Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
File:                     QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json)
Hash identifier:          4nsSoOS6Pu4ieSJh7rra3i1n0QaiM0I0Cn+SSRbX0Rs=
Subject key identifier:   ED:45:C3:BB:7E:A3:DA:C9:A9:B5:E5:07:1C:5F:97:1D:7A:6A:C5:A9
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Certificate issuer:       /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial:       0197B70E740F5D27BFF5741607AFDE12DC21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
Manifest number:          0536
Signing time:             Sat 28 Jun 2025 15:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:06 +0000
Files and hashes:         1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: rcSW2stX84W4/zGXhdhSGDZ/F2Hhlx4Z0+VaA9hZQyk=)
                          2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:74:0f:5d:27:bf:f5:74:16:07:af:de:12:dc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
        Validity
            Not Before: Jun 28 15:01:06 2025 GMT
            Not After : Jun 29 15:01:06 2025 GMT
        Subject: CN=ed45c3bb7ea3dac9a9b5e5071c5f971d7a6ac5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ef:32:3a:df:43:ba:ad:04:17:08:24:c6:a9:
                    db:53:42:7f:d8:f6:d0:d5:1a:f7:0f:45:9a:09:5f:
                    38:39:11:b5:80:df:cc:83:4f:77:4d:a2:79:16:1d:
                    fd:79:a0:9e:db:91:c9:ae:99:18:9f:42:fd:98:9d:
                    85:c4:8f:37:59:43:cc:f9:c0:0a:5c:ed:9a:eb:4b:
                    53:21:39:a2:a0:95:4c:45:74:f3:6f:55:a8:c2:27:
                    ce:12:a6:b7:a5:f8:89:a5:14:fa:8d:78:e4:e6:48:
                    90:69:1a:6e:4a:71:55:8b:7c:07:f0:b4:5a:4e:39:
                    ac:51:74:a4:18:1d:af:8e:81:0a:57:b5:c3:cf:8b:
                    3a:0d:b2:89:67:b6:a5:7e:f6:75:34:3f:84:c2:be:
                    4d:2d:93:8a:4f:51:b2:5b:c0:9d:1a:27:f5:1c:41:
                    e5:2c:c6:66:8f:7f:33:1f:be:44:1f:b3:db:4b:0e:
                    f5:0e:1d:88:74:e4:ca:68:de:bc:e3:7f:f2:79:e3:
                    0e:a3:3f:1c:73:76:ea:9b:82:24:1f:31:9c:66:c6:
                    8b:e5:98:3f:e8:27:76:84:bf:ee:64:e9:2d:b6:f6:
                    fb:1a:4f:2d:5c:bc:86:22:09:0a:be:af:a5:4c:b9:
                    47:16:ef:46:d6:ed:95:31:9a:5d:ca:30:31:f1:c9:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:45:C3:BB:7E:A3:DA:C9:A9:B5:E5:07:1C:5F:97:1D:7A:6A:C5:A9
            X509v3 Authority Key Identifier:
                keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b8:72:91:af:ae:7a:33:78:c9:b2:a0:d7:f2:9e:ee:7a:ae:
         aa:56:1a:68:96:63:2c:39:a4:68:91:70:a3:23:ca:97:4a:94:
         53:21:01:5e:1f:c4:d6:76:09:e5:94:c9:9b:ef:32:92:f6:c8:
         e7:c5:2f:e6:49:c0:ba:8c:93:e5:3e:70:8a:ce:56:3f:c9:d5:
         f1:b7:64:03:7c:4a:20:85:34:b4:ce:f3:e0:45:29:fb:69:1d:
         b3:6e:fb:58:6a:71:17:67:e6:99:bf:fc:92:1f:b5:22:6f:53:
         bb:87:b8:8d:a7:56:fa:4b:f4:f6:21:b4:60:17:e7:93:72:7b:
         85:f2:6a:c7:a1:ea:bc:a1:09:71:dd:7a:75:09:7e:e0:b2:a0:
         fc:6a:60:b0:d7:3f:90:4d:b1:73:f0:28:af:a5:45:a7:3b:89:
         5d:63:34:e2:ff:da:ef:03:60:5b:c6:19:69:5b:40:3a:3a:19:
         97:18:74:85:91:fd:04:18:c8:73:82:0c:45:b6:b4:06:c5:fa:
         5a:90:a3:9f:e2:7d:13:33:cd:d1:27:1e:31:05:73:27:fc:b3:
         3b:f4:0d:25:67:e1:3b:4c:49:2a:ed:15:e2:77:77:63:46:bd:
         05:eb:3d:58:1c:26:6f:59:d8:c4:24:98:a3:cc:d7:64:82:f4:
         06:32:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:02 2025 by rpki-client