Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File:                     QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier:          xCwgBos1hzM6QIwMo5O4OVJLk3vkTLh9hcOBa+lC0SI=
Subject key identifier:   EC:ED:2B:07:17:FE:AE:E2:1F:05:A3:AA:25:FE:42:90:CB:04:67:28
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer:       /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial:       01967F0F844DC88E387C9D781A0A259CDF48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number:          035F
Signing time:             Tue 29 Apr 2025 01:00:45 +0000
Manifest this update:     Tue 29 Apr 2025 01:00:45 +0000
Manifest next update:     Wed 30 Apr 2025 01:00:45 +0000
Files and hashes:         1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
                          2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: R7HTle7+DpIPLpOvqwrFH5LaAie+kMPxQg+dBXSG0iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:0f:84:4d:c8:8e:38:7c:9d:78:1a:0a:25:9c:df:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
        Validity
            Not Before: Apr 29 01:00:45 2025 GMT
            Not After : Apr 30 01:00:45 2025 GMT
        Subject: CN=eced2b0717feaee21f05a3aa25fe4290cb046728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:cb:eb:c1:de:85:30:c5:e1:76:04:c5:a7:
                    99:e2:02:5c:a9:75:9e:1f:6d:be:8f:48:18:18:0a:
                    8f:47:03:de:03:fd:be:07:35:2d:0f:23:22:80:b4:
                    55:f3:cc:ff:2c:01:00:9a:6b:47:67:11:c6:81:07:
                    aa:92:37:3e:63:50:e1:a1:d9:94:c5:31:96:b0:b7:
                    e1:ce:ce:95:57:8e:88:ae:87:f8:06:54:d1:87:97:
                    8f:4e:e5:ee:8f:07:8c:cf:88:38:17:8c:37:29:10:
                    00:3f:18:3b:81:ea:e1:90:01:6d:44:bc:94:9a:f6:
                    0d:5d:9f:d8:35:da:ef:98:da:11:ee:c7:e1:e2:ac:
                    14:3a:43:8a:ed:42:d1:04:fb:e8:32:db:3d:57:cf:
                    5e:8d:b0:a4:ed:e8:98:a4:65:d6:02:dc:6d:e8:c3:
                    5b:e1:a4:a1:3d:0e:d3:c7:96:16:54:a3:f8:ff:72:
                    2a:46:ff:26:77:a6:81:4a:f6:cc:03:2b:39:ed:a7:
                    7f:31:a6:27:a9:1b:03:e7:c1:57:9a:cd:9c:a3:f7:
                    67:ed:69:04:69:f1:84:b9:cc:12:95:9a:b8:ca:7f:
                    29:dc:77:a5:2e:4e:3c:97:de:ae:48:0c:3e:ca:07:
                    60:53:30:28:8f:3c:30:8b:4f:36:f6:ff:d0:b4:fe:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:ED:2B:07:17:FE:AE:E2:1F:05:A3:AA:25:FE:42:90:CB:04:67:28
            X509v3 Authority Key Identifier:
                keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f4:64:47:da:52:02:17:92:be:4d:81:c5:8e:5d:ae:d1:17:
         0d:ee:de:ab:58:51:98:9b:c4:a2:5e:80:fd:24:c5:63:22:50:
         09:d0:da:ec:8d:16:44:fc:af:3f:7d:ee:0b:ee:7a:57:32:bd:
         92:ea:e3:0d:ff:c1:40:08:fb:36:53:8a:a9:e9:d4:2b:20:3e:
         bc:d2:9c:94:3c:cf:05:47:5a:2a:82:53:d3:6d:f9:c9:ab:8a:
         a7:cf:10:ce:ab:18:66:61:67:88:f9:3c:f8:5b:20:31:e0:64:
         c4:f8:0f:a1:25:cc:b4:86:cd:d5:b0:ad:1c:f1:50:fd:24:88:
         e4:e1:c6:3d:84:94:70:27:90:1a:27:03:8c:5b:25:7f:7b:78:
         75:c9:06:c7:e7:7b:31:cb:53:38:9b:59:d7:d8:40:55:aa:63:
         b0:7b:60:84:89:67:53:93:61:d2:65:19:80:a7:ad:c0:2d:02:
         52:85:8c:7a:55:53:b6:fd:2f:ea:d1:1c:60:e6:e7:30:9a:3f:
         20:c5:2f:e8:b7:28:72:c6:3c:10:20:cc:6a:36:8f:a0:3e:6c:
         f6:0b:03:bb:57:5c:50:38:85:a9:1e:c0:bf:60:82:c0:a9:36:
         9f:de:a9:e4:1b:47:f5:ec:08:2e:f8:61:f0:ac:d2:78:cd:3d:
         3a:9f:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:02 2025 by rpki-client