Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          i48riO4c/4yZEDcTt6Fz++tGdRqpcrkGWFBfo+niqYE=
Subject key identifier:   44:6E:90:57:0C:E4:9B:A0:1F:97:E2:4A:01:2A:B0:CD:60:B1:D9:6D
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       01967643089D3E769D6F6BBDB778ECE3C3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          10EE
Signing time:             Sun 27 Apr 2025 08:00:26 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:26 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:26 +0000
Files and hashes:         1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=)
                          2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=)
                          3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: YFhSxobLyvuJr2z2eN9pIalehKbbNVxQPtGzJalKwSI=)
                          4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=)
                          5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=)
                          6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=)
                          7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=)
                          8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=)
                          9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=)
                          10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:08:9d:3e:76:9d:6f:6b:bd:b7:78:ec:e3:c3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Apr 27 08:00:26 2025 GMT
            Not After : Apr 28 08:00:26 2025 GMT
        Subject: CN=446e90570ce49ba01f97e24a012ab0cd60b1d96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:51:fb:37:2a:c7:e0:dd:68:3f:ae:13:04:
                    b1:b4:ae:53:6c:59:ab:d9:f7:de:98:94:9e:3a:08:
                    2d:48:ce:6c:b4:a8:25:5b:7a:55:25:2f:11:25:00:
                    1a:58:02:ae:25:41:f9:9f:d6:22:66:e7:81:55:89:
                    1f:08:f9:7b:9c:de:ff:23:c4:b9:76:7c:31:af:07:
                    68:f0:3d:54:42:a2:6c:60:7d:c3:54:60:c9:27:52:
                    cd:0d:39:be:29:05:c4:ca:ed:d8:dd:36:32:4b:fa:
                    b5:dc:c5:79:10:a0:4f:76:a4:c8:09:c4:ee:60:e1:
                    31:d4:c5:d4:c7:3b:78:de:97:da:f3:f7:62:5e:69:
                    03:23:b4:6d:db:5e:df:fd:aa:49:dd:07:b3:1b:88:
                    ac:91:5b:ca:bd:29:3a:63:ce:53:e4:21:a6:f2:ba:
                    51:f0:a9:0d:a9:28:a8:03:1e:41:25:a6:a2:ae:d0:
                    0a:ad:0e:29:a2:19:8c:9b:43:3e:00:04:20:2b:a1:
                    8a:43:52:b7:ea:59:f5:7f:40:38:11:83:8a:de:1c:
                    77:3c:03:bd:92:a8:bd:59:4e:ed:7e:24:4c:d4:95:
                    86:93:5f:0e:60:fb:46:0d:75:82:e3:67:f7:00:87:
                    63:32:2c:98:c8:d5:d7:7d:21:44:b3:db:c7:74:2e:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6E:90:57:0C:E4:9B:A0:1F:97:E2:4A:01:2A:B0:CD:60:B1:D9:6D
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:26:af:34:e5:7b:91:53:59:8c:d2:ad:b2:58:83:28:27:20:
         88:b0:f6:38:60:7a:13:f9:c7:5d:62:71:03:5d:7b:eb:3b:8a:
         df:72:a4:9c:51:35:9b:7f:e2:4b:74:be:11:cf:54:e9:d2:b3:
         48:6d:dc:75:ca:2e:aa:59:62:7c:54:64:4a:a8:fe:dc:dc:b1:
         2c:9a:fa:34:4a:f9:3a:e9:72:89:ec:0a:b6:0a:52:da:a1:32:
         2c:e9:56:a5:82:5f:e3:f8:c8:fc:77:a1:2c:4d:f1:18:e1:0b:
         d7:0a:a0:fb:83:35:03:93:83:49:fd:03:b1:bf:f2:9d:11:57:
         4a:51:0b:01:53:8d:de:a4:55:d1:04:e0:31:d1:1a:15:ba:ec:
         31:16:10:ee:a9:c3:9f:25:05:54:02:dc:76:cb:50:c6:3c:34:
         e3:a3:ec:72:61:fb:1d:6b:c8:bb:09:5a:79:2c:30:40:02:e2:
         18:2c:9e:a5:18:69:2f:76:9b:bd:78:23:56:b2:c0:cc:0b:32:
         05:cf:2d:13:59:c4:47:b0:56:e3:a4:3f:ce:6c:9a:57:1c:8e:
         9d:92:75:11:3a:6a:db:dc:2a:b4:b7:f4:21:8b:bb:1c:ab:78:
         be:31:16:2b:72:8f:1d:75:5b:26:b8:5d:2a:01:92:5f:ec:e9:
         4e:b2:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:22 2025 by rpki-client