Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
File:                     QH75-Xcjo9WiGTasNNMZl_JWHrk.mft (raw, json)
Hash identifier:          EciChsJIc6OgF6SOnNhLClbDbjat7uiPGHH38rS+i5Q=
Subject key identifier:   57:BD:E6:4F:E3:39:5A:51:DE:7F:BC:50:51:FF:B8:20:10:FD:07:E6
Authority key identifier: 40:7E:F9:F9:77:23:A3:D5:A2:19:36:AC:34:D3:19:97:F2:56:1E:B9
Certificate issuer:       /CN=407ef9f97723a3d5a21936ac34d31997f2561eb9
Certificate serial:       0196C2A72E036D566652DA9A16D3E40282DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
Manifest number:          0C16
Signing time:             Mon 12 May 2025 04:00:58 +0000
Manifest this update:     Mon 12 May 2025 04:00:58 +0000
Manifest next update:     Tue 13 May 2025 04:00:58 +0000
Files and hashes:         1: QH75-Xcjo9WiGTasNNMZl_JWHrk.crl (hash: OwJYT+GsGkQSH2PCGKRFJbm9W589OTuZ+jVFFfYl9UQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a7:2e:03:6d:56:66:52:da:9a:16:d3:e4:02:82:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407ef9f97723a3d5a21936ac34d31997f2561eb9
        Validity
            Not Before: May 12 04:00:58 2025 GMT
            Not After : May 13 04:00:58 2025 GMT
        Subject: CN=57bde64fe3395a51de7fbc5051ffb82010fd07e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:99:d5:2e:69:64:32:59:14:4f:6c:f3:b7:51:
                    07:fb:a5:37:33:15:fa:43:f2:05:88:36:13:1d:bb:
                    fb:94:b1:99:76:bf:ad:c6:47:80:df:98:9b:70:4b:
                    72:7f:e1:10:e2:37:18:a3:85:d0:e4:2f:c7:bd:8c:
                    b7:5f:2d:7a:06:a8:c6:e2:03:6b:ce:54:4c:78:4f:
                    27:ab:91:a5:9a:29:eb:06:37:69:c5:ac:53:4b:22:
                    55:d7:34:2f:66:24:ce:55:f9:4e:0c:80:d1:c1:9c:
                    ca:8f:9c:c2:06:fa:5a:99:01:62:9a:3d:c5:ef:ca:
                    f7:d1:aa:5a:05:e5:d5:bd:65:ca:1d:02:8f:56:1b:
                    2a:d2:2a:3c:47:56:ee:52:00:43:d0:5c:e0:eb:ab:
                    43:5d:fe:96:83:7f:7e:f8:cd:c1:88:c1:fc:20:a4:
                    f9:80:bc:8b:61:5c:33:80:5b:58:36:27:2d:a7:f5:
                    33:c6:f3:88:5c:3b:d9:72:3f:6b:d4:47:6b:b4:45:
                    d0:80:29:00:de:0e:6a:97:bb:d8:cc:0d:2e:5a:60:
                    dd:b0:12:d5:13:8a:3a:80:26:c3:7d:31:31:c7:1a:
                    5f:e9:8b:47:69:12:e2:02:69:54:0e:bb:61:18:e1:
                    f0:4e:7c:d8:38:5d:e3:28:89:ec:e6:88:58:a3:80:
                    78:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BD:E6:4F:E3:39:5A:51:DE:7F:BC:50:51:FF:B8:20:10:FD:07:E6
            X509v3 Authority Key Identifier:
                keyid:40:7E:F9:F9:77:23:A3:D5:A2:19:36:AC:34:D3:19:97:F2:56:1E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:43:5c:ad:67:0d:64:7f:36:37:60:5c:43:95:46:bb:01:21:
         49:56:1a:7f:c1:b1:f6:55:dd:d8:3e:d1:32:21:9f:be:f6:c3:
         5e:32:5f:52:df:5e:97:18:88:0e:52:ac:6d:81:c3:98:e5:74:
         a3:2a:69:64:71:27:44:98:d8:08:d2:93:3f:00:69:0b:04:e6:
         3f:d5:3c:56:32:16:46:4b:2f:fd:d2:5f:fa:8d:66:c1:02:c2:
         72:d7:c2:04:33:6f:45:27:75:26:94:02:d7:92:9b:64:61:1f:
         e9:01:e8:ed:9b:25:f7:e7:46:cc:4a:52:d4:08:a4:9b:00:c2:
         95:b7:61:74:55:b6:f1:b5:dd:d9:ab:d8:95:90:2d:20:14:8a:
         75:05:a4:80:47:1e:c4:7c:5f:8d:ac:2b:37:0b:1d:6f:14:ad:
         86:17:e1:ad:b2:5c:d0:e1:67:bc:e9:bc:f1:9e:2c:fc:63:85:
         ca:6b:2b:be:a8:00:96:e5:cd:1c:0e:3b:3d:5c:38:49:31:da:
         8b:19:25:76:9d:17:73:58:67:d7:52:79:93:49:29:ed:98:fe:
         39:9a:29:3d:ec:cb:f8:2b:45:7a:d5:69:86:b5:ae:7e:9d:7f:
         2a:bd:94:0c:d6:ff:80:14:fa:18:60:f7:8b:f7:c8:59:a5:9f:
         8b:36:21:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpy4DbVZmUtqaFtPkAoLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwN2VmOWY5NzcyM2EzZDVhMjE5MzZhYzM0ZDMxOTk3ZjI1
NjFlYjkwHhcNMjUwNTEyMDQwMDU4WhcNMjUwNTEzMDQwMDU4WjAzMTEwLwYDVQQD
Eyg1N2JkZTY0ZmUzMzk1YTUxZGU3ZmJjNTA1MWZmYjgyMDEwZmQwN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5nVLmlkMlkUT2zzt1EH+6U3MxX6
Q/IFiDYTHbv7lLGZdr+txkeA35ibcEtyf+EQ4jcYo4XQ5C/HvYy3Xy16BqjG4gNr
zlRMeE8nq5GlminrBjdpxaxTSyJV1zQvZiTOVflODIDRwZzKj5zCBvpamQFimj3F
78r30apaBeXVvWXKHQKPVhsq0io8R1buUgBD0Fzg66tDXf6Wg39++M3BiMH8IKT5
gLyLYVwzgFtYNictp/UzxvOIXDvZcj9r1EdrtEXQgCkA3g5ql7vYzA0uWmDdsBLV
E4o6gCbDfTExxxpf6YtHaRLiAmlUDrthGOHwTnzYOF3jKIns5ohYo4B4FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe95k/jOVpR3n+8UFH/uCAQ/QfmMB8GA1UdIwQY
MBaAFEB++fl3I6PVohk2rDTTGZfyVh65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUg3NS1YY2pvOVdpR1Rhc05OTVpsX0pXSHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lMWNlNDAtMjRlNy00MDRjLThlMjQt
OGQ2NmU3MjA0MjFkLzEvUUg3NS1YY2pvOVdpR1Rhc05OTVpsX0pXSHJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9lMWNlNDAtMjRlNy00MDRjLThlMjQtOGQ2NmU3MjA0MjFk
LzEvUUg3NS1YY2pvOVdpR1Rhc05OTVpsX0pXSHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkNcrWcN
ZH82N2BcQ5VGuwEhSVYaf8Gx9lXd2D7RMiGfvvbDXjJfUt9elxiIDlKsbYHDmOV0
oyppZHEnRJjYCNKTPwBpCwTmP9U8VjIWRksv/dJf+o1mwQLCctfCBDNvRSd1JpQC
15KbZGEf6QHo7Zsl9+dGzEpS1AikmwDClbdhdFW28bXd2avYlZAtIBSKdQWkgEce
xHxfjawrNwsdbxSthhfhrbJc0OFnvOm88Z4s/GOFymsrvqgAluXNHA47PVw4STHa
ixkldp0Xc1hn11J5k0kp7Zj+OZopPezL+CtFetVphrWufp1/Kr2UDNb/gBT6GGD3
i/fIWaWfizYhdw==
-----END CERTIFICATE-----
Generated at Mon May 12 07:47:13 2025 by rpki-client