Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
File:                     qqng6Jg9netBVxbWHoyRJRCibCQ.mft (raw, json)
Hash identifier:          JkG/YUcklYLyGeQzNSXIt/6HlfrUYArXoi9QEXKOnwY=
Subject key identifier:   C3:5F:A0:71:3D:A7:79:2B:FC:48:F4:89:21:4D:D7:52:1C:DC:7C:D2
Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
Certificate issuer:       /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Certificate serial:       0196BD49687AD694A9835A392DBE5C3CE0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
Manifest number:          79
Signing time:             Sun 11 May 2025 03:00:26 +0000
Manifest this update:     Sun 11 May 2025 03:00:26 +0000
Manifest next update:     Mon 12 May 2025 03:00:26 +0000
Files and hashes:         1: qqng6Jg9netBVxbWHoyRJRCibCQ.crl (hash: FFfq8V0w6U+jWgLgBhF1qeDjI4LHGVDVINjdohakfnI=)
                          2: wSW6JHry9aEuEbZj9sUvZUmXDYs.roa (hash: chgjDOS+AVkY8OsmOxsnvb6k6+1kPmgvTXMxVKADzP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:68:7a:d6:94:a9:83:5a:39:2d:be:5c:3c:e0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
        Validity
            Not Before: May 11 03:00:26 2025 GMT
            Not After : May 12 03:00:26 2025 GMT
        Subject: CN=c35fa0713da7792bfc48f489214dd7521cdc7cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:91:04:70:8c:6b:7a:f6:82:d2:48:b6:5b:
                    1c:8d:34:2b:14:11:4b:d4:0b:52:06:1f:78:f1:1b:
                    59:8a:0e:45:85:70:7d:df:13:f6:4c:c1:6b:cb:04:
                    f6:b0:47:a9:c6:96:44:5c:64:6c:d3:02:5f:f6:05:
                    60:b2:e7:78:db:e9:96:31:66:3e:36:cb:b6:ac:ea:
                    6a:88:75:12:05:38:38:02:ba:6d:70:5e:e5:fe:3f:
                    c2:83:be:43:b3:b2:1e:ea:00:64:f4:5d:de:88:6f:
                    95:9d:8d:98:bd:38:40:85:c2:ec:c8:59:90:78:23:
                    58:a5:7b:ac:9d:be:44:33:16:01:56:e5:bd:ca:db:
                    d3:90:96:bf:2f:e7:3b:db:24:ab:3a:cc:95:e1:18:
                    f4:71:75:75:9a:11:93:f5:9b:32:28:9d:4e:ec:e4:
                    35:9d:28:0f:81:3b:aa:87:31:e0:97:4e:20:c0:07:
                    e4:46:f5:c1:48:ca:db:6b:78:5b:6c:55:cc:51:1e:
                    a8:2d:81:64:5c:95:4a:a8:9e:bd:c3:da:9f:0f:47:
                    e0:f1:a5:ae:1b:79:41:2a:21:46:af:bd:35:00:79:
                    b7:72:72:1a:44:ad:17:a9:0f:a0:ca:df:e6:90:ce:
                    23:02:dd:e4:28:e7:98:52:71:6c:f6:a7:ba:73:55:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:A0:71:3D:A7:79:2B:FC:48:F4:89:21:4D:D7:52:1C:DC:7C:D2
            X509v3 Authority Key Identifier:
                keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:65:ff:cf:19:b9:97:74:dd:11:5b:da:40:42:12:3c:03:2b:
         27:ef:6f:0d:48:b0:9e:da:2e:d3:2e:b7:49:c8:7c:2d:18:90:
         b8:03:5e:27:db:7e:8f:17:ca:31:0e:df:c2:9c:e6:68:d6:49:
         76:54:de:a4:34:b3:cb:08:c7:db:8c:7a:2d:b2:d4:be:1a:95:
         38:0f:1a:c6:2e:d6:14:74:ac:86:c5:5e:ac:9e:de:2b:cd:0d:
         2e:fd:df:eb:04:aa:6c:30:c0:f5:8d:ac:ca:00:75:00:3c:e8:
         d1:6e:16:ce:6f:3c:17:0e:3c:60:32:23:f6:79:59:38:20:70:
         66:3e:7e:9a:8a:a6:f7:a4:7a:50:8f:4f:4c:fa:e4:bf:d4:8f:
         39:90:14:b9:9c:a5:3e:f3:17:9c:60:9f:ae:c1:f8:42:9e:aa:
         03:2e:6a:7f:ab:ef:3d:69:75:54:c8:d9:32:ba:28:18:7a:44:
         0e:3c:a4:68:a7:32:f2:1e:48:5e:ea:07:03:5e:82:05:27:d8:
         61:d7:73:f6:a1:4f:09:58:5e:10:df:77:73:46:dc:dc:fa:18:
         d8:02:1d:a2:30:57:6b:47:c7:e1:08:8d:08:94:95:f9:5c:04:
         43:2d:38:22:b8:3b:e6:45:51:7b:58:ce:14:ee:92:b5:3b:1b:
         ea:a1:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:01:54 2025 by rpki-client