Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File:                     QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier:          rogzy1wrZjiu0m+LmBhdoHl7leW7hOEl+js69YeeklA=
Subject key identifier:   F3:26:08:5F:2D:5C:7F:EF:70:78:C8:E3:ED:0B:DD:54:5E:77:C0:18
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer:       /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial:       0196925FBCFC112CE6B749DDFA7C0A6B5512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number:          1472
Signing time:             Fri 02 May 2025 19:01:09 +0000
Manifest this update:     Fri 02 May 2025 19:01:09 +0000
Manifest next update:     Sat 03 May 2025 19:01:09 +0000
Files and hashes:         1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: ukx9qWYIbJU5M+bEbuklpCZ7w3vnsr+vj0Jnp102vrQ=)
                          2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:5f:bc:fc:11:2c:e6:b7:49:dd:fa:7c:0a:6b:55:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
        Validity
            Not Before: May  2 19:01:09 2025 GMT
            Not After : May  3 19:01:09 2025 GMT
        Subject: CN=f326085f2d5c7fef7078c8e3ed0bdd545e77c018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:4a:6c:81:ed:85:17:65:c6:00:25:1f:8d:
                    ad:70:47:33:f8:cc:09:1a:39:8b:5f:1d:c1:9f:bf:
                    3a:b4:6a:bf:49:78:7b:5b:b3:78:0e:6b:22:e2:53:
                    f1:35:2d:8c:8b:4b:8b:e6:aa:b9:bc:b7:26:44:b8:
                    9a:32:d5:45:80:be:0e:be:e4:e3:f4:0a:c7:26:4c:
                    d5:00:be:ba:95:61:6f:d8:ec:95:b4:b7:c4:23:45:
                    dc:03:11:31:cf:52:35:28:ae:9e:85:9d:cb:38:71:
                    f0:5d:e2:5e:e2:d8:c8:36:6f:9c:6d:88:98:67:53:
                    52:7e:a8:cc:34:23:41:41:3e:67:d6:21:b8:e1:bd:
                    f1:ea:bf:93:d7:2d:1a:9e:12:a5:d6:66:7c:1f:44:
                    9c:a1:5b:31:70:04:ed:6b:e3:9e:66:0a:18:73:4f:
                    d3:2d:4d:e1:fd:bd:0b:9d:1b:b8:90:9d:60:b8:01:
                    0d:91:91:a0:51:73:6b:df:c5:ae:e3:96:4a:ee:77:
                    51:37:21:8f:a5:5b:6b:2b:e8:ad:6c:00:04:49:26:
                    f7:20:53:73:ad:08:ba:1e:65:7f:24:49:38:ef:91:
                    90:48:77:88:d3:29:c4:d3:81:d5:cb:8e:c7:42:42:
                    c3:8b:c8:ce:7f:55:be:6e:44:21:78:9b:82:32:64:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:26:08:5F:2D:5C:7F:EF:70:78:C8:E3:ED:0B:DD:54:5E:77:C0:18
            X509v3 Authority Key Identifier:
                keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:31:bd:90:2f:92:6b:f3:3e:62:b2:a2:3f:d7:5b:44:26:58:
         a5:c0:04:91:7b:9c:7d:dc:78:ca:f0:49:1c:4e:93:00:4c:f3:
         7b:cd:26:01:91:22:f8:ca:2c:5a:c7:8d:cb:1c:95:6d:52:88:
         61:a7:41:f8:b4:00:56:56:b7:b5:c7:90:7f:7f:b7:a7:0c:0f:
         8f:54:ef:30:69:90:85:ba:e9:e3:31:5c:c9:f3:60:31:fa:d4:
         96:d5:33:40:44:64:d8:9a:d3:40:46:8a:61:f0:a0:a5:cc:b7:
         7c:91:6a:be:cc:9a:26:e5:3f:e7:64:1a:e2:c7:f5:9b:2f:05:
         be:a9:03:d3:0f:3d:83:fa:b1:06:bf:fb:2c:c9:ae:26:31:99:
         d3:a4:06:8c:38:ad:b7:b7:77:1e:0d:97:59:ca:58:26:42:17:
         65:3f:b0:87:c5:2e:8f:67:6a:58:b2:14:e1:8c:fa:54:05:45:
         d4:bf:0e:b2:85:d9:40:b0:83:d7:4b:a4:ef:de:f3:a8:4d:c3:
         4a:ec:1a:d9:7c:95:b9:38:d6:9e:55:42:d6:6c:84:0e:34:b7:
         eb:61:a7:bd:bf:2c:99:45:6c:72:3a:4c:ff:12:98:55:75:d4:
         6b:ac:9d:61:47:17:3a:a6:d9:9b:90:88:cb:8c:e9:7c:86:04:
         18:17:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:17:27 2025 by rpki-client