Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File:                     QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier:          6v8JXgoQFWYZQ86T5VjncgdC9bPAMJWoHm7CJeDIUSI=
Subject key identifier:   14:07:42:9B:8E:F1:07:20:A7:CC:E9:F7:B4:80:09:79:DE:9D:8C:A9
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer:       /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial:       019851C3615B2DFF5D13B4C3615752B61232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number:          160E
Signing time:             Mon 28 Jul 2025 16:00:15 +0000
Manifest this update:     Mon 28 Jul 2025 16:00:15 +0000
Manifest next update:     Tue 29 Jul 2025 16:00:15 +0000
Files and hashes:         1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
                          2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: VMb9Ms0emUf2tsGP1b+AwAvE9U85SUyETO7Hez+jm0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 16:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:c3:61:5b:2d:ff:5d:13:b4:c3:61:57:52:b6:12:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
        Validity
            Not Before: Jul 28 16:00:15 2025 GMT
            Not After : Jul 29 16:00:15 2025 GMT
        Subject: CN=1407429b8ef10720a7cce9f7b4800979de9d8ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:45:27:cd:b4:00:99:1e:bb:c1:d3:2d:a7:
                    a4:db:29:8a:50:df:5d:06:b6:98:04:50:49:b5:ec:
                    73:9e:66:69:34:71:46:7a:2d:60:5c:c1:b7:e2:f4:
                    2f:25:db:ca:9f:13:bf:ee:27:5e:92:42:86:3d:48:
                    de:97:d4:77:9f:6f:64:9e:ad:da:09:3d:34:7b:11:
                    94:20:b3:da:2e:ce:ed:bd:81:b9:1e:fc:20:93:40:
                    4c:2d:01:37:02:72:c4:81:ab:32:70:17:87:6b:dc:
                    04:5c:36:79:09:f7:38:db:48:bb:d9:fa:37:86:cd:
                    87:cf:c7:ce:1e:fe:91:66:a3:4b:22:bc:ee:68:e0:
                    6f:4f:00:a2:8e:7d:9c:a7:2e:9c:06:eb:39:3d:0f:
                    19:2a:c1:af:a3:da:be:2c:55:2b:de:65:35:0c:eb:
                    79:26:7a:b2:82:7a:12:fb:a3:bb:f4:cb:dc:fc:a8:
                    ad:2a:22:08:73:d7:e3:7f:c9:ec:cc:5c:d2:36:aa:
                    36:ff:d6:00:d7:23:96:3d:aa:7e:93:d9:d7:3e:0c:
                    23:eb:de:e5:da:e4:0c:9b:9a:b2:2a:d8:3e:5f:18:
                    a7:f3:51:23:1f:b0:f5:e6:2f:66:17:16:cf:da:cf:
                    e1:c3:11:7d:ab:57:87:a1:54:10:b4:8e:84:f6:cd:
                    8a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:07:42:9B:8E:F1:07:20:A7:CC:E9:F7:B4:80:09:79:DE:9D:8C:A9
            X509v3 Authority Key Identifier:
                keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d3:6a:e5:c4:8b:0c:f1:d9:4a:3e:61:de:fa:08:fa:a6:c9:
         10:3f:ec:f5:f2:0b:c2:8f:b6:bf:cd:a7:b1:b2:73:fe:d9:e0:
         22:32:41:2f:fc:98:e6:71:39:7f:21:e9:ea:84:e1:e8:bb:5e:
         a9:1d:42:2c:81:cc:2d:c1:0f:ea:76:aa:4d:f4:68:60:d3:97:
         d8:53:e9:33:61:b7:b3:2f:b1:2c:91:a6:68:6f:7f:ed:e7:6d:
         cf:a4:f8:38:53:f2:47:73:f8:2b:a5:f7:5b:ca:d7:da:c6:11:
         61:d8:23:1d:a7:00:17:6a:5b:60:9b:00:9c:53:ee:42:42:38:
         96:29:27:6e:bf:c5:c8:da:af:af:53:b5:ad:81:a4:14:6a:e5:
         df:85:91:5a:0f:f4:a8:8b:41:6e:2c:cb:77:92:97:d7:fa:9b:
         c6:83:f3:4c:bb:74:96:bd:58:94:7b:79:e6:4c:a7:08:2a:1f:
         9c:54:b8:9a:dd:99:ba:9c:1d:e5:cb:09:b9:07:a9:56:d6:c5:
         15:5c:e4:0c:8f:d7:a9:8f:ce:d6:4f:5b:fb:d6:0a:ab:15:8e:
         fe:7b:76:6a:2a:fc:6b:80:54:18:59:50:4a:d8:ff:f2:6f:ae:
         67:b5:d8:a0:51:e1:6e:69:eb:21:b8:12:ef:59:ea:45:4a:e9:
         1b:49:42:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:57:13 2025 by rpki-client