Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File:                     qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier:          wnIh/NU3VHbVu//X4r2POxXl8PFM6/X5d5YUDP2U10w=
Subject key identifier:   CA:9A:06:E3:A0:E5:FD:B7:F5:8C:AA:7D:46:52:02:E8:D4:B1:70:CF
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer:       /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial:       0196DAE665243B623A0683606574DA3ED816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number:          1543
Signing time:             Fri 16 May 2025 21:00:54 +0000
Manifest this update:     Fri 16 May 2025 21:00:54 +0000
Manifest next update:     Sat 17 May 2025 21:00:54 +0000
Files and hashes:         1: XtPvNkbtFvkSrn1XGkdkM55xfJ4.roa (hash: XvdvDvnaLffIXutFMAXtL47S87Pb9dwgFS/EYsDxu5Q=)
                          2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: M2OvrxH4L7xwjOIFUG4xNXGJofGGqSM1qMyXAkMRZGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:da:e6:65:24:3b:62:3a:06:83:60:65:74:da:3e:d8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
        Validity
            Not Before: May 16 21:00:54 2025 GMT
            Not After : May 17 21:00:54 2025 GMT
        Subject: CN=ca9a06e3a0e5fdb7f58caa7d465202e8d4b170cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:11:08:d5:58:9c:4e:6d:2a:92:4a:90:15:52:
                    19:da:ff:78:a3:f1:2b:45:76:05:83:d6:67:5f:92:
                    be:e7:c4:cb:2b:43:0b:eb:a9:4c:0c:a8:5c:f0:01:
                    72:9b:17:f6:07:7f:f7:8c:11:70:44:38:aa:f3:95:
                    ff:92:63:ac:33:6d:5f:76:58:42:39:cd:c4:c2:87:
                    04:69:f4:30:98:66:c6:8a:62:e3:76:c2:45:be:0d:
                    bf:ae:04:a9:c6:fc:83:85:1b:6f:67:68:05:35:fd:
                    a2:a1:f0:a4:ba:4f:99:96:1b:6b:8b:f6:ea:e1:a9:
                    24:20:62:5a:19:ba:ae:3a:91:2a:25:a5:04:18:bc:
                    b2:80:84:17:78:af:80:36:5a:b8:d8:cf:ad:b9:fb:
                    b2:ed:e3:d8:f3:14:15:f5:ed:a5:b5:65:54:84:3e:
                    87:9e:6b:d4:5e:0e:17:4c:00:7c:10:ac:d2:c2:fd:
                    d8:a8:43:c1:47:b2:ff:ab:12:6d:d6:02:e4:cc:78:
                    9b:37:8c:7b:44:80:c4:f7:4f:7b:b5:20:8a:56:73:
                    6b:d0:cf:58:31:e5:89:38:a4:83:8b:38:a9:cc:f7:
                    8f:7d:64:af:5f:ff:0e:79:0f:3a:37:53:98:dd:f0:
                    48:b6:56:c1:22:8f:09:4d:18:ea:c9:b7:98:90:4a:
                    38:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9A:06:E3:A0:E5:FD:B7:F5:8C:AA:7D:46:52:02:E8:D4:B1:70:CF
            X509v3 Authority Key Identifier:
                keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4c:58:b8:2e:01:75:a6:f8:3e:29:18:81:0b:b8:e6:bb:f3:
         91:9b:d9:fd:89:ea:74:5a:4b:29:01:35:3d:10:fb:08:e5:44:
         89:ae:0f:03:f4:a1:ff:98:e3:92:d2:cb:d9:71:0f:f2:8f:2d:
         7b:7b:0e:15:b6:d4:95:a8:c5:c2:51:29:38:26:ae:41:aa:5c:
         1e:04:9a:be:7c:0b:5c:6a:01:ed:cf:7c:3c:b2:90:14:19:cf:
         30:73:1a:45:a1:b7:3d:4d:2b:25:76:54:a2:76:18:67:e3:bc:
         65:88:f4:1e:c6:a4:cf:f2:14:c6:8c:f5:c0:67:3b:2c:60:84:
         b9:dc:81:8d:1a:18:3d:f5:8b:15:2a:1e:e2:ab:b5:b7:0a:ce:
         d5:04:4a:e6:d0:7a:0d:c4:63:d7:ab:42:ed:be:65:6d:78:c2:
         1b:62:fe:8d:36:e8:28:29:76:29:f5:2e:53:97:87:70:a2:8b:
         45:f3:d7:93:1c:65:bc:60:a8:87:41:2d:d4:bb:ee:73:07:76:
         72:c9:aa:1e:8f:d3:02:be:3c:34:4c:c6:c2:e1:72:4e:d9:88:
         ab:cf:32:5b:7a:9f:69:dd:9b:0f:f9:4c:a2:f6:1c:ce:a3:a2:
         c0:5a:28:2a:a9:e3:a6:de:82:ec:20:cd:2a:90:68:8c:0c:77:
         78:49:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:22:28 2025 by rpki-client