Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File:                     Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier:          n+yo8CF8hjtY8J6zePm/Tynj5PVExACrgk3k+DApp2w=
Subject key identifier:   6C:6B:7F:17:54:30:87:8C:15:8E:8C:20:C9:A2:22:02:44:55:FB:AA
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer:       /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial:       019677C389CACED10E6D012401903C534C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number:          0413
Signing time:             Sun 27 Apr 2025 15:00:25 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:25 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:25 +0000
Files and hashes:         1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
                          2: OGowf2WEKM-skig3VJkvUQd-0gk.roa (hash: l4GHRqUF3zigOregk/7osWSfttuJS7LG0PoEdo83VPY=)
                          3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: qMi9wTmycn6tHspQtPd6FORABfSs+98UsDu4ArYjAPg=)
                          4: eZIEFgBJU4XMsDODJF_Qh5daqig.roa (hash: QB6Ap2HopDkfiGK/ll+DE26kM8PVZ0ppQSxKwCrTbr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:89:ca:ce:d1:0e:6d:01:24:01:90:3c:53:4c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
        Validity
            Not Before: Apr 27 15:00:25 2025 GMT
            Not After : Apr 28 15:00:25 2025 GMT
        Subject: CN=6c6b7f175430878c158e8c20c9a222024455fbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:76:be:73:26:ae:c6:ef:4a:78:21:62:a4:
                    74:6c:c9:7f:4f:08:90:fc:b1:0e:d4:6e:49:9a:37:
                    ff:24:5a:f7:8b:93:bf:e8:7e:4f:e6:2d:b1:fd:16:
                    58:53:c4:eb:a9:7d:4d:a1:08:40:42:7a:12:26:cb:
                    ee:dc:82:1e:82:ab:63:47:9b:0e:32:d0:a7:84:6d:
                    d7:b9:c2:e9:3a:e8:e9:a0:c9:01:9f:26:16:ba:20:
                    43:50:39:4a:94:ae:eb:e3:fb:36:27:53:e2:c5:0c:
                    6a:13:a8:9a:04:95:74:50:2d:dc:cc:11:23:c3:b2:
                    5e:f3:8c:54:2f:26:2e:6f:33:5d:d9:3d:f0:a7:02:
                    03:f8:57:8d:43:51:d0:61:f7:1d:8a:bb:0b:af:18:
                    6e:a4:48:a0:2d:07:ad:00:24:8a:e8:66:94:14:28:
                    ad:76:8b:5b:6f:8b:c2:31:ee:30:57:2a:62:11:26:
                    5a:0d:3f:fb:53:ec:c1:99:63:bd:26:25:bf:cc:96:
                    64:d7:2a:06:89:86:35:ce:8d:ca:5b:cd:78:07:d9:
                    83:c4:16:be:62:ba:16:50:98:45:8e:7c:80:15:73:
                    ce:d9:ea:ce:2a:47:f3:ba:45:0c:92:be:52:4d:a1:
                    c6:d9:dd:01:f2:16:d9:23:0f:d0:c8:33:d4:db:17:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6B:7F:17:54:30:87:8C:15:8E:8C:20:C9:A2:22:02:44:55:FB:AA
            X509v3 Authority Key Identifier:
                keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9b:d9:0f:35:a0:54:7e:5f:59:17:4f:10:c7:8b:61:3d:65:
         23:d8:9a:a9:91:92:97:24:ea:e9:82:8e:5c:a3:07:56:b9:4e:
         ff:8a:c3:55:0b:51:d3:0f:43:7a:49:7d:2e:75:b7:71:90:0f:
         04:0b:6f:00:34:93:f2:66:fa:62:0d:13:d8:93:1f:7d:dc:1c:
         01:12:ce:87:07:19:99:26:11:45:fa:72:00:de:ee:14:8f:3a:
         85:09:9e:ab:77:4d:53:7b:e9:4f:01:a4:f5:6c:15:6c:29:64:
         94:b3:f1:20:bc:46:08:06:e2:28:56:f9:9a:e6:9a:6d:43:1b:
         2d:94:0f:40:04:fd:29:15:01:2d:d5:01:17:1b:d2:38:4c:b2:
         f1:eb:a9:54:11:b1:db:0a:22:63:09:7c:dd:20:30:6c:ff:5f:
         e6:66:ff:6e:45:a8:2f:6b:c8:5e:d6:eb:ad:40:25:85:c1:aa:
         80:5c:fa:c6:af:49:1a:05:a7:51:af:12:4d:7a:38:6d:82:19:
         ff:bc:08:fa:68:7a:de:0f:db:0c:c1:b0:1c:09:e7:8f:3a:e0:
         a5:cf:7d:58:5a:f3:b7:88:ba:4b:8a:50:18:6f:7d:08:04:c8:
         0a:1e:d4:e3:b0:44:e9:93:da:2b:4d:8d:48:8d:b5:a7:53:b0:
         d7:ff:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:39:29 2025 by rpki-client