Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File:                     QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier:          AK10J3bLSk1e4GM6/TscdOFZ0+AMEPj1gaSNP8M234k=
Subject key identifier:   59:DB:61:74:06:A7:FB:82:9F:D7:98:03:70:BE:84:5A:E5:4B:0A:0C
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer:       /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial:       019849D2CF7880213586335EAED5BAA1AF54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number:          060F
Signing time:             Sun 27 Jul 2025 03:00:09 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:09 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:09 +0000
Files and hashes:         1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
                          2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: /8/rebqL7HbTk9ltPXTrbDmuhOaMCkxg8ClviYQNNC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:cf:78:80:21:35:86:33:5e:ae:d5:ba:a1:af:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
        Validity
            Not Before: Jul 27 03:00:09 2025 GMT
            Not After : Jul 28 03:00:09 2025 GMT
        Subject: CN=59db617406a7fb829fd7980370be845ae54b0a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:e4:9b:87:87:b9:42:1e:a5:95:61:1b:3e:
                    2c:40:8a:5a:13:e8:ec:97:45:85:02:49:7e:da:73:
                    ec:b0:e2:37:4f:bc:59:78:9a:ee:40:77:56:30:8c:
                    c1:eb:80:7d:a4:06:57:b9:35:e5:84:5d:57:b0:69:
                    bc:62:94:05:a4:b4:75:05:c2:48:dd:e1:6b:0c:df:
                    a3:48:02:84:7d:14:49:74:d1:bc:4e:64:4b:9a:1c:
                    e8:1c:34:59:06:52:08:ee:f9:55:68:3e:29:7f:67:
                    40:36:5c:c1:24:87:38:de:5f:36:c2:0c:b8:a9:6e:
                    37:2e:d1:1f:55:6a:bc:e2:19:12:11:da:38:71:73:
                    a5:c8:2e:45:a2:5c:eb:dd:59:64:1d:aa:0f:0e:9a:
                    11:7a:58:65:82:02:49:f5:33:27:76:4f:4a:f6:23:
                    95:69:08:38:96:78:81:a6:b7:6e:d4:2f:00:be:be:
                    d2:ff:2c:20:de:f2:5b:03:c1:78:0c:da:7b:e9:99:
                    9d:d6:83:e6:84:14:4c:e7:4a:07:bc:46:78:05:fb:
                    7c:05:ae:fe:79:86:be:b5:d8:39:40:22:cd:c3:68:
                    8a:1f:f1:97:c4:34:89:37:bc:ef:0b:53:a3:4f:0f:
                    43:e5:58:51:61:57:bc:ce:9a:8d:81:f4:e3:6e:2a:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DB:61:74:06:A7:FB:82:9F:D7:98:03:70:BE:84:5A:E5:4B:0A:0C
            X509v3 Authority Key Identifier:
                keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:84:b9:fd:e9:5a:d8:53:71:87:d5:13:c1:3d:9c:f8:08:18:
         98:37:36:e2:a2:cf:1f:db:64:59:a7:65:8e:90:05:db:ef:c5:
         aa:51:3b:6a:77:05:14:ff:30:99:07:9d:6f:13:31:16:bf:6e:
         dc:80:d3:56:57:aa:7e:64:c0:3c:66:1c:75:79:5a:e3:b6:0f:
         2b:a2:2b:14:c1:e7:3a:3c:bf:5f:83:13:29:18:6a:a4:03:56:
         f3:2f:f5:e7:7f:f0:96:bc:c7:07:87:bc:f5:d7:77:b9:d5:e8:
         32:5f:e5:5b:4d:bd:dc:d0:79:ff:d3:59:18:40:25:d5:7d:82:
         ae:22:94:eb:c3:16:ee:1d:3d:8a:df:9b:ea:bb:8b:b2:dd:84:
         ed:04:a3:31:e5:26:ff:b5:17:ca:f3:5f:f5:a4:3e:82:46:7b:
         e7:28:09:13:1f:8a:a5:3e:79:0d:45:aa:17:f7:fb:60:3b:98:
         25:69:42:b5:d8:35:1c:14:04:f6:d2:c1:7f:be:51:c7:08:87:
         ac:2c:fa:a0:cb:d1:67:94:33:ab:4e:35:6d:49:99:b8:12:ec:
         2b:a7:56:32:30:18:65:ec:44:be:4c:28:c1:8e:fc:96:ee:9e:
         85:2e:71:4c:96:c5:f2:5c:7c:93:07:23:20:c8:8b:a2:b1:99:
         10:7c:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:54:08 2025 by rpki-client