Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
File:                     qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json)
Hash identifier:          0PB02kuN4E2+NwsqGgvmlYXdixLIr8d/KPMkqE2IKWo=
Subject key identifier:   39:12:2A:43:0F:03:99:C1:5C:AF:37:38:07:B8:EC:02:A4:A9:F5:0E
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Certificate issuer:       /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial:       0196835A09C9179000FE45F82A0002E8F4F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
Manifest number:          14D6
Signing time:             Tue 29 Apr 2025 21:00:38 +0000
Manifest this update:     Tue 29 Apr 2025 21:00:38 +0000
Manifest next update:     Wed 30 Apr 2025 21:00:38 +0000
Files and hashes:         1: HXTmIJpOXUBrZETa5KpoNsj5ios.roa (hash: wT1yK/NZUtAafpXAtOvFbXEAE831pb+X4Lo1DKNHxx4=)
                          2: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: WNYaOr8TH1u/5KoMIeNvXzIEC/q5EEkOsUmMYQIiGDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:5a:09:c9:17:90:00:fe:45:f8:2a:00:02:e8:f4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
        Validity
            Not Before: Apr 29 21:00:38 2025 GMT
            Not After : Apr 30 21:00:38 2025 GMT
        Subject: CN=39122a430f0399c15caf373807b8ec02a4a9f50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c2:8f:54:0a:bf:f3:aa:c8:68:ac:e7:d7:26:
                    e4:ab:9a:32:ee:7f:72:f3:70:8e:fb:12:b2:a5:7d:
                    1f:59:7c:d8:28:8b:82:7c:ae:44:e1:1e:d4:7e:6d:
                    5a:5d:ad:67:f9:7e:90:b2:12:b1:74:dd:cc:b0:c1:
                    40:ae:bb:5d:bb:44:b7:cb:2b:12:0c:83:a4:f4:a2:
                    22:ee:8b:1a:e1:fb:ed:06:bb:aa:c6:6c:6a:eb:c6:
                    5c:66:58:57:5d:f4:7f:44:0a:5d:00:96:2b:84:3a:
                    a4:73:31:e8:f5:11:09:d0:7a:33:81:19:79:19:f0:
                    f5:73:e5:d7:2a:27:0e:11:aa:b2:f1:cf:0b:00:87:
                    e8:71:4b:45:dc:13:38:07:9e:2f:6a:cb:37:5e:24:
                    ff:ce:40:a9:64:f0:db:5c:bf:a4:ab:a5:ea:17:0f:
                    da:4f:91:56:08:89:9f:a0:ca:5e:b7:af:96:cb:e7:
                    c5:d7:c2:0b:d3:f8:b4:88:dd:e1:b7:9b:63:98:ee:
                    d0:a6:72:3a:91:1d:9b:45:f1:f5:2b:b1:a2:3c:ec:
                    a1:83:2c:76:a0:e2:7c:20:08:ee:76:a6:5a:ca:51:
                    c7:12:3c:fb:d2:8f:c3:83:83:72:3e:fa:d6:fc:31:
                    0c:8d:26:13:02:fc:4f:65:b5:79:56:29:c5:92:ea:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:12:2A:43:0F:03:99:C1:5C:AF:37:38:07:B8:EC:02:A4:A9:F5:0E
            X509v3 Authority Key Identifier:
                keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9e:7e:b1:43:03:fb:62:a1:8d:1e:aa:2d:18:8e:34:f4:b4:
         7f:84:74:f9:88:97:fa:7e:5d:a4:c4:d8:2c:a6:be:e9:a3:a0:
         41:9d:cf:c3:96:8e:f5:a4:f4:ce:10:3a:53:45:d9:c1:87:e2:
         a4:70:8d:77:30:44:9e:1c:04:40:65:86:6a:b1:e4:76:b2:37:
         19:4c:51:df:14:fa:aa:28:27:64:0b:f2:dc:51:37:0c:c6:4e:
         d4:2e:8b:ac:5a:3a:4c:d3:77:e1:28:24:ab:ea:42:86:95:a1:
         65:75:36:f6:ac:61:bc:ce:de:42:25:07:c6:c9:65:dd:dd:ea:
         56:1e:ce:59:6d:04:37:74:f6:fb:3a:05:b6:5c:15:f6:f0:f7:
         b7:e9:ad:81:b4:e9:83:ac:5d:22:1d:40:1f:0a:50:5c:7b:f2:
         6a:0a:8d:4d:aa:34:df:db:94:5a:b0:c6:23:5c:9d:c0:d7:60:
         6f:dd:94:8d:4b:ff:c1:4f:1a:7b:ef:0c:24:33:8f:e2:ea:6e:
         7f:c3:3e:f0:ad:52:34:a7:28:ea:75:96:14:6a:f9:03:66:19:
         e8:d1:02:28:52:90:30:87:70:17:79:73:88:67:4f:5c:9c:17:
         4a:3e:0a:f9:5a:0f:17:13:e4:4f:98:45:69:f5:35:36:61:ea:
         c0:31:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:48:56 2025 by rpki-client