Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          CeCiC4CxV7bwsU/rEif1O//4SY/w/hpW6fVTqoDeMB0=
Subject key identifier:   6E:95:ED:97:51:12:86:71:2D:FB:30:C5:32:CE:66:C3:AD:5F:1B:C2
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       01968924D9CB86C5A0376AE1AFDFF2208B32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          1528
Signing time:             Thu 01 May 2025 00:00:15 +0000
Manifest this update:     Thu 01 May 2025 00:00:15 +0000
Manifest next update:     Fri 02 May 2025 00:00:15 +0000
Files and hashes:         1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
                          2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
                          3: kI95OqljvpuP19xNeatpCC78QL0.roa (hash: xeIJsQyiu78m/ov5MVv9GnNEdwzfiIiPyuIblum8QtY=)
                          4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
                          5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
                          6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: nE5a53UqJ6LxVwI3iKUqT3GDipdLQI1c2GL7xh7B528=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:24:d9:cb:86:c5:a0:37:6a:e1:af:df:f2:20:8b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: May  1 00:00:15 2025 GMT
            Not After : May  2 00:00:15 2025 GMT
        Subject: CN=6e95ed97511286712dfb30c532ce66c3ad5f1bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:e9:2e:92:43:95:27:e9:aa:51:86:f1:f7:
                    0f:95:a6:5b:40:7f:d7:48:92:73:6d:8a:23:8c:93:
                    88:20:15:43:ed:20:24:68:c5:39:96:3a:6b:04:99:
                    d4:2e:43:02:18:f4:8b:f1:cf:6f:63:45:e4:19:d3:
                    c0:d0:f3:a6:89:89:1a:03:9e:21:94:28:31:de:0e:
                    8c:f8:d0:7d:85:39:5b:d1:4d:8e:c5:3a:eb:bf:dc:
                    3d:98:ac:a7:63:8e:a7:14:8b:b7:14:95:6c:41:69:
                    06:3d:c0:00:d1:71:fd:53:9f:0b:f2:d2:6b:6a:d1:
                    66:6e:85:a4:bd:09:68:22:fa:3f:03:0b:2f:15:bf:
                    c7:5a:7d:eb:4e:23:55:37:22:d7:bf:bf:28:29:4b:
                    68:05:b6:cd:21:97:76:f8:af:90:ad:df:00:92:7e:
                    ab:85:77:06:32:a9:4e:f9:92:2a:0c:9b:bd:70:4d:
                    b4:ba:d5:75:d8:8a:1e:c7:28:a2:2e:d1:1a:64:2e:
                    f2:49:4c:b3:b8:de:98:f8:e4:68:33:8d:eb:bb:31:
                    db:b4:df:1c:63:af:ba:53:0b:a7:1e:e4:bb:38:a0:
                    5a:9b:78:22:bb:6e:52:fc:99:07:24:50:09:fa:37:
                    4d:08:0b:ad:b2:55:2b:2d:8d:62:58:92:00:27:e2:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:ED:97:51:12:86:71:2D:FB:30:C5:32:CE:66:C3:AD:5F:1B:C2
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:84:a0:f8:8d:06:72:04:9c:44:03:c9:b8:a5:49:77:cc:75:
         dc:66:72:7a:be:81:60:e6:aa:df:f6:39:fe:47:4e:a3:7e:95:
         52:b6:b2:2d:5b:6c:df:43:ae:42:34:24:79:98:8a:db:b5:62:
         1c:92:1d:46:70:49:35:ed:b8:14:56:cf:12:8a:ff:a2:23:47:
         eb:f4:e2:3b:e8:ea:65:af:19:ae:a5:a9:ed:63:3b:c3:d2:31:
         56:1f:b6:26:ee:1c:d1:46:53:e3:4c:04:4c:ff:48:d1:ed:d6:
         59:42:8c:fc:99:75:fd:fe:d6:de:43:2e:59:d3:1b:c8:5b:2c:
         72:c1:3d:3e:77:3d:86:bb:12:99:67:f5:3a:bd:82:18:ca:cb:
         05:c2:ab:7d:e9:a1:e5:c8:cd:4c:f9:a2:41:59:36:50:07:66:
         3f:24:f9:94:07:69:4c:a0:94:26:52:c9:13:d8:3d:e6:a9:af:
         69:b0:79:04:b8:38:2e:2c:73:fc:ac:46:50:25:4e:e8:af:98:
         e6:eb:00:73:66:0f:fb:6f:6e:c5:70:df:5f:f0:ff:90:49:8d:
         07:32:d6:94:18:d6:a3:28:a7:83:12:20:cb:1c:ac:9d:0d:6c:
         d6:19:66:15:81:14:57:6c:d5:da:05:ab:59:97:e1:48:40:3f:
         ca:96:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:43 2025 by rpki-client