Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File:                     qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier:          OVsoiPKf3jIBFKRNWS44xJwkCwr+LjnnaFC4UG88q0U=
Subject key identifier:   D6:28:B7:E1:A1:F9:7B:FF:6F:89:93:3E:4E:0F:AF:13:F6:FF:D3:5B
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer:       /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial:       01985F803D4C8D7374B583F5494D9C23917C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number:          09B1
Signing time:             Thu 31 Jul 2025 08:01:36 +0000
Manifest this update:     Thu 31 Jul 2025 08:01:36 +0000
Manifest next update:     Fri 01 Aug 2025 08:01:36 +0000
Files and hashes:         1: 0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa (hash: k+6IIDKqJuYMt9/EhXM2bPBbRQ5u5Kv99iIIWzz5/2A=)
                          2: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=)
                          3: SAABZkEQbTfeoiZylh7IAj2UKJY.roa (hash: tT5S9auXfqJCWExDbLcMxXWvB7zI8R71Em3Ix9poLF4=)
                          4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: phVS8CInjuZsowmvxijfC8gsojIiudW7R6j5B/BWeNw=)
                          5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 Aug 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5f:80:3d:4c:8d:73:74:b5:83:f5:49:4d:9c:23:91:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
        Validity
            Not Before: Jul 31 08:01:36 2025 GMT
            Not After : Aug  1 08:01:36 2025 GMT
        Subject: CN=d628b7e1a1f97bff6f89933e4e0faf13f6ffd35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:b6:5c:52:38:79:0d:8d:57:6f:d6:fe:4f:
                    d4:75:c4:e6:aa:db:9c:10:81:fe:50:41:95:c0:de:
                    ad:c1:cd:3e:d8:31:be:27:01:6d:49:fd:1d:09:21:
                    66:55:25:23:18:c8:e6:14:11:2c:39:41:76:36:73:
                    b8:91:78:f3:b8:90:f5:ff:f3:d0:48:b2:80:40:83:
                    fb:64:3b:4d:f5:09:8d:85:8a:4b:f9:e5:a6:35:ab:
                    ea:ab:00:44:ff:68:f5:eb:e1:c6:99:36:34:1d:75:
                    0c:b4:f8:9a:9e:65:c5:85:bf:ba:e5:a7:9a:03:ab:
                    79:73:40:e9:b1:e6:bb:55:88:5c:a4:50:60:85:5d:
                    2b:83:c4:a6:12:32:d6:c4:77:f8:56:f3:ec:1e:f5:
                    6d:fb:ec:39:ee:90:d9:f6:81:0d:ef:25:d1:50:3c:
                    7b:e2:8e:96:e7:a9:5e:eb:a9:54:d7:99:2f:04:a8:
                    e2:86:9f:4a:fa:fe:41:21:97:d5:2b:b8:1b:0a:04:
                    6f:0e:2f:32:a7:04:dd:d9:bc:b8:57:fb:f6:64:04:
                    37:a5:68:58:dd:e8:53:93:8a:85:16:1d:fd:9b:24:
                    9c:a4:10:cf:db:84:c1:f1:41:bb:8c:27:b4:d7:5e:
                    18:0d:4d:39:d2:24:ef:c5:1c:00:7e:95:ca:c0:73:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:B7:E1:A1:F9:7B:FF:6F:89:93:3E:4E:0F:AF:13:F6:FF:D3:5B
            X509v3 Authority Key Identifier:
                keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:70:b4:9e:76:21:7a:2d:15:fb:88:e3:7f:01:7a:0a:25:9f:
         07:c5:c5:b8:05:dc:e0:ed:20:e8:63:27:14:d3:2c:01:7b:3a:
         a2:32:13:b6:f9:7e:35:05:3f:ab:35:08:ea:42:a6:1c:00:ef:
         d8:d2:dc:25:db:1e:44:c5:9b:66:78:d1:e9:95:f6:ad:5f:07:
         88:61:16:8c:4f:7f:69:e7:a4:8d:a7:09:9a:0e:86:ac:41:b9:
         88:14:97:6a:32:9c:b5:1b:03:ce:42:dd:b7:17:de:5a:20:ba:
         c5:6f:e4:75:67:a9:ef:7b:e9:33:73:0b:8c:1c:c5:a9:4a:e7:
         d0:41:6e:01:11:b5:f1:52:e2:1e:51:9c:87:a4:15:f0:39:db:
         b2:1a:a6:9b:82:bf:14:94:8a:3a:f5:02:d0:eb:91:11:ca:2a:
         49:f3:87:23:98:b9:7e:1a:f4:c7:fe:10:c8:1a:1c:07:16:01:
         35:70:aa:8d:03:91:3e:27:41:f8:73:fc:00:a1:b7:63:34:57:
         12:00:aa:a3:a4:30:4f:d3:c3:ea:52:3b:a6:ca:f1:1a:13:e2:
         14:d0:1d:13:d0:a8:7e:aa:2d:73:d3:45:f6:c1:29:fa:9e:41:
         12:8f:57:29:f7:6a:ea:75:4b:94:cf:b6:02:e9:f0:5e:ba:8d:
         27:1a:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 09:14:17 2025 by rpki-client