Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File:                     1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier:          mVvynpd1UvNu34vC2uzy5w993H6xsZ2VOO0x6isFlDY=
Subject key identifier:   F3:1E:5C:22:C7:C6:64:13:15:1B:52:28:F6:5E:60:DC:5C:48:60:D5
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer:       /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial:       0196CC182872766ADDE36D0ADC702843AA4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number:          07A1
Signing time:             Wed 14 May 2025 00:00:57 +0000
Manifest this update:     Wed 14 May 2025 00:00:57 +0000
Manifest next update:     Thu 15 May 2025 00:00:57 +0000
Files and hashes:         1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: n+0zC2cAZHqarM5dMMc0UlPXzEohoZLqCscf8eRiK4Y=)
                          2: QM4jYEK7EtYY_E1d1aEgohaHu7E.roa (hash: qeF4D524grzc7fut+xWXsFCBjhJ1D13zM5qUNVlhkHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:18:28:72:76:6a:dd:e3:6d:0a:dc:70:28:43:aa:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
        Validity
            Not Before: May 14 00:00:57 2025 GMT
            Not After : May 15 00:00:57 2025 GMT
        Subject: CN=f31e5c22c7c66413151b5228f65e60dc5c4860d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e5:78:93:01:f6:17:63:66:13:3d:e6:f0:a5:
                    20:dc:21:37:24:f9:9d:33:ba:54:c9:0d:84:d5:7a:
                    5c:8b:25:e5:ab:9f:25:27:c4:41:de:d1:c1:0d:a2:
                    de:11:53:4a:28:bc:69:41:fc:54:ba:28:d8:80:ab:
                    54:3c:a7:37:07:54:03:50:b8:07:13:a3:68:04:89:
                    3d:0c:d9:46:49:7a:2c:ac:4e:bd:9d:76:cd:ce:0d:
                    63:ae:8d:8e:a2:93:04:f2:9d:9e:d0:a1:93:b7:39:
                    cb:14:2c:65:c2:b4:ba:43:9b:60:57:9c:e7:10:c1:
                    87:ae:f4:8b:2d:b0:6c:53:e6:6a:29:fd:f9:b1:de:
                    20:e1:4b:5a:8e:3b:44:ed:81:68:c5:b0:f7:c2:14:
                    43:f5:3a:1a:aa:d4:f8:50:27:41:82:55:7f:e1:51:
                    06:34:51:5d:11:3a:c1:ff:48:d1:52:80:7a:6d:41:
                    76:1c:ee:e2:d4:d8:46:e2:ba:79:38:20:cd:21:57:
                    80:a8:e7:f9:c2:d3:aa:62:3d:12:51:11:91:8b:82:
                    87:e0:0d:f1:8e:c8:0f:9f:73:f3:17:7d:54:22:bc:
                    cd:cb:64:73:ed:3c:1e:75:c2:ee:95:6b:b3:54:7f:
                    c3:c4:0e:e3:dc:25:8f:a1:5c:fb:ae:40:f4:a2:04:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1E:5C:22:C7:C6:64:13:15:1B:52:28:F6:5E:60:DC:5C:48:60:D5
            X509v3 Authority Key Identifier:
                keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ae:a3:c1:20:ee:ce:48:6c:73:2b:80:68:d6:11:26:6b:ec:
         8c:e3:98:dd:38:01:26:e3:37:59:98:1b:5b:03:83:e6:d7:8a:
         4f:5b:7b:f5:f2:12:ae:ff:7e:9b:79:7a:08:06:c6:a2:8f:a9:
         3d:74:e6:06:51:a5:69:2c:0c:3a:d9:9e:63:2d:1a:67:94:af:
         1a:3f:23:75:3f:07:5b:b4:cf:85:73:73:1d:85:6e:fb:8a:45:
         6b:08:9e:55:1f:27:09:55:4d:c8:f6:ec:37:7a:cc:48:93:e5:
         12:eb:2d:19:e0:bf:17:c9:bd:9e:f4:1d:b5:a2:fd:01:92:9f:
         53:e8:7f:9d:a5:dc:d6:ac:9c:8c:be:41:cd:10:33:e5:6c:b0:
         1d:1e:5d:15:09:a5:d1:36:8b:82:6e:ed:c9:60:41:02:c9:cf:
         31:ff:67:1f:2e:04:89:f2:87:b8:57:8c:d5:6d:7e:ca:f2:81:
         ec:37:d6:18:3c:63:35:a3:2d:5a:f2:2e:48:b6:e4:d1:3e:97:
         c7:cc:93:92:1f:ac:6e:0e:50:02:92:53:49:ec:a9:3e:d6:c0:
         e8:c6:6e:6f:19:5c:40:07:66:9a:55:09:5b:38:6f:80:fa:d4:
         30:b3:c4:76:41:c9:e9:5c:b5:45:ce:fc:30:37:84:14:fa:84:
         5d:7d:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:50:49 2025 by rpki-client