Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          TmhUNF92lyb/NaiRsdByr/pwSM+aSYlSk/QiNEg49nU=
Subject key identifier:   44:23:25:B6:64:93:46:9E:B7:C7:7A:4C:A7:92:30:87:09:42:47:CF
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       01976DABED9009DF233133EAFBD0C42B8876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 09:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:13 +0000
Files and hashes:         1: LQ0UyMo_r23ofQXV0yOGIa-qTpo.roa (hash: X9yChjYALTQXRzmOEi06/C9TIxnvZMLcDXd49hI5SlU=)
                          2: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: /vck9DUn0KyUNnD/aSJsYS8y7zUreKRVCexWCP7qvTA=)
                          3: V_AhGLWEz_D5OVSUmOpCvCorc0Y.roa (hash: zskZj/n1B6PJEz/jXex9+d4fpdYJ2j+Fk5JUolMcUls=)
                          4: jGS8snyePsO074NpCXFdKhJggqU.roa (hash: 1J9tKlx/RXf3qd/GUWmpIunUTtsz/Ug0Nekl3umQnis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:ed:90:09:df:23:31:33:ea:fb:d0:c4:2b:88:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Jun 14 09:01:13 2025 GMT
            Not After : Jun 15 09:01:13 2025 GMT
        Subject: CN=442325b66493469eb7c77a4ca7923087094247cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:d8:c0:44:87:04:e5:3e:c6:55:aa:77:c7:
                    5f:30:c6:88:91:8e:c8:ae:f5:d2:f9:73:a4:32:0c:
                    cd:c9:c1:b4:3e:a2:0e:f5:25:3b:e3:92:d5:49:cf:
                    8e:1f:a9:49:eb:ce:24:d2:53:5c:cd:e4:06:57:16:
                    2f:69:5d:ef:a6:dd:23:af:32:a0:64:a6:2f:5b:5d:
                    fd:6f:39:20:b4:07:e8:e1:af:34:a1:23:ce:97:ab:
                    35:e3:62:14:88:aa:60:c6:cc:1e:58:2c:7d:d5:35:
                    1f:11:00:e5:9a:d8:b4:28:7b:c3:af:23:29:71:41:
                    1a:24:c8:9b:60:70:55:db:0c:ee:43:63:ca:0e:55:
                    83:7f:27:cc:3e:02:97:83:05:d2:7c:2c:6c:3d:0c:
                    cc:47:ef:70:24:42:d7:12:96:dd:f0:e0:e2:e4:fe:
                    7e:c1:ec:f1:ea:06:dd:11:73:1f:1b:5f:d5:3c:15:
                    d0:98:fd:2c:24:de:7b:b6:a1:c7:ec:87:c2:1b:7b:
                    2e:ef:c9:ab:d9:bf:3b:66:89:c6:4f:0d:04:81:03:
                    52:94:6c:3c:d4:30:e6:e5:2f:02:66:f9:d8:4a:00:
                    9f:b3:f0:c2:d4:68:a1:6d:a2:9c:a4:50:f3:5c:be:
                    02:e8:8a:a2:73:89:a5:a0:88:0f:db:d6:16:1b:d5:
                    e8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:23:25:B6:64:93:46:9E:B7:C7:7A:4C:A7:92:30:87:09:42:47:CF
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:bc:90:7b:3e:ee:95:ed:a2:8b:51:2c:32:76:e5:7c:c6:
         4e:4f:69:5a:67:95:d6:e8:fa:ec:2b:39:af:ec:bc:52:ad:ed:
         da:e6:78:49:a6:e9:fc:19:03:ea:04:e8:d6:b1:85:3d:5c:c1:
         50:4d:e6:cb:ce:2d:07:fc:91:a2:f1:c8:63:6e:13:db:5f:c4:
         68:af:44:12:8b:cb:1b:7d:da:96:69:b9:56:17:73:69:67:16:
         7b:12:5c:0f:7c:0e:9a:96:a1:3b:86:02:5f:27:63:c2:40:ae:
         b5:c0:d5:86:20:49:d1:3a:29:5e:10:3d:67:92:41:4b:59:e5:
         75:e8:9b:fc:5b:75:0c:86:e2:f7:22:98:69:5d:82:86:b8:f4:
         a3:46:e2:88:21:fa:80:79:48:f0:52:51:2b:f6:46:24:81:3b:
         30:19:95:a6:9f:11:01:b8:cb:69:a6:a9:b7:94:14:8d:ee:57:
         92:50:9d:04:e4:a0:96:27:65:f6:5c:3e:ed:ef:20:36:78:3f:
         36:79:0c:7f:46:57:4e:1e:ca:52:3d:87:b7:78:a5:4c:36:f2:
         fd:36:75:a0:61:16:58:74:31:29:fd:e5:8e:c3:e1:1a:7e:fc:
         f2:5e:c8:d3:e1:c9:97:a0:80:df:21:33:2a:5c:80:ab:b9:10:
         10:d3:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:03 2025 by rpki-client