Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File:                     qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier:          GzldEwBSMISxS7PeNNf35CB3NuItuRcj9WLVLVx6UfA=
Subject key identifier:   38:1D:05:FB:87:F4:78:E9:87:99:86:8E:B3:0C:0A:39:70:E9:81:3B
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer:       /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial:       0196B1EA7276746BB69A62A6E0AD5A44744A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number:          152E
Signing time:             Thu 08 May 2025 22:00:53 +0000
Manifest this update:     Thu 08 May 2025 22:00:53 +0000
Manifest next update:     Fri 09 May 2025 22:00:53 +0000
Files and hashes:         1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=)
                          2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: 1rgWy1c9PutePsdGnc2brox3cNUOnw30y1pU0rXknfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:72:76:74:6b:b6:9a:62:a6:e0:ad:5a:44:74:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
        Validity
            Not Before: May  8 22:00:53 2025 GMT
            Not After : May  9 22:00:53 2025 GMT
        Subject: CN=381d05fb87f478e98799868eb30c0a3970e9813b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:97:28:e0:ae:bc:fb:05:9b:e8:d2:ac:37:
                    21:42:08:ea:df:d6:75:30:e6:63:a0:87:ff:60:af:
                    f2:4a:17:77:13:9f:06:8e:19:b7:fa:bd:94:bc:81:
                    1d:75:db:ad:ca:da:1a:78:0b:6a:0f:01:8f:3b:cc:
                    5f:4f:02:ad:35:36:2b:8b:e9:b5:99:9d:52:9b:e1:
                    bf:14:81:db:a8:c2:49:82:6b:c5:ae:8f:ad:79:a4:
                    16:24:f1:fa:64:3a:1a:e1:90:bd:73:c1:13:23:da:
                    b3:eb:dc:94:c8:e3:e6:6f:99:e2:04:92:de:d6:78:
                    7c:cd:65:b1:9a:82:5a:68:6e:63:a7:a4:ed:6a:e8:
                    0e:7d:ca:44:af:96:a7:60:1b:35:fd:11:eb:49:f4:
                    2e:4f:4d:fb:96:b2:a9:40:1d:36:18:ba:91:12:ac:
                    31:ee:28:0e:b3:80:b1:82:4e:17:04:85:dd:20:1e:
                    29:74:07:07:10:35:5c:03:0a:36:7f:92:85:d5:b3:
                    b5:f9:4c:cf:00:8e:45:ff:6e:c2:92:7c:e7:12:f8:
                    e7:51:b4:38:72:34:87:3d:9f:f9:cf:da:12:64:a9:
                    76:1f:bc:41:37:c3:cc:c6:c1:d7:f9:08:01:c7:7e:
                    7a:8d:8a:b6:14:e5:c6:6b:2d:41:64:b1:0a:c9:e6:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1D:05:FB:87:F4:78:E9:87:99:86:8E:B3:0C:0A:39:70:E9:81:3B
            X509v3 Authority Key Identifier:
                keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e1:6a:8d:3b:77:2f:bb:46:a9:1d:70:7b:4a:00:c4:c0:f0:
         5a:91:c3:bb:b4:4a:28:16:f5:ab:e5:ee:66:fe:93:ae:66:df:
         07:69:03:b4:c3:d9:a8:c5:33:89:a0:65:aa:ad:f9:a1:b9:f4:
         fe:8b:f9:df:f4:2c:4d:81:a4:8c:45:1f:42:5c:69:87:70:6c:
         e6:41:de:70:88:15:de:b4:40:a3:f8:e8:4f:98:47:b1:5a:af:
         e4:16:01:3f:67:92:bd:15:9e:38:7c:59:85:72:82:3e:10:c5:
         3c:ae:84:fc:44:4f:39:f0:d9:c6:cb:71:0a:31:02:cc:11:8c:
         31:56:a8:d2:c4:84:cf:8e:44:a7:ad:cc:50:42:18:ac:42:54:
         34:88:e0:36:37:b2:77:17:1e:9b:79:f4:ff:56:4b:1a:bf:90:
         3b:71:2e:e1:d4:b4:95:08:27:c9:5a:4a:f3:7c:37:12:0a:fa:
         a1:70:78:c9:00:27:22:b0:a3:aa:99:d2:22:bb:5e:be:ef:6b:
         cc:3b:ea:d9:0d:e4:6d:e0:95:66:7c:27:28:32:18:ee:be:c7:
         ef:ed:0e:ac:d4:0d:cd:43:45:3e:45:07:3e:69:3f:f6:d2:c6:
         98:69:b5:9e:b7:25:02:6c:eb:2d:f3:c3:59:4c:d5:75:23:81:
         19:6e:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:34:45 2025 by rpki-client