Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File:                     QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier:          HmUQBGYAN9d3pLuPpxpaWoNVVZN5FaRS+36TZNqZsAo=
Subject key identifier:   A1:1D:7E:F9:10:7D:E1:43:05:B2:DA:F6:E0:A8:91:15:4B:AB:3F:26
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer:       /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial:       0196CE06533792F5163CD79DDAE1941B1999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number:          0E40
Signing time:             Wed 14 May 2025 09:00:42 +0000
Manifest this update:     Wed 14 May 2025 09:00:42 +0000
Manifest next update:     Thu 15 May 2025 09:00:42 +0000
Files and hashes:         1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=)
                          2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: 2qdmlk0zTGefmfHQxnWI01jJvPZ4RGiLXBwo4qnPvng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:06:53:37:92:f5:16:3c:d7:9d:da:e1:94:1b:19:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
        Validity
            Not Before: May 14 09:00:42 2025 GMT
            Not After : May 15 09:00:42 2025 GMT
        Subject: CN=a11d7ef9107de14305b2daf6e0a891154bab3f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:2a:27:b2:b9:02:74:b3:56:dc:6b:c1:1f:
                    3b:16:94:04:28:ad:56:9d:86:59:34:0b:67:d1:2c:
                    44:76:c3:79:af:8b:dc:70:40:c9:03:81:05:4b:50:
                    46:64:24:0c:4e:e8:c4:d7:fc:4f:a6:44:1b:77:18:
                    27:6e:98:62:eb:be:50:7e:1d:e2:06:d4:10:e4:44:
                    e6:ed:b1:5e:c2:5c:c6:68:d4:ff:29:5b:e1:42:3d:
                    f9:ad:b3:82:26:53:9c:5d:5a:b5:fb:2b:5e:e8:f5:
                    78:33:a4:f8:6c:2b:f3:6b:ed:4a:f7:63:f5:f8:0c:
                    df:b8:c3:d7:4d:57:a9:12:37:f0:96:16:00:6d:d6:
                    b0:66:31:38:5f:b5:95:e5:19:e7:1f:50:28:ed:69:
                    64:6d:07:13:fa:87:7a:b5:e1:b1:27:84:a2:3f:11:
                    a9:a1:58:29:a2:4f:5a:6b:c2:11:9d:ae:5f:54:73:
                    ba:40:7c:0b:39:42:3a:b2:19:51:bc:fd:d1:1b:a3:
                    be:ee:2d:47:b9:0e:7c:af:ed:db:c2:7b:14:db:d9:
                    7b:b2:3c:4e:f9:49:e0:0a:0d:e9:b4:dd:4d:4d:4a:
                    4d:9a:03:be:93:fe:d6:f2:dc:11:98:23:6b:b5:15:
                    c7:5c:94:e9:dd:bb:70:2a:22:64:d5:38:6f:98:fd:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:7E:F9:10:7D:E1:43:05:B2:DA:F6:E0:A8:91:15:4B:AB:3F:26
            X509v3 Authority Key Identifier:
                keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:56:e5:de:f3:76:ce:5c:69:3b:75:df:44:7c:e0:95:b0:2e:
         b5:2d:c1:6d:51:c9:5d:94:c9:f8:6a:ae:bf:0b:7f:cd:77:56:
         fa:ac:46:e8:5c:55:e3:56:55:b4:d0:ae:20:f1:32:4e:49:9d:
         66:28:b2:a1:ea:eb:67:83:1f:1a:25:85:20:5d:e9:da:68:d8:
         b6:f7:9f:8d:72:aa:5a:3f:b2:c0:87:84:ec:a7:38:1d:7a:7c:
         da:d9:07:be:0b:5c:d5:ec:2d:e6:c5:54:c5:26:81:71:f7:9c:
         5d:68:99:93:75:25:90:86:02:12:33:cf:52:c1:43:88:80:9d:
         fd:98:6f:b5:a7:f7:0b:15:13:68:95:94:d0:51:50:00:a2:e5:
         76:c5:0f:33:d1:92:2d:e3:af:6f:b2:7e:89:ae:4b:c9:87:2f:
         14:47:8d:7a:c2:40:ea:00:c8:92:9e:aa:30:66:bb:1b:6a:5b:
         c3:a8:47:14:55:80:2c:18:83:63:f4:77:c3:87:b3:49:6c:99:
         24:f7:70:64:d9:28:1b:d1:4a:97:7d:ad:c7:55:fb:fd:07:6e:
         50:de:2a:f1:82:2a:01:4e:8e:a1:67:50:2c:cd:4e:b7:0f:ab:
         7e:21:60:42:ec:58:0f:ff:f8:17:3a:7f:da:05:40:7d:93:cd:
         15:25:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:02:22 2025 by rpki-client