Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File:                     qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier:          2Ec0Vl0FnTUJyVnztCMcD2wn/jKaD6loSaXvZpLZf7k=
Subject key identifier:   60:7E:B4:AA:E9:50:A4:62:E6:CA:DE:7B:79:AF:D6:B7:D7:EE:3B:46
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer:       /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial:       0196B9359EBE71444CD48E8C918D01D5937A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number:          0388
Signing time:             Sat 10 May 2025 08:00:21 +0000
Manifest this update:     Sat 10 May 2025 08:00:21 +0000
Manifest next update:     Sun 11 May 2025 08:00:21 +0000
Files and hashes:         1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=)
                          2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: ZAnyOU53O6cLgLhfwZ5Ulb4t8MHLvNk8+osg3nDRQkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:35:9e:be:71:44:4c:d4:8e:8c:91:8d:01:d5:93:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
        Validity
            Not Before: May 10 08:00:21 2025 GMT
            Not After : May 11 08:00:21 2025 GMT
        Subject: CN=607eb4aae950a462e6cade7b79afd6b7d7ee3b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:02:28:6f:a4:af:34:c7:c4:26:9a:ec:18:
                    3d:63:16:b2:18:3b:27:59:45:5e:af:a3:fa:62:5d:
                    74:e9:06:1d:48:ec:68:b4:29:b2:ce:f8:5f:13:35:
                    da:5a:e8:94:d5:0c:b0:73:66:4d:6d:a3:44:e3:c3:
                    56:10:3f:68:09:5b:4b:4e:1d:da:a3:b1:ca:93:98:
                    af:1e:45:82:32:11:20:79:6f:6b:93:d1:b4:d7:c6:
                    be:56:72:a8:02:61:be:20:f5:be:87:ea:de:ab:a0:
                    a5:cf:11:50:fd:9f:a2:df:7d:84:1a:b1:ec:f8:da:
                    32:40:88:ac:98:98:28:61:43:32:0a:e1:53:65:eb:
                    e6:e3:c8:58:84:3d:52:ea:05:6a:42:e1:ae:fd:fe:
                    8c:99:06:fd:e4:ae:98:57:1a:c1:6d:00:e8:78:9d:
                    dd:19:45:7c:38:74:c1:f7:84:d4:ae:4a:63:16:16:
                    b5:41:bb:38:b9:4b:ed:a0:c8:7f:01:b3:15:20:89:
                    00:5d:49:3c:3f:0c:f9:a5:0e:31:cd:5c:f9:43:14:
                    f6:82:82:b2:82:2a:73:0e:75:20:84:0a:06:24:a0:
                    6d:c0:96:4f:64:0b:88:a5:78:a2:b3:5c:45:7f:4a:
                    f5:bb:f5:5e:02:95:89:ce:d8:30:0c:0e:45:c2:d5:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7E:B4:AA:E9:50:A4:62:E6:CA:DE:7B:79:AF:D6:B7:D7:EE:3B:46
            X509v3 Authority Key Identifier:
                keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:96:1b:0c:e9:3a:ea:cf:58:07:cf:16:6a:5c:37:77:89:81:
         69:92:ed:10:43:35:e8:d7:6d:0f:5c:34:6e:cc:7a:83:03:dc:
         97:c6:a0:a0:a6:f5:b9:06:ab:95:6f:4d:22:9c:72:23:2a:59:
         21:9a:cb:40:0a:ae:81:a6:79:16:f5:cf:89:c5:48:8c:66:c2:
         4b:f8:57:47:7e:64:9f:36:ec:0c:69:c5:3a:d1:f0:d8:fa:2a:
         63:3e:a6:8d:e8:d4:4c:1b:75:c2:3b:45:22:08:5b:7b:51:cb:
         8f:62:78:af:71:b7:82:ce:ec:82:08:f8:8c:d4:2e:4e:b2:1c:
         88:52:79:40:65:b1:a0:de:a3:83:5f:60:d0:72:ef:24:7d:4a:
         1a:d0:3f:0c:1e:e9:41:68:57:55:83:d2:1a:e4:95:d5:cf:71:
         f8:b8:86:3f:1f:1d:23:6a:cc:0d:ac:da:46:58:e8:9d:83:37:
         4d:9c:0e:c4:68:ac:a4:7a:5c:11:6b:8d:22:ac:c8:f7:4e:c4:
         82:a0:04:1f:f8:ba:87:51:ba:79:26:0f:bb:7e:ea:b5:4a:e5:
         49:73:91:ca:d7:98:7b:d2:4f:23:b2:eb:cc:bc:11:07:51:05:
         5b:70:92:44:2c:64:9e:3f:6b:1b:cd:ef:40:b8:a4:40:37:dd:
         8e:b6:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:05:01 2025 by rpki-client