C5:CB:17:AF:F2:B5:F6:A1:2C:B4:A5:5A:AD
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer:       /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial:       01968BB88236BF9E040F8A2630FE3C221EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number:          057B
Signing time:             Thu 01 May 2025 12:00:47 +0000
Manifest this update:     Thu 01 May 2025 12:00:47 +0000
Manifest next update:     Fri 02 May 2025 12:00:47 +0000
Files and hashes:         1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: XxNnWd2UcFKWP616aK2pDKiGTdZY+kXH/mhjKZygZzI=)
                          2: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (hash: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:b8:82:36:bf:9e:04:0f:8a:26:30:fe:3c:22:1e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
        Validity
            Not Before: May  1 12:00:47 2025 GMT
            Not After : May  2 12:00:47 2025 GMT
        Subject: CN=244990f86a45ffc5cb17aff2b5f6a12cb4a55aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:14:35:5f:c7:e1:e9:0a:9d:b5:01:25:00:
                    ad:26:d8:4b:42:17:a8:aa:0f:00:0b:05:3b:a6:9c:
                    6c:dc:f7:b4:6d:f2:5d:5c:54:96:ed:4f:f7:7c:5e:
                    6e:05:cb:c0:03:1e:41:8f:b6:03:f1:a9:77:c2:31:
                    81:41:5e:21:87:fe:e6:33:1f:62:5c:fd:41:0e:73:
                    99:7f:cf:5a:e6:c9:64:a2:54:4c:5c:33:2c:84:87:
                    28:af:80:c8:1d:f5:dc:0d:1d:32:46:43:46:1b:61:
                    19:ab:f5:23:40:ec:ac:46:a5:25:f1:ff:d7:8f:e0:
                    69:7a:85:25:fb:9e:f3:e8:ad:e1:6b:76:d8:a1:71:
                    9b:38:ec:3e:17:ba:d2:be:b0:7a:d5:8b:0e:f9:5a:
                    97:26:3e:2b:77:75:6e:b9:26:44:48:fb:5e:80:89:
                    29:5b:b6:b9:72:9f:ef:97:50:78:a8:7b:dd:f1:41:
                    b2:50:bf:c6:e0:a4:33:bc:48:36:9b:82:11:6f:5e:
                    01:9b:2e:26:4b:a1:0d:50:5b:5a:0c:90:6c:40:45:
                    49:b5:41:bc:ad:54:9b:17:39:f0:11:30:64:c1:e4:
                    da:2f:55:74:ae:71:b7:9b:c4:4e:13:d4:30:6f:8c:
                    26:fe:dc:9c:83:c9:35:39:2d:3f:24:63:82:1f:3d:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:49:90:F8:6A:45:FF:C5:CB:17:AF:F2:B5:F6:A1:2C:B4:A5:5A:AD
            X509v3 Authority Key Identifier:
                keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:5c:d1:1d:68:9f:3c:00:20:61:9b:1d:2a:e5:89:52:5d:
         aa:48:63:14:10:98:01:0d:06:9d:19:77:5e:f9:ea:48:3c:15:
         63:50:03:d5:42:99:36:b8:2f:2d:1a:66:5c:bc:63:ca:81:bb:
         d5:c4:6a:e7:9e:89:26:93:10:de:06:64:6e:ea:dc:1b:81:7f:
         76:11:dc:7c:1d:e6:87:a7:b9:e6:4c:fe:1f:1f:a4:5a:d6:d0:
         f4:65:7e:55:7c:c0:cd:33:33:d9:34:03:2e:13:65:49:ae:f2:
         c4:1d:57:23:85:15:a5:0b:2d:00:c0:d9:dc:90:42:96:e4:09:
         45:15:b9:38:ca:5a:d3:b3:87:8f:e3:60:6e:53:5b:f2:8d:8e:
         f3:4a:95:c2:a0:4c:3f:97:fd:4f:f6:aa:22:67:22:fa:01:82:
         ed:bc:46:ad:78:6c:a4:58:8c:d2:49:ca:9a:fb:18:90:ab:a2:
         78:3a:0f:c8:73:2f:16:99:b2:c9:02:04:f3:b4:e4:bc:2f:e7:
         1e:56:58:ac:4e:12:0a:db:e8:10:78:3e:b6:a5:04:4c:3a:6a:
         5a:8f:1c:b0:c6:f4:29:ce:7a:2f:f8:1d:4e:13:aa:7e:53:7e:
         6c:3a:ad:08:81:ed:2b:9d:3b:b3:4a:fe:fc:1c:99:42:2a:fe:
         6e:86:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:12:22 2025 by rpki-client