Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
File:                     _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json)
Hash identifier:          A7tHc4mBhIX8BzitEBH56VPH0c5DiYZmF2+uuVUkkbs=
Subject key identifier:   15:E5:F4:F8:6F:58:8F:B7:DA:19:7B:7F:6A:28:F4:AE:36:2B:C6:7B
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Certificate issuer:       /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial:       0196789F54E5E0473A1BB6390FB637634D36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
Manifest number:          1511
Signing time:             Sun 27 Apr 2025 19:00:29 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:29 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:29 +0000
Files and hashes:         1: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (hash: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=)
                          2: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: cP4fG4y7UGQbnYlGuhdEeyg9E9dWXsDzuNERNzuqwfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:54:e5:e0:47:3a:1b:b6:39:0f:b6:37:63:4d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
        Validity
            Not Before: Apr 27 19:00:29 2025 GMT
            Not After : Apr 28 19:00:29 2025 GMT
        Subject: CN=15e5f4f86f588fb7da197b7f6a28f4ae362bc67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:64:2a:da:ac:02:d4:89:f9:27:55:7d:58:
                    05:da:ae:7c:e1:2b:20:45:04:a0:48:4f:13:7f:4d:
                    23:cd:eb:bc:56:cd:cc:fe:4d:52:ed:be:80:ff:a5:
                    6f:3a:05:93:56:de:09:0b:23:89:d1:e2:0e:ce:14:
                    63:ed:d5:c8:1a:4d:7e:04:b4:ad:f6:06:94:02:75:
                    aa:70:4d:80:e1:03:4b:e7:e2:77:02:df:2c:23:2a:
                    13:9d:38:2f:25:a7:f6:47:7d:3c:ff:c3:8f:b3:03:
                    aa:ea:df:26:f3:6c:75:c2:54:0b:a0:00:af:90:e6:
                    f6:8f:d5:eb:24:5d:0a:b1:8a:6c:46:13:a8:95:46:
                    ec:0a:db:2e:d2:c7:2b:0b:a6:53:ec:a1:cb:7b:b2:
                    49:8a:c0:17:c9:2f:c3:f6:48:fb:3e:3c:f1:55:55:
                    4f:03:16:24:91:97:55:f7:3f:37:5e:d1:aa:4d:f2:
                    44:c4:68:98:cb:02:83:12:cf:78:03:13:b1:52:e4:
                    a9:b1:79:69:e6:2d:bc:b2:08:da:5d:a0:a6:88:64:
                    f3:79:5f:11:0c:3c:b2:63:8b:ec:71:f6:83:59:d5:
                    bc:9f:94:8d:45:71:fd:6f:2e:50:b9:28:c4:be:48:
                    85:0a:f9:27:16:11:bd:d0:0a:25:1b:09:5f:48:4a:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:F4:F8:6F:58:8F:B7:DA:19:7B:7F:6A:28:F4:AE:36:2B:C6:7B
            X509v3 Authority Key Identifier:
                keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:dc:52:d3:00:07:5f:cf:01:ab:67:b2:d2:87:2d:05:a2:
         5c:7f:7d:3e:01:72:1e:11:62:32:a3:bb:fa:5f:ef:02:f1:23:
         a3:24:b4:e3:17:42:89:45:0b:95:8c:c7:4a:1e:8c:38:75:9b:
         40:38:e3:f1:e7:ea:07:4b:83:2b:6e:56:19:18:e4:8c:2b:31:
         3e:48:9f:1b:d1:2a:bb:2c:cd:83:a1:6c:a8:53:66:2c:db:00:
         f2:32:de:35:07:6f:8f:b0:4c:e1:a8:2c:8b:96:ad:a1:c7:fc:
         60:ba:48:10:c1:b1:6e:79:7f:6e:7b:89:44:29:94:b4:55:ae:
         b0:67:54:53:18:36:da:b9:66:a7:d9:a6:bc:bc:a8:d2:80:62:
         df:98:5a:c4:b8:7b:2d:da:ad:4b:63:45:67:df:be:c8:0f:60:
         c0:08:cc:58:05:2b:b6:38:67:67:14:bd:43:58:4f:f0:0b:c5:
         f5:4e:91:bf:90:f4:53:91:04:61:8e:0d:3b:f4:df:6f:98:90:
         e3:96:30:57:91:dd:65:d2:9b:89:25:60:4e:3e:de:0d:17:bc:
         10:7a:c5:f7:72:29:1b:da:41:8c:86:37:e6:ef:15:df:68:3d:
         5f:37:b0:bc:80:1e:18:33:50:40:7e:e9:d0:3c:e2:5f:ba:1f:
         8a:6f:e2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:14:22 2025 by rpki-client