Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File:                     sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier:          LjnoYwYIbN5HsF9BTBDA1kOvm3Sm4kboUDt/APrX3Yk=
Subject key identifier:   64:36:E7:12:9F:F2:09:93:0B:4A:BF:7A:6A:5A:63:95:4F:18:59:D5
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer:       /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial:       0196778CB55A59B92E17A2714B9F7966C083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number:          C3
Signing time:             Sun 27 Apr 2025 14:00:32 +0000
Manifest this update:     Sun 27 Apr 2025 14:00:32 +0000
Manifest next update:     Mon 28 Apr 2025 14:00:32 +0000
Files and hashes:         1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=)
                          2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: ZeKAzfABoWQLd3OnqIxzBMHX/Ppm6FZFg+nz93jd6Pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:8c:b5:5a:59:b9:2e:17:a2:71:4b:9f:79:66:c0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
        Validity
            Not Before: Apr 27 14:00:32 2025 GMT
            Not After : Apr 28 14:00:32 2025 GMT
        Subject: CN=6436e7129ff209930b4abf7a6a5a63954f1859d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:09:f2:68:7e:f1:5b:ea:23:60:61:42:de:
                    e4:43:e4:a2:5a:93:54:8f:89:67:91:94:26:7f:d4:
                    b8:a6:74:94:c7:5e:06:58:db:da:25:29:b5:12:59:
                    1c:9c:a7:ad:ed:e7:ef:46:35:0a:0d:e2:45:76:a5:
                    e7:18:ab:a8:a8:fd:98:23:46:75:bb:14:96:33:63:
                    fa:11:96:f7:6e:43:d6:69:6d:f0:d9:a8:ab:d7:72:
                    b6:9f:13:c5:dc:90:1c:f5:c4:26:6c:b4:04:da:73:
                    53:84:8a:e7:8f:4f:2b:cf:a4:3e:57:77:21:36:0e:
                    52:1e:5f:f2:34:90:a4:1f:1a:be:5a:43:3e:20:eb:
                    1f:72:11:e5:ea:58:d6:81:40:93:64:bc:f8:c7:b4:
                    43:c6:97:e3:00:ad:aa:34:b0:39:90:63:28:1d:21:
                    31:24:16:a4:06:de:fa:9b:4a:6a:52:5f:6d:7e:fa:
                    c1:b3:57:b6:9a:c7:f4:96:97:fe:db:83:6c:b3:64:
                    ac:5d:09:18:22:4d:86:9c:a1:aa:b4:36:9b:48:43:
                    a0:e0:79:ee:18:1e:18:c0:98:99:88:2e:8d:b4:e0:
                    59:6b:a9:e2:cc:96:45:d7:55:ee:d1:1f:4d:1a:19:
                    70:ee:25:6c:f8:47:99:71:d3:96:5b:0c:9b:44:ca:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:36:E7:12:9F:F2:09:93:0B:4A:BF:7A:6A:5A:63:95:4F:18:59:D5
            X509v3 Authority Key Identifier:
                keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:74:74:65:19:e6:5a:a8:6a:0f:e9:af:aa:5c:d3:4b:a7:ab:
         19:78:7e:f0:1d:5e:2f:6c:d0:a5:18:fb:77:c8:30:52:c5:b2:
         12:f9:67:98:a3:7c:c9:38:91:68:11:a1:6a:b5:79:04:7c:a2:
         b3:5f:c5:9d:aa:5e:2e:a1:c0:79:88:c0:83:9f:74:b9:0f:68:
         66:25:55:1a:70:d6:56:52:2d:81:c4:d9:1c:f8:c5:87:28:80:
         6e:95:63:4a:83:d3:e4:99:05:bc:be:fb:16:8c:e7:50:af:97:
         67:e0:0a:c7:70:4d:0e:ba:47:fa:85:68:6a:b8:9e:17:eb:91:
         74:13:de:01:31:6e:d1:92:cc:43:9f:0b:32:df:80:19:b6:a3:
         fe:4b:77:76:11:d1:8d:34:eb:2b:e0:b2:6e:da:87:e4:c1:c5:
         54:a0:97:ad:92:fc:83:f8:2c:37:09:b4:62:23:a3:c5:68:1d:
         a2:86:a4:15:32:fd:bb:09:7f:9f:88:52:ab:a5:09:4f:fa:3b:
         77:d1:d6:08:dc:52:cb:1e:d0:9e:6c:24:27:ec:f5:ff:f7:d5:
         b9:e2:11:28:35:dc:89:dc:88:cd:58:44:0d:94:71:80:f2:4d:
         40:ec:b3:1e:04:22:55:5c:52:a5:c2:e9:e9:8d:93:58:ac:8e:
         8e:fc:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:50 2025 by rpki-client