Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File:                     Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier:          KPwBBJGmEaSn+ETbmNxSwfbDGKbf1Fv6DTAPK4yOYZo=
Subject key identifier:   FB:A8:37:DE:65:C0:0B:A0:4B:52:05:C3:6F:17:31:73:BD:B6:14:A0
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer:       /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial:       0196C04A91178998959CA226A762A6D8551C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number:          0B25
Signing time:             Sun 11 May 2025 17:00:34 +0000
Manifest this update:     Sun 11 May 2025 17:00:34 +0000
Manifest next update:     Mon 12 May 2025 17:00:34 +0000
Files and hashes:         1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=)
                          2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: 4GQcB4Fnq2sqiw565JRCNXYKbI1OSn+gC6ItbRZMTXo=)
                          3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4a:91:17:89:98:95:9c:a2:26:a7:62:a6:d8:55:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
        Validity
            Not Before: May 11 17:00:34 2025 GMT
            Not After : May 12 17:00:34 2025 GMT
        Subject: CN=fba837de65c00ba04b5205c36f173173bdb614a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:0e:a6:74:f4:0d:57:3e:15:4b:46:cf:63:
                    02:d9:89:3a:33:22:0e:ba:15:70:d4:12:7a:3a:8b:
                    07:8a:47:02:91:bf:30:f8:55:6d:92:e6:ac:b2:15:
                    4e:80:db:e1:77:5a:72:91:a4:0e:00:ef:f9:74:eb:
                    51:e9:a2:4a:ac:ac:4a:14:50:67:d0:46:45:43:6e:
                    fd:3a:3b:eb:be:b5:48:0d:43:4e:e8:94:68:ca:2e:
                    46:6a:e7:25:b0:d4:5e:64:3c:03:7f:37:70:7c:ba:
                    4f:49:b4:d4:a7:9d:bc:76:f2:16:2e:f1:50:95:5d:
                    62:24:a8:a2:7b:16:79:de:4d:d3:4d:86:fe:38:9b:
                    36:c7:c9:cd:c9:3e:a8:28:bf:05:7f:b3:84:ad:26:
                    b8:4c:48:30:6a:66:21:ab:8f:7f:62:1a:37:69:a9:
                    a1:19:e4:16:96:e8:4a:d5:5d:b8:e4:93:7e:5f:bc:
                    6b:c8:58:d4:52:a9:6f:8f:cd:0f:67:62:ee:5d:e2:
                    7a:63:6d:8d:bc:9d:5a:67:fc:8b:cc:99:d9:af:e7:
                    c2:68:93:89:7f:96:6e:11:de:2b:7f:18:66:03:ef:
                    74:15:43:f5:73:3a:4d:64:c4:24:f0:77:b4:df:89:
                    79:2b:77:71:f0:20:4b:43:75:5d:ef:17:8e:e2:26:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A8:37:DE:65:C0:0B:A0:4B:52:05:C3:6F:17:31:73:BD:B6:14:A0
            X509v3 Authority Key Identifier:
                keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ea:b0:4e:f8:fa:37:09:d9:00:42:07:75:7d:47:a2:3b:3b:
         10:cf:b5:7c:0c:8c:bc:7d:c1:71:02:a7:53:31:18:62:07:a1:
         16:c0:6b:d7:40:d7:29:ce:81:e9:39:97:1c:a9:60:fd:40:1c:
         e1:8a:43:0f:af:c0:d6:ab:ed:40:61:e4:75:23:78:bb:c2:07:
         09:86:cd:84:8b:29:1e:f6:95:9a:31:a1:2f:23:7b:5e:e1:9a:
         1d:7b:a6:7f:5b:c8:5b:2e:0e:9c:7f:72:b1:0a:7a:d6:ad:aa:
         42:32:bf:de:4d:c2:9d:3b:fa:87:72:c7:dd:3c:ca:5a:17:dd:
         96:30:96:05:09:ac:93:42:5d:f1:3d:e9:a3:c6:30:fb:2c:3e:
         5e:1e:41:ba:c4:5a:fa:52:1f:ce:7a:29:18:13:a8:d1:f2:f5:
         4f:e4:d8:11:22:66:b1:48:27:19:9b:fa:70:1b:56:e7:4a:a5:
         76:e9:85:7b:bb:93:04:5f:58:fb:15:00:0f:57:9a:4e:31:a0:
         dd:ce:7a:f0:bf:03:fa:83:fb:ba:fb:19:8e:2a:08:58:a5:4b:
         29:33:7a:2a:7b:07:77:c0:b0:14:c3:f0:8c:75:a9:1f:e2:55:
         b6:d5:7f:7d:cf:1b:ae:93:17:ee:b2:0a:da:cc:df:96:a1:cd:
         62:13:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:00:27 2025 by rpki-client