Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File:                     QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier:          S5OxK3f7fD/9D/QiOx8CvV5HGJKPlquycgiP7mqkwFg=
Subject key identifier:   52:9D:32:2F:2C:3D:8B:D6:B1:95:01:1B:28:32:54:C9:A5:88:92:10
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer:       /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial:       0196E4C51DA4DBFD513E40EC72564A9E0519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number:          12D4
Signing time:             Sun 18 May 2025 19:00:45 +0000
Manifest this update:     Sun 18 May 2025 19:00:45 +0000
Manifest next update:     Mon 19 May 2025 19:00:45 +0000
Files and hashes:         1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: goBXxPQ/E16MYNybzMF7gLHbpvU1BhBvmcAzZ7R5670=)
                          2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 May 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:e4:c5:1d:a4:db:fd:51:3e:40:ec:72:56:4a:9e:05:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
        Validity
            Not Before: May 18 19:00:45 2025 GMT
            Not After : May 19 19:00:45 2025 GMT
        Subject: CN=529d322f2c3d8bd6b195011b283254c9a5889210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:3a:3d:8a:0e:32:75:49:fe:c5:eb:7c:35:
                    d7:42:8d:f4:89:2d:e3:c6:b0:e0:d3:f3:66:9e:2d:
                    8b:45:7b:c0:c1:e5:32:04:da:ba:5e:e9:53:d4:d9:
                    72:c6:a1:40:cf:f6:65:d0:e6:cb:a8:31:eb:51:5a:
                    e8:aa:70:aa:c0:6f:c5:fe:78:01:e6:4b:42:98:21:
                    c3:c3:8c:fe:92:4a:e6:d1:7f:90:2c:0d:be:e7:7a:
                    15:a5:1c:b5:87:ef:5f:fe:39:3b:2e:d2:12:5d:3b:
                    e7:f5:80:b4:3e:1d:80:3e:f0:3b:a4:b7:b9:9f:32:
                    e5:c8:0a:f6:89:ea:53:c1:3e:9f:de:32:b9:9a:f4:
                    9b:5e:b6:03:78:be:f7:d4:78:35:19:90:30:67:10:
                    c0:57:9e:d4:bf:aa:d4:9c:45:68:6f:8e:4c:1e:9c:
                    bc:e8:b5:fc:c7:93:e9:c4:06:8a:7b:ef:de:e0:2e:
                    5a:bb:6d:d3:4a:ae:c3:44:25:a4:f3:8c:79:7d:5d:
                    39:af:fb:f3:69:d5:0b:74:ad:25:dc:b1:01:7a:00:
                    5a:9b:32:a8:05:cf:b2:80:a7:c1:01:bc:d4:57:fb:
                    03:c1:60:99:d9:ca:95:e7:f9:c6:29:ca:62:96:77:
                    d4:25:22:02:8b:e9:59:6c:a6:9e:d6:ba:aa:3c:3d:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:32:2F:2C:3D:8B:D6:B1:95:01:1B:28:32:54:C9:A5:88:92:10
            X509v3 Authority Key Identifier:
                keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2e:81:61:67:ba:e8:a5:54:ea:a3:1b:e8:3b:35:5a:c6:1a:
         36:2e:cd:fe:1e:99:a7:ce:87:f2:eb:e0:63:75:de:40:70:fc:
         3a:f1:17:ae:fe:f4:e0:e4:86:56:fd:66:f6:7f:85:14:b2:6b:
         9e:bd:a7:3e:d3:f9:b9:7f:fc:e5:4d:a4:52:2e:f3:e7:46:4c:
         bb:98:68:08:ec:f0:f7:b7:da:19:e7:6a:5e:3f:1d:11:84:18:
         e7:b4:14:ed:0e:47:e5:d9:fa:80:91:68:87:e6:61:c4:4e:52:
         59:b9:cc:99:b1:ad:7a:e0:91:c2:94:0d:cf:43:64:d7:bb:71:
         9c:5e:e9:85:a0:58:68:82:72:1b:85:7e:f9:5e:c7:96:15:21:
         c8:42:3e:5b:6f:8f:ce:e7:3d:27:f0:97:d6:de:2c:1e:07:34:
         c5:9d:8a:26:6f:b0:0f:b3:3f:f2:56:10:6a:cc:51:6b:a4:eb:
         66:7a:5f:46:7c:ab:38:63:19:cd:f0:12:27:01:e3:3d:a1:9e:
         27:df:8e:23:ba:05:c2:90:01:f1:5c:52:97:4d:69:7c:57:8c:
         60:60:d3:9e:99:a5:31:37:37:88:0c:62:47:73:98:1c:45:fe:
         e2:ac:16:10:c6:39:61:70:e8:41:99:ce:1d:5b:7d:06:6f:5c:
         f2:7b:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:27:24 2025 by rpki-client