Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File:                     QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier:          20JQHo2jqkvQ5er9iZyxL2yT4bN8BnlL27b86r+ZNdY=
Subject key identifier:   50:52:7A:65:B7:5E:D3:B9:A0:BE:1E:EF:36:40:7C:A8:B9:21:26:07
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer:       /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial:       0196CC4E7CFF950693989E8D83FC80A04D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number:          51
Signing time:             Wed 14 May 2025 01:00:17 +0000
Manifest this update:     Wed 14 May 2025 01:00:17 +0000
Manifest next update:     Thu 15 May 2025 01:00:17 +0000
Files and hashes:         1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: /AGD3Cc7h5SKf8QOAEME1qoZmC6VdUowc9JksIgHjOg=)
                          2: WibstNWW6k-lvYl4Qh5sNtmSYhw.roa (hash: E/2K/0j7Ly/9Z6jM3FsBVp9MBphb1aZ9lSBmqs0GOgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:4e:7c:ff:95:06:93:98:9e:8d:83:fc:80:a0:4d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
        Validity
            Not Before: May 14 01:00:17 2025 GMT
            Not After : May 15 01:00:17 2025 GMT
        Subject: CN=50527a65b75ed3b9a0be1eef36407ca8b9212607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:4b:b4:fa:1a:11:06:3c:dc:7a:e6:0e:37:
                    52:08:b5:ed:4a:e4:45:c2:83:1d:c0:37:06:20:a8:
                    b6:7c:d6:e6:b4:d8:6e:6e:b9:3e:72:91:9d:71:e8:
                    19:54:70:16:56:ed:53:ab:7e:a2:68:19:56:d5:26:
                    3d:be:8f:a4:d6:b8:95:72:80:38:1e:51:9b:fd:57:
                    09:a6:a5:2c:99:89:4a:a2:ca:f5:f4:28:5b:2b:bf:
                    ef:b9:80:06:14:52:04:fe:1b:10:c7:62:3d:67:d7:
                    b8:7c:1c:be:64:aa:69:c1:42:1a:0b:29:45:93:0f:
                    eb:98:34:d4:36:8a:e4:98:9b:d5:ae:9d:8b:80:72:
                    7e:a8:1c:2a:c6:da:c4:fe:a0:61:38:8d:80:2f:0b:
                    dc:3e:d2:bd:36:24:88:3b:40:ad:db:6e:70:da:64:
                    b5:a4:7d:32:d3:29:30:6b:76:e1:49:3f:52:32:21:
                    6c:48:a4:d3:5d:35:59:5a:ed:51:42:37:df:d9:63:
                    70:bf:1f:56:a5:60:98:1a:28:ca:e3:93:23:2c:da:
                    26:26:8a:aa:fd:25:8e:c7:38:c1:70:08:ad:63:d9:
                    52:f5:ab:2d:ee:48:38:db:07:f5:84:e6:22:77:72:
                    3c:48:f5:c2:ad:c8:8d:2c:00:60:52:6e:1e:62:a7:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:52:7A:65:B7:5E:D3:B9:A0:BE:1E:EF:36:40:7C:A8:B9:21:26:07
            X509v3 Authority Key Identifier:
                keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:7b:2c:ff:c1:4f:a7:df:d9:9d:6e:be:18:08:cb:ca:66:42:
         18:1f:6e:d6:cf:09:34:d2:68:e0:70:ef:c9:c7:6e:3e:d9:8c:
         cf:96:01:b5:54:a3:35:6a:a5:de:64:a8:ef:d5:ef:9b:c0:8d:
         ff:92:d3:76:01:97:2b:e4:18:ac:e3:1c:e9:13:71:c2:be:91:
         6c:f8:a7:e5:89:aa:46:b4:31:4d:fa:dc:f2:94:22:d4:d9:50:
         bf:15:d1:90:c8:9d:1a:ef:35:f9:66:37:b2:5a:c4:4a:f0:30:
         dc:06:bd:fd:9a:14:3a:a5:d1:9e:7c:c9:f9:ae:9b:71:55:ac:
         17:16:52:81:56:63:22:e0:2c:c6:e5:2c:7e:5e:64:43:39:ff:
         4c:43:61:27:ed:ad:98:de:05:7f:8b:b1:d9:ee:71:a6:ce:5d:
         3f:76:22:b2:b5:08:07:3d:b2:c3:41:eb:87:6e:af:04:fa:c2:
         cf:88:6b:2a:91:7e:9a:7e:de:47:07:08:95:86:2b:e7:9f:a8:
         75:cf:21:1b:e6:ba:d5:c6:61:d7:e6:13:19:ab:60:24:0d:8c:
         48:3a:65:3b:d5:82:a1:a0:90:b9:6f:c1:2f:82:1c:22:3b:4c:
         5b:75:68:21:1f:39:bf:06:17:1b:19:f4:bc:4d:95:cd:06:2a:
         11:72:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:57:21 2025 by rpki-client