Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File:                     QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier:          sO/u3jrLPzRzfCndnFIbKMqGePZuPs2s5RJQR7iUS84=
Subject key identifier:   BD:16:CB:62:34:06:24:62:A4:57:3D:B4:F6:E9:3B:44:E2:CC:57:35
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer:       /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial:       019746671C4E751F26F0CB0B072A99A3AAFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number:          091D
Signing time:             Fri 06 Jun 2025 18:00:51 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:51 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:51 +0000
Files and hashes:         1: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: BZNa0wvDzq78BESHfGxH62v/AmUloUNUlxB+790aIIE=)
                          2: VtNDBe4WLUvuXuHOTlAK7Ldf5W4.roa (hash: 2/Ux5k6jwyAwcxnEpPd/SFbt5+kWg1F4N3TK8J41W34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:1c:4e:75:1f:26:f0:cb:0b:07:2a:99:a3:aa:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
        Validity
            Not Before: Jun  6 18:00:51 2025 GMT
            Not After : Jun  7 18:00:51 2025 GMT
        Subject: CN=bd16cb6234062462a4573db4f6e93b44e2cc5735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f6:23:ac:e5:cd:84:db:91:aa:64:41:e2:fe:
                    3d:40:df:67:75:26:b7:66:ab:be:db:53:c3:49:9a:
                    34:ca:89:4d:ab:a7:ab:fb:e3:30:f0:3c:1f:a5:be:
                    d4:d9:45:5e:15:9b:d4:64:31:55:29:02:d9:5f:e2:
                    c7:4e:1f:34:83:82:ea:f2:7d:16:1d:bb:25:cc:b4:
                    0a:14:17:83:d4:c0:c4:4f:2e:dc:fe:6c:6a:c2:39:
                    ff:47:2a:28:77:ea:c4:70:eb:6c:53:cd:c7:ab:95:
                    55:d6:a9:37:d5:1f:49:b7:a6:60:e4:90:a6:17:b3:
                    28:02:7c:86:0d:e6:ae:64:f8:13:be:16:2f:95:91:
                    80:8b:79:ea:51:74:cb:05:11:92:30:1e:03:bc:10:
                    d6:5c:2f:41:a9:1a:90:60:1f:d4:52:7a:56:90:b7:
                    a4:c1:ab:99:2f:bb:ad:62:15:a5:4e:65:31:01:61:
                    c5:f4:ef:6a:d8:bb:f5:d1:bd:21:26:56:0d:6c:0e:
                    fa:af:d9:9e:77:22:f6:c7:25:5d:da:d7:3e:08:6b:
                    d3:72:52:17:c4:81:35:35:79:53:a5:35:5a:ea:a8:
                    b2:1f:c8:61:67:dc:d9:63:9a:10:d8:57:cd:1f:86:
                    cc:5f:86:24:1b:fc:09:86:55:07:e7:15:eb:4e:87:
                    be:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:16:CB:62:34:06:24:62:A4:57:3D:B4:F6:E9:3B:44:E2:CC:57:35
            X509v3 Authority Key Identifier:
                keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:d5:60:92:3c:4e:d3:f5:b7:9c:63:4c:0c:ec:77:99:98:
         88:ee:34:b8:d9:a1:ed:ad:8d:47:44:9f:86:35:5f:cd:60:a5:
         03:a9:67:fa:9a:74:07:df:21:7c:8b:81:dd:2e:48:f0:3d:18:
         33:b7:f9:80:fe:cd:87:88:7b:4d:63:a8:f0:09:d4:12:8a:86:
         92:5d:43:52:65:9c:93:84:bf:2c:8a:75:c2:ca:6a:22:8a:1f:
         87:6c:9a:c3:1a:86:96:8d:d6:f7:da:cf:54:2f:1a:f3:3a:91:
         7e:40:7b:a4:3e:af:28:e2:e1:a6:6a:65:35:9b:8e:9c:15:f8:
         9f:ef:65:af:cf:11:00:34:bc:02:cd:63:53:37:b2:6f:9d:25:
         81:b6:4c:6b:ae:5a:ab:f7:53:57:da:56:84:3c:71:fd:16:61:
         a6:38:3e:19:de:2a:91:c8:ac:47:ed:7a:58:17:7c:b6:25:dd:
         a1:e6:27:ed:b8:0e:e9:8f:38:e7:da:2f:af:50:09:1a:1e:7f:
         2a:d2:ff:6e:fd:37:d3:0c:6b:61:bc:cf:5b:e7:f9:a8:4e:43:
         51:65:da:3e:6f:d0:f6:8c:53:ab:58:42:e7:af:71:ba:4f:82:
         cb:20:e5:e4:c4:6d:2b:9d:5e:ca:fa:68:c0:b5:b8:4f:ec:ef:
         c9:40:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:37:52 2025 by rpki-client