Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
File:                     Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json)
Hash identifier:          NxBsIYK3ghLkug05uk/9FWYVUVTsYrGiJoP8g7o9Xw0=
Subject key identifier:   71:89:26:F9:81:97:89:E3:C4:1F:99:76:03:37:70:9E:90:D4:CA:1B
Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Certificate issuer:       /CN=41b89bd3736ce4f008473965fdae4074567cda03
Certificate serial:       0196C9170599AAEA7EE33D7976EAC6F9DD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
Manifest number:          0AB1
Signing time:             Tue 13 May 2025 10:00:51 +0000
Manifest this update:     Tue 13 May 2025 10:00:51 +0000
Manifest next update:     Wed 14 May 2025 10:00:51 +0000
Files and hashes:         1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: K7dJgORT+Cze+BMZd8AhLoKH+ymwODAZRt5xjTeOznc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:17:05:99:aa:ea:7e:e3:3d:79:76:ea:c6:f9:dd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03
        Validity
            Not Before: May 13 10:00:51 2025 GMT
            Not After : May 14 10:00:51 2025 GMT
        Subject: CN=718926f9819789e3c41f99760337709e90d4ca1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:1a:d7:b4:b2:8b:f7:d7:2f:35:f6:e2:1c:
                    44:0b:2a:96:42:45:2c:bc:2c:85:53:44:2a:71:09:
                    97:ce:1a:cd:5a:ce:62:20:06:b1:65:af:67:20:02:
                    be:32:f0:cf:98:4d:00:47:72:50:7f:cc:5a:b3:42:
                    f9:51:2d:ab:32:d0:3b:63:93:57:84:6a:30:d9:15:
                    da:05:f4:f0:b9:97:10:ab:89:de:55:b8:c8:70:90:
                    a0:e6:f8:55:7f:59:90:82:91:28:ca:ff:04:00:ad:
                    af:c5:86:e3:ef:ca:22:3e:36:ee:e5:88:47:f8:7b:
                    49:bd:ac:60:ad:4d:91:a0:79:88:63:6f:a4:6b:5f:
                    c0:3d:58:71:1c:d1:89:5e:a4:a2:81:bc:9c:27:bb:
                    dd:88:8b:a8:a1:25:10:a8:4f:fb:c4:ab:da:ad:55:
                    da:95:ac:85:3d:2e:e4:ba:cb:12:14:52:6a:59:2a:
                    a7:1b:4a:3b:f8:07:08:f0:98:6c:98:07:dc:be:e4:
                    83:12:82:1c:7e:1d:ea:82:85:5e:ae:37:08:87:26:
                    18:0f:a3:8d:19:28:ef:12:20:11:25:1c:23:52:8e:
                    cd:50:c5:5c:97:3f:71:9d:1f:ba:dd:fb:68:78:53:
                    be:0d:a2:cc:00:7d:ba:85:69:10:0d:35:5f:31:eb:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:89:26:F9:81:97:89:E3:C4:1F:99:76:03:37:70:9E:90:D4:CA:1B
            X509v3 Authority Key Identifier:
                keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:3a:30:bf:d6:a9:ed:76:f1:7b:9a:21:69:26:bb:76:ca:
         cd:73:22:76:c9:4a:f0:8c:c4:1f:fe:45:e2:44:b6:bd:f8:1c:
         7f:22:6c:6f:05:03:b8:31:6c:b3:0b:a2:e2:7f:8b:f8:32:1e:
         88:f1:92:fa:f3:6b:4e:da:16:93:e9:97:49:19:01:3a:b2:de:
         df:f4:d0:5b:03:f2:66:dc:07:48:01:bc:a5:f0:ae:e4:13:23:
         51:d6:40:ec:56:97:1e:a7:b7:bf:55:8f:52:86:31:11:44:21:
         b3:80:9e:30:79:9c:88:8d:99:fb:aa:56:fa:0e:83:a1:3a:54:
         a1:0c:7a:c8:f9:66:52:98:e2:7c:02:54:ee:fa:67:2c:0a:6b:
         56:18:fc:ed:d8:22:15:f5:b4:cf:89:af:a2:36:05:2f:61:5b:
         c1:fe:53:c6:31:52:a5:97:ac:d2:a1:d2:de:dd:42:10:18:cd:
         7d:d9:a7:a5:29:9d:e8:bd:9e:d0:ca:56:93:b9:cf:5b:45:71:
         39:aa:8c:a4:49:28:04:09:1c:f6:34:25:34:b3:16:07:0d:70:
         76:80:95:f3:30:4b:76:e4:fb:8b:da:ea:89:80:44:ea:22:76:
         d6:ad:11:0b:32:70:83:20:a1:2a:99:f6:cd:e4:a5:6b:04:77:
         26:2d:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:44:10 2025 by rpki-client