Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          NMulvi3Pc84NTe8TdKaZOh6IMk12GYFQflcleVbP3zs=
Subject key identifier:   AF:84:EB:2B:08:CE:CA:3B:1C:A4:01:FA:1B:A5:DE:A3:0E:CA:B3:66
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       0196A42E69FF0487714AF6E72417598CA2E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          0122
Signing time:             Tue 06 May 2025 06:00:27 +0000
Manifest this update:     Tue 06 May 2025 06:00:27 +0000
Manifest next update:     Wed 07 May 2025 06:00:27 +0000
Files and hashes:         1: 9GDBOU9_J7es0wo35klUOn0T51U.roa (hash: cMQbqhsLcUBPEgQ9vc2CK4bGp5osIlpssNdk9BGiNMw=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: RAoRL2QkYHsWbOMdJXOhdx2U75XvrkcPV2iFNFzJ0Xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:2e:69:ff:04:87:71:4a:f6:e7:24:17:59:8c:a2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: May  6 06:00:27 2025 GMT
            Not After : May  7 06:00:27 2025 GMT
        Subject: CN=af84eb2b08ceca3b1ca401fa1ba5dea30ecab366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:34:db:56:62:3c:54:f3:c4:b0:d2:0d:43:
                    0a:2f:83:65:2a:0d:dc:77:e6:9d:91:24:31:f0:88:
                    de:48:fb:15:1d:73:5d:cd:46:84:5f:89:0f:59:29:
                    50:c5:4e:ee:cd:bd:59:fd:1d:fa:09:7c:61:8f:ea:
                    30:4d:d7:c4:e6:81:cf:33:da:23:b0:c1:a0:f0:6f:
                    51:f2:83:a5:17:5f:43:27:99:28:51:21:b5:52:95:
                    3a:4d:ac:15:19:9f:5f:6a:3c:d3:c8:cf:13:1d:5e:
                    7e:6d:a2:94:11:e0:91:64:65:38:fc:18:d8:f2:6e:
                    d3:fe:d7:d1:a0:94:56:05:ff:fa:ef:8f:47:d4:2c:
                    99:b3:75:ce:3b:6f:d7:30:bf:a1:2c:d1:69:81:40:
                    52:6b:c3:2f:44:a2:a8:13:26:0d:f3:ba:c0:64:b9:
                    9e:e5:6d:26:7d:a6:7a:18:c5:26:40:2b:b3:e5:c4:
                    b0:76:1d:0f:4f:0d:3e:56:5c:15:43:10:63:24:92:
                    1b:94:d4:b2:a8:42:c3:9b:a7:70:76:66:04:b0:08:
                    7d:a9:ef:02:1f:11:39:a0:d7:1d:37:33:9b:db:73:
                    a7:05:7f:e4:d6:16:b9:93:ba:2e:ad:50:e4:96:0d:
                    95:36:e8:50:3e:eb:49:dd:60:cd:81:44:47:7b:54:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:84:EB:2B:08:CE:CA:3B:1C:A4:01:FA:1B:A5:DE:A3:0E:CA:B3:66
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0b:91:aa:d0:2c:49:d0:9e:22:06:04:bd:27:1c:6b:9d:18:
         e8:6a:06:bf:72:0b:3a:eb:92:e7:c3:44:91:40:26:c1:11:b9:
         e0:bf:26:f2:da:d5:48:7a:1b:86:0a:39:50:68:f7:fe:02:3a:
         a4:4d:7a:cd:b2:d5:e9:38:6f:4e:34:80:88:d7:55:88:aa:d3:
         ff:48:71:ae:75:9f:9b:15:7b:bb:0c:71:f5:37:5f:3c:75:34:
         92:4d:5e:7e:46:26:52:75:ed:8c:e7:8c:bd:6c:60:f8:47:9d:
         79:8a:5a:f6:c4:46:0d:21:a1:6d:99:b4:6d:61:5c:47:9a:56:
         96:19:f9:b1:4a:2e:54:2d:11:cf:20:fc:2e:c6:40:3c:70:06:
         5b:9f:89:55:cc:2f:b3:9a:58:6c:3e:81:9d:7c:03:e8:4a:8b:
         30:96:af:cf:43:d1:5c:a2:0f:ed:ee:8b:7f:de:40:46:ae:f4:
         8f:73:a9:2c:2e:5a:70:59:a5:79:86:41:af:8e:74:b1:57:02:
         aa:61:6a:51:da:f6:69:55:7f:2d:be:8f:09:2b:a4:d6:5e:e1:
         bf:0e:6f:1f:e6:8b:fd:27:5b:95:cf:9c:42:c3:05:10:23:49:
         5b:70:ff:f9:26:52:3b:2a:0f:bd:6e:e9:64:5d:a0:40:a5:e9:
         ce:5b:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:36:42 2025 by rpki-client