Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
File:                     4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft (raw, json)
Hash identifier:          ESROhdTr6KaP50IZL9XEdGiUI+o3iQSVv5NpKUJLt30=
Subject key identifier:   3F:41:AC:F4:F8:CC:2A:5D:74:03:CD:83:BF:0B:0C:14:F4:36:9A:DF
Authority key identifier: E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA
Certificate issuer:       /CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
Certificate serial:       0196CB72BAB086082A3AFA0204B7DBAEDE3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
Manifest number:          059C
Signing time:             Tue 13 May 2025 21:00:15 +0000
Manifest this update:     Tue 13 May 2025 21:00:15 +0000
Manifest next update:     Wed 14 May 2025 21:00:15 +0000
Files and hashes:         1: 4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl (hash: k+BpIXuewnluRFXWBrVUP2v94XsQD9CAxOVviFqy/6Q=)
                          2: _Yxsd0eiDHHGuFhmQURGYrs_Tng.roa (hash: nE0pyzNZgsvFiQ/2XuRBIkiIZVx/tCbJehUAtaFFq7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 21:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:72:ba:b0:86:08:2a:3a:fa:02:04:b7:db:ae:de:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a75ef9036f5c143e57dfafbc92c0255c3159ba
        Validity
            Not Before: May 13 21:00:15 2025 GMT
            Not After : May 14 21:00:15 2025 GMT
        Subject: CN=3f41acf4f8cc2a5d7403cd83bf0b0c14f4369adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:32:ea:b3:86:96:df:cb:9a:b6:6b:7e:ae:
                    7b:14:b5:56:89:d6:e0:28:6a:e0:4b:18:69:8f:32:
                    99:46:2f:ad:ea:04:4a:fe:df:83:eb:21:f4:d6:86:
                    d7:7b:54:34:cb:0e:25:d7:b4:9b:9c:60:04:02:4f:
                    c2:04:0f:25:ac:70:b5:8c:90:25:22:ba:34:32:27:
                    f1:59:3b:fe:09:e1:18:33:75:1e:b5:3b:4c:fc:fe:
                    e1:c8:25:fc:4b:e9:32:89:0f:7c:df:86:c9:b6:31:
                    9a:89:de:ee:3a:77:84:37:f8:e1:1e:c4:17:d1:5f:
                    83:cf:a4:3c:a7:b0:f3:57:f0:df:25:e5:b6:d1:4a:
                    d3:a4:d3:92:11:30:b1:d1:0c:c6:2d:74:8d:4e:25:
                    ec:a6:c5:26:17:10:06:57:fe:6c:94:55:cb:14:44:
                    b6:fa:14:e2:9d:a4:49:aa:28:04:18:75:3d:cb:6a:
                    f2:55:ef:0e:08:f5:61:dc:94:80:83:49:fb:f0:80:
                    a2:fc:4e:ca:4b:bb:7e:22:f2:69:00:1a:29:ad:ec:
                    1f:8e:4e:34:0e:91:2d:b8:c8:7b:ee:21:37:3f:9b:
                    08:76:c2:ef:d7:5d:b2:b9:af:1b:9f:cc:a4:6c:13:
                    21:ae:21:62:4f:7e:c0:80:ec:1d:96:20:03:bf:b1:
                    04:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:41:AC:F4:F8:CC:2A:5D:74:03:CD:83:BF:0B:0C:14:F4:36:9A:DF
            X509v3 Authority Key Identifier:
                keyid:E2:A7:5E:F9:03:6F:5C:14:3E:57:DF:AF:BC:92:C0:25:5C:31:59:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qde-QNvXBQ-V9-vvJLAJVwxWbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d4d411-9966-4291-aa59-f90850e74296/1/4qde-QNvXBQ-V9-vvJLAJVwxWbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:8a:e2:8d:bc:3c:94:2d:63:10:15:8b:fe:3d:3d:53:40:
         fe:6c:eb:ea:d2:ec:1a:e8:6b:2e:0f:f7:8c:fd:37:04:f7:fa:
         ca:7c:fc:62:21:e0:76:c2:ef:7c:10:d0:a1:69:01:98:58:e1:
         a5:28:e0:da:06:02:10:b3:21:30:f9:c4:48:09:f9:96:5c:b3:
         b6:94:c8:f8:b8:ef:74:b6:88:3b:6e:47:03:6f:d3:06:ff:ca:
         09:4a:3c:46:5f:e7:0c:b8:f9:81:9e:5b:53:23:29:da:24:88:
         5f:5c:57:e7:df:43:22:3b:68:ce:92:19:6e:ab:11:20:68:b5:
         f3:b0:7f:70:1c:b2:6b:3a:4a:9b:0d:7e:18:91:45:c0:39:62:
         a0:fa:1c:f8:05:4b:f8:8b:c8:bd:17:39:d5:8a:83:9f:28:71:
         93:08:6e:2a:fd:14:94:ee:7e:84:e3:65:54:fe:fc:f4:7a:1f:
         ba:e0:be:2a:f8:65:fa:1a:6f:c5:db:55:c8:9c:c1:32:4d:c4:
         03:34:7c:2f:d1:7d:8e:1e:e9:84:71:7b:3b:34:48:f1:c8:02:
         5d:7c:cb:dd:00:d9:97:26:0a:8e:67:96:e2:59:19:e3:67:46:
         5e:66:63:9d:87:08:43:0d:8d:dc:5b:ea:61:e6:44:ca:9e:58:
         c6:6f:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:05:35 2025 by rpki-client