Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          3YulftKwgFPUN66fY+xdDyiFNTdEeHSN8pbL1zkbm9A=
Subject key identifier:   F4:85:86:13:49:24:2A:9C:EA:1D:A3:59:CB:A3:88:84:17:2C:B0:A3
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       0196B935E94C9BEF1C525782CA769F71ED4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0BED
Signing time:             Sat 10 May 2025 08:00:40 +0000
Manifest this update:     Sat 10 May 2025 08:00:40 +0000
Manifest next update:     Sun 11 May 2025 08:00:40 +0000
Files and hashes:         1: 3vZog35fA7A8208htG6MPJHCfRQ.roa (hash: KjUP3VOXf2M5RM2RNCpzmW1mXhGa52pGMp/lPhjp9fc=)
                          2: BfHqfkHY1q4ldygRkcfv7XdzqLs.roa (hash: YbMXX/fz76OV1tIhHwhH/SEdCy/PTJDjaV1pgkgaZeE=)
                          3: CmIDNfzs3bSVgY-dfSu_0KvUwvU.roa (hash: zeJTsFwERYYSCRF2I3KzeFe/yJYCV+YH9obrNhlqeUk=)
                          4: XaQFQicfhG4nS73QjVCHMUwAPG8.roa (hash: vEWEx+WC0m8X0tM9GZ7AzmWSqkdHKT5bYqE12jvQZ1Y=)
                          5: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: vISww8XvId7LOFuwufmePSQ1EtvMn663XxMAPpHwXhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:35:e9:4c:9b:ef:1c:52:57:82:ca:76:9f:71:ed:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: May 10 08:00:40 2025 GMT
            Not After : May 11 08:00:40 2025 GMT
        Subject: CN=f485861349242a9cea1da359cba38884172cb0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:5e:0e:0d:e7:e8:3d:ad:bb:bb:d8:1c:d2:
                    a0:50:cc:e4:6e:5e:a2:43:82:09:f2:b2:36:54:b6:
                    e4:f2:76:d4:27:ff:35:9c:9f:4f:4c:22:6c:33:9a:
                    f0:1d:9c:62:3b:37:04:14:f7:6e:1f:e6:1d:2c:e9:
                    53:89:92:ca:f8:ab:bc:67:3b:66:8d:65:bd:80:2f:
                    37:95:b7:9b:77:90:4b:04:97:be:78:cc:28:ec:55:
                    59:b8:eb:23:3a:7f:de:e9:13:f8:d0:62:a9:e9:8a:
                    fa:49:e2:7d:c6:27:72:66:74:65:c5:76:22:21:4c:
                    e8:17:d0:6b:fe:a6:5f:8c:fc:ca:c6:46:02:9d:f8:
                    ad:c6:a0:ea:ac:b3:59:d9:f8:a2:b3:c1:e4:4e:2c:
                    fb:d7:20:72:b3:69:b1:cf:41:b3:9f:a5:c2:c9:59:
                    2e:8e:72:f8:ef:7f:1c:7a:57:59:04:ac:a9:4d:d3:
                    bf:4c:fe:49:16:5e:5e:c3:f0:e7:c4:65:74:48:80:
                    78:f0:05:8d:fe:be:7d:b5:d3:d9:02:a6:10:78:be:
                    e0:ff:ee:81:27:14:38:2d:f3:4f:b3:b0:67:35:00:
                    e8:3a:f5:6c:fc:2e:d5:44:bb:08:05:c6:9d:e3:ee:
                    f1:cd:5e:e6:c3:8c:93:61:ad:3e:45:ca:d6:33:6d:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:85:86:13:49:24:2A:9C:EA:1D:A3:59:CB:A3:88:84:17:2C:B0:A3
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:33:c6:d8:a4:7e:80:53:28:c2:2a:a7:ab:94:23:bb:b9:2d:
         f0:31:a6:b0:ac:1c:3b:b2:d1:bf:1b:bb:2d:e0:bb:52:bc:ef:
         3e:8b:d3:28:0f:59:01:1b:84:60:a5:96:90:b0:56:29:88:4d:
         cc:5b:23:10:9f:5c:ff:a5:0e:e5:da:cd:b0:28:2f:5a:f5:04:
         22:7e:55:6e:ff:25:16:77:39:8a:49:e6:2e:ef:f3:b5:07:55:
         ed:87:41:3c:b1:83:99:04:3e:be:7b:a0:05:79:7b:92:16:97:
         45:bc:44:7c:31:35:fb:b3:b4:cd:64:ba:f9:8f:37:98:03:c6:
         4e:33:9d:96:8c:48:7f:18:bc:c1:ce:00:6b:9e:22:6d:fb:cf:
         d0:24:9a:b3:13:33:67:d3:05:b4:b7:95:fa:91:a0:09:ef:3b:
         ad:52:09:1c:2e:b4:d4:8d:4c:a8:37:56:14:0d:2f:ec:f3:77:
         53:02:77:a2:51:bf:86:35:37:a9:26:00:92:71:ed:1a:8a:9d:
         09:54:8e:e9:ae:0a:ed:1c:85:ae:c4:ae:fe:e1:8f:99:dc:27:
         b2:c6:c1:dd:fd:63:a3:3c:19:f9:7a:8b:d9:5e:18:e5:29:0b:
         b4:c9:22:83:e3:3f:aa:2d:a8:3c:10:98:c0:12:66:b5:71:3e:
         5d:63:a0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:46:27 2025 by rpki-client