Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File:                     qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier:          sD78Z5PNuPfzSh7Fe5BvU547GYkp2EoNA+sq7hlPefo=
Subject key identifier:   A0:01:14:97:20:E0:34:07:CE:5E:BD:D4:33:37:09:49:FF:DB:58:2B
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       0196A842B1246FE030B9507A1091EF7AA9B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number:          1530
Signing time:             Wed 07 May 2025 01:01:05 +0000
Manifest this update:     Wed 07 May 2025 01:01:05 +0000
Manifest next update:     Thu 08 May 2025 01:01:05 +0000
Files and hashes:         1: eJbWnZkdtB1XQP-lTQYo9NYwC8s.roa (hash: aCQl9JsB017Uw8/9Bsa0biyS5DV/TBIkVl+jSb6dD48=)
                          2: gLJC-FPMB6JG4uvuoXfj1y1VVB4.roa (hash: bJcY81wfY+5zVAZK4pJVEqgscj1+3rGIYBuBLom9f1Q=)
                          3: j51vgTDCax1tLhOyiZp4zqvzOKU.roa (hash: bN88IoNu8hIQldCCMN1vfnD2HLAoTn8gvr6w/tzj/KM=)
                          4: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: MRKwMQw7XKcKyJSdOMUHrWD/Y6egUnR6HstPod0J3lk=)
                          5: z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa (hash: rTNzicdR5UxEu+zSwQpGpaPQg7acnJ6eKVlTT5jJQ8s=)
                          6: zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa (hash: db5+QXNKRG2BQO2CHQMOqU0fUStvszTNPuMXFPPnliI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:42:b1:24:6f:e0:30:b9:50:7a:10:91:ef:7a:a9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: May  7 01:01:05 2025 GMT
            Not After : May  8 01:01:05 2025 GMT
        Subject: CN=a001149720e03407ce5ebdd433370949ffdb582b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:2d:13:a9:3e:b8:89:fb:6e:ae:e7:c1:90:
                    96:9a:86:d5:99:df:fa:16:50:76:dc:0d:3f:94:03:
                    6f:a8:ca:f2:31:5b:ee:b6:a8:cd:fb:b9:40:52:a3:
                    a0:2e:5f:b8:20:99:6b:bc:a3:47:b9:e0:63:9a:01:
                    85:bb:06:81:5c:5e:11:5c:a1:81:e2:6f:9f:e6:e1:
                    a1:33:f3:ca:cc:d8:29:cc:05:8f:40:cf:7f:6b:6b:
                    61:c5:fe:dc:ff:15:d3:44:70:bf:de:58:28:3a:8b:
                    5a:f7:a8:3b:09:97:ca:dc:ee:c2:a1:22:8f:af:cd:
                    1f:9b:e1:99:bd:78:3e:9e:42:e5:db:96:af:bd:56:
                    77:91:06:12:8e:7f:76:99:81:ce:d9:1f:fb:4a:8f:
                    88:30:1c:76:a2:c1:41:0d:d3:47:3d:98:7d:fe:76:
                    60:bc:15:98:fc:18:96:8d:63:6d:80:5f:b6:ee:cb:
                    d9:73:31:d6:cd:24:d4:0c:12:ef:5e:bb:37:52:70:
                    55:94:37:b2:1f:88:7b:4f:83:5d:88:68:42:94:04:
                    ea:dc:49:f8:85:76:6c:9a:ec:92:d6:31:ab:82:6b:
                    ad:6d:96:0e:7e:94:dd:0a:d5:a4:a5:15:63:37:a2:
                    fe:ae:0d:0c:aa:c5:6c:c5:b2:03:49:80:54:5e:b2:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:01:14:97:20:E0:34:07:CE:5E:BD:D4:33:37:09:49:FF:DB:58:2B
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a1:1b:9d:40:68:38:11:59:80:84:98:53:8e:ff:77:41:d4:
         88:4a:1e:0e:fa:65:c3:1f:f3:14:e3:f4:de:6e:80:57:a3:b4:
         92:0e:ac:80:d8:5c:f5:03:b8:02:da:43:87:ac:3c:58:05:12:
         e7:dc:ee:3d:74:74:1e:af:ed:08:21:d9:a9:95:94:da:53:e7:
         79:a5:ec:bd:0f:6e:bb:59:73:44:6f:84:a2:d8:76:af:42:42:
         07:7b:12:34:fd:b3:db:f0:20:98:9e:82:7c:4b:17:0d:52:49:
         28:62:36:15:22:dd:43:50:93:c1:a4:d4:d8:3c:f5:bb:c2:29:
         0f:27:3d:e6:02:ae:3b:4c:2f:1f:ca:3d:eb:69:df:4e:bf:0b:
         ae:ce:89:65:86:c5:6f:4a:92:ec:49:b4:6a:c6:b4:c5:f0:cf:
         d1:a7:fd:2e:4b:1c:85:a8:f2:4d:c8:e1:a9:96:40:fb:ca:55:
         7f:3c:be:8c:24:3d:7d:f8:c9:d7:7e:97:55:f7:8d:91:b5:aa:
         1d:a2:06:f2:89:2e:c8:78:d6:c3:40:b4:e4:c7:7d:08:12:c9:
         b4:74:de:92:4f:b9:0f:ad:17:60:b5:9d:6f:a4:51:13:9a:5d:
         6c:a4:4b:3d:94:5d:dc:55:b5:e9:ae:38:3c:a9:e1:71:e2:57:
         63:0a:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:04:05 2025 by rpki-client