Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
File:                     QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json)
Hash identifier:          l+OP5AOoicJ83TgL/RnnNPWEpLJqKjyPql9+Lg9mxnM=
Subject key identifier:   B6:F1:09:C2:9C:C5:3C:D9:CD:A2:47:AF:BE:0C:0D:74:48:B6:9A:25
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Certificate issuer:       /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial:       0196BF6F7DA6552E4BC00E06814E66C80832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
Manifest number:          0BAF
Signing time:             Sun 11 May 2025 13:01:16 +0000
Manifest this update:     Sun 11 May 2025 13:01:16 +0000
Manifest next update:     Mon 12 May 2025 13:01:16 +0000
Files and hashes:         1: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: Ygh3POPWb/85GYCJi3ZiwTotQWykj3PasV41ZJqpJj4=)
                          2: f9PiBsdXGMaiketrG3G5PjbB6oI.roa (hash: OKMBW/Wn+8xzvLZOORxBkZ/Gr6+Ikl3rSLUfT+IRWSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:7d:a6:55:2e:4b:c0:0e:06:81:4e:66:c8:08:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
        Validity
            Not Before: May 11 13:01:16 2025 GMT
            Not After : May 12 13:01:16 2025 GMT
        Subject: CN=b6f109c29cc53cd9cda247afbe0c0d7448b69a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:f5:03:dc:2a:16:91:27:40:d7:3a:45:15:
                    1f:87:a0:b3:c3:cd:79:79:1d:ef:9b:cb:ff:d5:ef:
                    10:bd:0e:3c:6f:7f:d8:5b:3a:4d:1b:61:47:c9:56:
                    ec:21:15:65:91:d3:94:6f:5a:b3:2a:43:26:e4:e5:
                    20:c5:90:c3:5b:84:1c:d6:e1:78:b6:22:5e:a6:80:
                    38:0b:0f:eb:67:38:ae:1f:e4:76:cd:2f:a3:3d:d7:
                    d2:7e:c6:36:ac:aa:e2:a5:6a:b2:39:97:ca:cf:0b:
                    92:36:15:f9:52:06:a8:e0:ad:9d:a2:dc:c9:9d:21:
                    bd:ed:e3:18:ff:b4:8e:9d:ca:33:67:db:d9:4e:f7:
                    02:7b:4d:64:c3:9f:86:fb:98:47:c7:01:04:fe:ba:
                    22:16:1d:ab:b8:4f:ee:06:8e:8a:72:77:e9:5c:12:
                    8c:d4:b7:6f:5d:26:be:7f:83:02:4b:cf:3b:2d:07:
                    fd:9d:a2:50:c4:fd:36:4f:e8:f0:85:01:d6:d0:53:
                    3a:bc:88:cb:4b:28:c9:bf:cb:32:22:92:96:b8:78:
                    e9:4f:9e:de:52:52:83:4d:9a:e3:35:1c:19:e7:db:
                    d7:67:a0:1e:3e:e6:88:66:2e:7a:4b:b0:6b:fa:86:
                    8a:8a:c4:3e:f3:b1:8b:23:b2:1c:0b:71:e6:22:4c:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F1:09:C2:9C:C5:3C:D9:CD:A2:47:AF:BE:0C:0D:74:48:B6:9A:25
            X509v3 Authority Key Identifier:
                keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:03:7d:a8:b5:57:46:15:62:81:23:b8:35:81:8a:7b:bf:
         74:7c:d7:01:23:3d:c2:c3:2a:15:8c:f7:c5:c5:b0:b7:b7:63:
         b2:40:b9:54:7a:f3:84:32:e9:d4:94:44:cc:b8:f4:4f:9c:67:
         f2:e1:e4:76:f4:38:dc:cc:f8:25:82:f4:73:8c:e0:2f:3f:fc:
         bb:99:23:0a:ee:c9:50:f8:fe:3c:27:42:c7:19:05:ef:af:7b:
         d3:37:de:02:2e:43:8b:99:24:9f:5f:cd:3c:2e:cc:88:d1:66:
         88:5b:ee:da:59:b6:65:87:f8:64:d0:e1:06:6c:bc:e4:c7:cf:
         16:a2:e9:74:2b:6a:fb:89:ad:b9:e1:ed:13:88:c0:4a:14:4a:
         32:c2:e6:be:fa:02:2e:a7:ac:d5:15:89:ff:2c:82:35:78:03:
         5d:82:e6:4d:3d:be:3f:ac:93:15:7d:67:d3:c9:50:da:8e:27:
         f6:df:a0:ed:6b:00:60:b1:e4:88:98:ff:af:36:8b:59:be:ab:
         4e:d7:dd:b6:8f:f9:57:ec:c4:42:36:fa:74:8f:9a:83:ea:c2:
         b2:2c:28:b6:30:2f:fb:5a:f8:f8:66:41:53:ee:45:ef:fb:42:
         6f:18:1e:68:bc:71:d6:fc:64:a1:53:7c:cd:f8:35:4c:98:4a:
         06:13:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:17:39 2025 by rpki-client