Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
File:                     qPuDH1vWwMILjgm-URwhvn3F3ro.mft (raw, json)
Hash identifier:          c/PApSushnFKMCkRxArir+q376vrDNQR9kd1n9GdfsU=
Subject key identifier:   3D:BF:8E:6A:44:00:E4:8E:EC:E9:B4:31:3F:B8:3E:62:36:A1:3A:77
Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA
Certificate issuer:       /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
Certificate serial:       019674FA015FBA261D7633EF3BD67E4A986C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
Manifest number:          04F3
Signing time:             Sun 27 Apr 2025 02:01:03 +0000
Manifest this update:     Sun 27 Apr 2025 02:01:03 +0000
Manifest next update:     Mon 28 Apr 2025 02:01:03 +0000
Files and hashes:         1: eVNnviqiIdPY1BUvp61D_AbFKTc.roa (hash: zPSI/g0bx6X/hvEByyb1M6C4zHIhQAKfdMZa4T5kVWA=)
                          2: qPuDH1vWwMILjgm-URwhvn3F3ro.crl (hash: Tiul32E55S9ydJG02R0n+7S48wmBlIqjBakNa3w4t4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:fa:01:5f:ba:26:1d:76:33:ef:3b:d6:7e:4a:98:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
        Validity
            Not Before: Apr 27 02:01:03 2025 GMT
            Not After : Apr 28 02:01:03 2025 GMT
        Subject: CN=3dbf8e6a4400e48eece9b4313fb83e6236a13a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:87:b3:97:43:13:1f:4f:c4:ec:c7:fd:56:
                    e8:ff:ac:35:55:1e:5d:be:0b:ed:01:16:40:13:75:
                    f7:d2:28:90:83:ae:f4:85:b8:ad:a3:9a:40:33:e0:
                    ee:e6:17:a1:28:24:f6:82:8e:27:72:c3:22:29:5a:
                    76:79:2c:9d:8e:ce:44:5e:0b:4e:2d:1f:88:e6:bb:
                    1b:ad:8c:56:78:dd:80:63:43:47:75:b7:2b:b4:f5:
                    ad:99:59:84:d5:f7:92:01:50:47:ee:79:0d:a6:d5:
                    fa:bb:99:71:6a:c4:6e:06:45:c7:e7:61:20:c7:a8:
                    41:f7:c9:df:e4:59:81:4f:27:4e:83:77:75:ed:84:
                    3b:cf:c8:01:6a:bc:f2:da:17:67:d8:dc:6a:9a:9d:
                    f4:fc:e7:7e:12:a7:13:eb:31:11:0c:a9:85:1e:35:
                    b5:c8:f5:42:f5:3f:23:87:b1:ef:d7:37:5e:c8:45:
                    2a:fd:5e:66:c8:de:21:32:ce:b3:65:18:fc:47:20:
                    b4:4f:9d:e1:30:a0:2b:d1:06:55:ac:ad:b8:36:7b:
                    46:9c:20:35:38:65:35:e5:40:01:4f:a2:93:ea:58:
                    86:01:13:df:72:7b:f4:91:fc:40:55:6a:1b:35:4a:
                    b8:fc:84:99:88:6c:b2:5a:a4:81:8c:e9:9e:dd:74:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BF:8E:6A:44:00:E4:8E:EC:E9:B4:31:3F:B8:3E:62:36:A1:3A:77
            X509v3 Authority Key Identifier:
                keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d8:a8:f2:69:48:53:b1:aa:57:2d:bc:82:03:cd:aa:0b:97:
         2b:36:f5:19:9b:e9:1d:2e:bd:44:c5:25:37:be:c6:62:d9:0a:
         d2:f3:da:0b:83:1a:b3:4b:54:14:58:3b:f6:78:08:e1:c8:7d:
         91:75:9f:e6:ad:d9:a7:4a:68:65:d1:b7:81:18:92:e7:9d:b9:
         e2:0e:6b:c3:64:3d:6b:6e:df:6b:53:35:bc:68:24:9c:2b:e7:
         35:43:85:8f:c2:34:f5:d7:6e:00:0b:ac:2a:7b:53:6d:c8:25:
         0e:cb:c1:fb:c4:70:6c:50:be:3d:23:34:c1:c5:7a:44:39:6f:
         ac:99:96:e7:9e:55:e5:f7:57:41:ea:38:66:59:17:61:1a:d8:
         c8:d7:f9:87:7b:13:ef:ba:89:8f:0f:4b:fd:54:c5:74:99:a0:
         21:21:be:90:0f:8f:f4:f5:5a:56:84:23:a1:46:1f:69:75:56:
         59:0b:2c:ad:ec:57:12:b8:d2:5a:80:91:9f:bf:44:e5:d7:3d:
         17:8b:2e:55:66:c9:c8:24:fa:36:f1:0c:2e:d6:e1:80:01:15:
         53:8f:00:db:ca:24:17:f5:bf:c6:3e:26:6d:09:f6:01:e5:26:
         d7:8d:df:05:70:58:1c:0e:dd:ce:65:d8:32:2f:35:a3:db:34:
         c9:b4:5d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:15 2025 by rpki-client