Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File:                     QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier:          /vPgWSCtIzad5XV7B+WyhDKC8igAsYfObpNIWU1NKso=
Subject key identifier:   81:63:FD:26:32:CF:CA:57:BA:54:3E:97:01:BD:05:F3:C9:03:03:AE
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer:       /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial:       0196B7B540943C091B53970DB557220EAB13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number:          093E
Signing time:             Sat 10 May 2025 01:00:31 +0000
Manifest this update:     Sat 10 May 2025 01:00:31 +0000
Manifest next update:     Sun 11 May 2025 01:00:31 +0000
Files and hashes:         1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: /o5Nu1ExDbsrQ6gYEHjMaNg/63m0dWzzUrEGAzHzUHs=)
                          2: dmWwMKmVtBjrQ943YS9mH5Wi3ME.roa (hash: prLT1d+yXEMIyzM51qGGgQHR5qaRcSsmNt9aZioq8kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:40:94:3c:09:1b:53:97:0d:b5:57:22:0e:ab:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
        Validity
            Not Before: May 10 01:00:31 2025 GMT
            Not After : May 11 01:00:31 2025 GMT
        Subject: CN=8163fd2632cfca57ba543e9701bd05f3c90303ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:a3:23:e2:c3:3d:50:a5:d9:8e:4d:83:0e:
                    5e:b0:b6:68:f3:45:d5:82:12:fb:9a:47:c8:6a:28:
                    af:ef:bc:d4:b8:16:bd:83:e8:28:51:9f:1d:2a:48:
                    d0:68:47:40:f5:c2:f1:a8:64:f3:d9:b4:92:42:6d:
                    2f:be:60:17:ee:16:c9:de:47:7a:0d:f7:75:dd:29:
                    c5:b5:d8:db:ee:fb:fa:2e:02:e5:9b:08:10:d4:36:
                    01:43:f5:1f:3a:6c:9b:b9:d1:ea:1a:fe:dd:16:1b:
                    18:b7:34:3f:10:8d:e9:3d:17:42:cf:c0:b8:c0:78:
                    09:07:64:87:37:cc:fa:08:33:76:b8:6a:e9:7c:03:
                    ca:e2:b5:b0:44:43:e3:2e:d6:94:4e:3f:1c:25:3c:
                    b0:8e:b5:fd:a0:26:a8:33:26:04:e1:e4:5e:d8:78:
                    9a:60:4c:d4:cd:94:d7:34:7c:06:ac:b8:92:23:19:
                    6a:e5:cd:d7:8c:39:4c:42:d5:1c:51:9d:9d:f9:c0:
                    66:a3:36:73:09:e0:27:45:72:d1:a2:dc:e5:7f:38:
                    e6:eb:03:62:78:34:d2:c1:76:fa:ea:de:95:69:1b:
                    f7:1e:af:22:f3:c5:73:aa:9b:88:99:5f:4a:d0:b2:
                    01:56:cf:ef:49:70:9e:00:25:e4:17:18:4e:b3:d2:
                    c1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:63:FD:26:32:CF:CA:57:BA:54:3E:97:01:BD:05:F3:C9:03:03:AE
            X509v3 Authority Key Identifier:
                keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:55:1a:3e:11:77:5d:2b:b2:02:ef:c7:7f:44:64:6c:1c:
         02:82:df:9c:4e:9e:e6:95:8d:74:20:2f:c3:51:a5:9d:18:42:
         ec:86:c2:36:c8:16:54:39:75:21:f0:ac:63:93:9b:f0:85:c9:
         11:3d:45:a6:74:c2:36:2d:43:df:3c:86:71:6e:54:99:0e:2e:
         0b:10:e3:37:f9:38:8b:4c:32:5c:db:f1:b9:64:9e:3f:52:93:
         03:c4:5b:eb:9e:5e:27:d0:50:86:f8:a8:86:14:65:4b:0b:49:
         55:a7:5f:f2:aa:eb:b0:bb:fa:0a:2f:5f:9d:aa:0e:ef:87:cd:
         b0:95:57:0a:ce:ba:98:0d:f3:f3:89:7b:32:bd:d8:83:08:53:
         77:40:ea:fa:47:a1:03:fb:67:73:93:26:bd:9a:77:fc:24:c9:
         ed:c6:31:45:68:7f:41:ea:27:50:86:11:e2:c2:d9:21:13:58:
         db:32:12:72:b9:bd:da:a2:78:ce:23:24:19:72:dc:0d:f1:58:
         90:58:a2:33:c9:c9:ee:08:3e:ee:ac:b3:b3:95:af:69:fd:42:
         42:e1:f6:47:c1:d6:c7:cb:5f:68:94:b9:10:43:26:54:3b:78:
         b3:08:94:af:2e:9e:9f:4b:a5:1a:75:98:10:1e:ac:e6:2d:26:
         e9:f4:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:21:02 2025 by rpki-client