Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File:                     QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier:          YKwDKHH5JXp3TpZefU/CI85jD3Vu5uHXe5hT5d6/il0=
Subject key identifier:   C2:55:E9:D2:F2:D2:8C:EA:D1:BB:10:6D:C2:04:E4:BD:3A:C5:88:62
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer:       /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial:       0197B5FBD32D94C347A3EA5C2A2B4D9D671B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number:          0762
Signing time:             Sat 28 Jun 2025 10:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:09 +0000
Files and hashes:         1: KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa (hash: AFMADJ+EdA++truR6oHaQkzeXGaM562uJumCeUqnVzo=)
                          2: MHGZA5Y3PVpWBImn85tARMZRftQ.roa (hash: bnJhZwRrO7KGALVUCy1om+i/htb3dvM6lJ1uAmGl2G8=)
                          3: O1UMqFY4UYla6Wia0-cx5UTbNYo.roa (hash: yk9XmbWdQVbHd1Fk+ePRsax442yqoQX1eANsND8ceoU=)
                          4: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: w0UdzUi3r7ex0KWVd7+Tfsf6GLEBwUxUeDme54H1w+c=)
                          5: TNSMUQvHGS8vGJs7QmyW0_jz86Y.roa (hash: qI6N5+Q6nkQDs5kBZ+Upq2gzqwGu3xE2kqSgmDsGATI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:d3:2d:94:c3:47:a3:ea:5c:2a:2b:4d:9d:67:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
        Validity
            Not Before: Jun 28 10:01:09 2025 GMT
            Not After : Jun 29 10:01:09 2025 GMT
        Subject: CN=c255e9d2f2d28cead1bb106dc204e4bd3ac58862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:d0:af:78:41:85:db:ca:7a:73:80:20:d9:
                    26:65:b2:8b:01:7c:39:fb:46:23:f2:06:ad:58:5b:
                    13:29:29:5a:3b:80:01:08:63:a1:19:b1:0e:0e:f3:
                    38:48:52:5a:24:72:c2:a3:f2:ce:08:1a:1e:a4:a7:
                    23:e6:33:77:2d:8a:b7:84:e2:60:d2:e3:a5:e7:88:
                    0d:e4:f9:bc:81:3f:7d:06:7f:04:2e:3d:5a:10:a6:
                    aa:b5:b2:46:91:51:1d:39:0a:b7:68:c2:56:a6:e5:
                    87:22:e8:86:6e:50:59:5f:92:37:03:c0:2b:e4:71:
                    78:0b:9a:1a:e3:10:8d:fe:78:d8:a8:e3:09:08:05:
                    6f:f7:65:37:27:f2:49:16:19:31:6e:19:1f:81:d9:
                    03:b5:20:3d:11:4b:2f:d2:45:21:c4:49:e9:f5:cb:
                    e6:da:c7:b0:a5:26:2d:cd:1d:7d:73:62:f6:02:d4:
                    7a:67:64:04:2d:2c:65:a3:35:54:10:e8:b7:1b:96:
                    87:9d:fe:29:1c:dd:d0:7e:94:fc:8c:63:c4:77:57:
                    de:00:2c:e1:c5:0a:8e:4a:04:14:10:c2:d4:fc:68:
                    9c:3f:20:31:64:90:b6:61:57:16:3d:d6:59:f2:a6:
                    6d:1a:8d:ed:9a:5c:67:63:71:3a:b7:4d:41:4b:03:
                    22:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:55:E9:D2:F2:D2:8C:EA:D1:BB:10:6D:C2:04:E4:BD:3A:C5:88:62
            X509v3 Authority Key Identifier:
                keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:7b:0a:93:5a:4b:70:01:7a:07:cf:b8:7e:8c:2a:82:4d:
         85:eb:ba:de:ab:a6:37:46:ee:af:e5:42:21:7c:1a:a5:9a:3c:
         e2:9e:e5:4d:72:ce:6b:61:9b:0f:eb:14:76:d9:97:e4:92:41:
         37:36:0c:95:d4:fc:d2:84:e0:a5:28:2c:e7:36:5e:7e:55:0d:
         d6:d7:3e:ba:fc:72:f9:75:84:af:4d:07:96:1f:ac:24:27:01:
         ab:94:fd:36:8c:bc:e5:a5:cd:58:5f:26:6b:02:8f:eb:63:47:
         50:b8:fe:8a:0b:39:c7:8f:80:29:2f:3e:a9:24:27:60:c7:f5:
         df:4c:53:02:8b:fa:6a:b1:8a:44:5d:9f:92:4d:27:25:10:69:
         fc:e6:bc:bb:76:f4:46:a6:09:b0:ea:54:67:9a:32:f2:af:d0:
         90:08:8a:ad:77:35:e9:dd:f4:5c:ef:b5:57:ee:f7:c7:60:83:
         9b:ed:85:77:4a:c7:05:e2:57:38:5b:d0:b5:b2:1c:6a:d0:ee:
         e1:ed:bb:6b:b9:a8:04:ef:f1:0d:82:0e:eb:e4:35:21:89:54:
         82:6c:b9:a1:cc:cd:8b:31:56:3c:52:dc:f9:4d:d9:39:03:2c:
         57:47:79:60:2c:da:8a:2c:fe:31:16:df:1a:54:9f:47:b7:14:
         46:07:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:44 2025 by rpki-client