Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File:                     Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier:          J6pCy6qdfcBYRO61NxfBMVnQUbJjTmsNzEIVehKY7Jc=
Subject key identifier:   A9:3B:57:AB:52:C3:F9:7A:AA:7B:A8:09:59:6C:8A:BC:A8:9A:F3:73
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer:       /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial:       0196AB0C125D9B92F4DD22F9AF560E5940B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number:          14C1
Signing time:             Wed 07 May 2025 14:00:17 +0000
Manifest this update:     Wed 07 May 2025 14:00:17 +0000
Manifest next update:     Thu 08 May 2025 14:00:17 +0000
Files and hashes:         1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: Gq/+z/mu92NM+Gd5QuYRJvDezmu++Qtp9TNy3W22ToY=)
                          2: RhrEJBm06vcPBY7X0Je_fY5rgcI.roa (hash: 4yKx6aLoX0+QkHu1SlH9OK51/kRC6FYJDLkFroupLIw=)
                          3: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (hash: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:0c:12:5d:9b:92:f4:dd:22:f9:af:56:0e:59:40:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
        Validity
            Not Before: May  7 14:00:17 2025 GMT
            Not After : May  8 14:00:17 2025 GMT
        Subject: CN=a93b57ab52c3f97aaa7ba809596c8abca89af373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:4d:6b:5f:eb:70:a4:b2:44:1f:03:87:83:
                    49:57:b0:d0:c1:47:ed:90:42:f8:e5:23:f6:83:46:
                    40:60:8b:16:95:66:50:25:dc:a4:de:42:df:a0:66:
                    fa:a9:2f:eb:46:0e:3f:85:b3:30:37:78:ee:90:72:
                    83:37:03:c3:35:c1:ee:13:e3:69:ee:e1:c8:78:70:
                    92:3e:d9:21:2a:1d:55:bc:52:d7:bc:55:af:ce:d3:
                    80:0f:72:42:14:c0:c4:06:14:82:62:37:02:f0:9d:
                    78:5d:c6:9d:02:ea:a5:4b:a3:98:fd:9a:02:41:fd:
                    ab:2d:80:b3:ec:bf:ff:89:51:6e:5b:2a:8b:9d:c2:
                    bb:58:f9:8f:fc:67:1c:5b:6d:19:8c:58:bf:bf:43:
                    8e:d7:47:9a:ba:ad:67:38:26:0e:12:bd:7e:54:72:
                    fb:18:2a:b1:79:a1:1b:1b:8c:28:ee:b3:e7:b7:68:
                    5c:1a:6b:a6:9a:b2:ab:89:04:c2:b0:e9:15:fe:b7:
                    5a:fc:07:18:9b:b1:76:36:45:3f:00:98:31:56:b5:
                    aa:85:78:2c:e5:8a:79:24:45:3d:97:a2:75:59:39:
                    de:11:e6:03:e6:20:62:9b:c6:96:c0:0b:da:5a:a4:
                    ef:64:70:5c:dc:98:ec:7d:bd:dc:3a:9a:40:17:d9:
                    85:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3B:57:AB:52:C3:F9:7A:AA:7B:A8:09:59:6C:8A:BC:A8:9A:F3:73
            X509v3 Authority Key Identifier:
                keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8c:50:aa:26:7e:7d:2f:a5:86:d8:62:c8:e3:ae:1d:65:95:
         c2:ca:47:a0:38:3c:2c:aa:73:ce:da:8b:37:8d:56:e2:6e:16:
         a3:f3:3f:f9:d3:a7:13:e6:09:03:a7:b4:17:54:2d:7f:28:6b:
         36:85:2a:21:5f:17:4e:53:d5:a0:3c:30:26:a4:fd:49:b5:48:
         4b:12:11:1d:8e:e1:df:cb:1d:ce:04:12:48:07:53:7f:18:44:
         6f:c1:5a:59:a0:54:1a:3f:de:89:d1:12:8b:13:ca:2e:26:be:
         05:91:b6:7b:43:ad:5c:58:68:cb:c1:02:c3:9f:78:7e:f9:2f:
         6f:f0:bf:3a:ba:82:78:08:3c:4e:e8:fc:81:be:79:f7:f7:10:
         1b:84:44:a6:b2:ad:74:ce:a7:f2:d0:2d:c8:b2:50:19:50:04:
         0c:d6:b6:03:f7:82:aa:ba:a9:fd:19:ba:c2:77:68:c1:48:0c:
         4e:26:80:37:14:5d:b6:b0:70:50:14:14:6c:ef:1c:cb:d6:23:
         0f:4c:9e:13:89:53:88:b3:32:45:f2:c3:05:0f:4d:0a:74:92:
         c7:17:77:a0:5c:0d:d1:ac:61:b7:e9:fa:8b:1d:af:62:59:27:
         b8:ff:88:ec:45:f9:1e:8f:0b:14:56:cc:76:0c:02:ce:f1:af:
         a9:5f:ff:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:35:50 2025 by rpki-client