Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File:                     qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier:          nNf2YspIdcscn9kHHcVP1mMQv9xYOhrcApLnsK9sK7c=
Subject key identifier:   2B:EE:8E:78:BC:DD:42:10:B3:1F:D1:74:68:76:2A:B8:55:EE:93:2D
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer:       /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial:       0197481E37AF8611EB78CD46E345D6885874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number:          0B58
Signing time:             Sat 07 Jun 2025 02:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:29 +0000
Files and hashes:         1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
                          2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: IJ8NjJM7MXjRgrPnnFb60bUEqWMlhY6iXWT0pZJb8HI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:37:af:86:11:eb:78:cd:46:e3:45:d6:88:58:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
        Validity
            Not Before: Jun  7 02:00:29 2025 GMT
            Not After : Jun  8 02:00:29 2025 GMT
        Subject: CN=2bee8e78bcdd4210b31fd17468762ab855ee932d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:1c:7e:d8:03:da:90:01:a2:15:cc:d0:e2:
                    4c:9a:30:c0:1e:bf:a1:b7:fe:de:78:76:8d:8c:fa:
                    f0:5d:0f:dc:95:4f:6d:be:50:8d:30:d5:98:5f:ee:
                    0e:9d:97:c5:24:bb:8f:b5:04:e2:3c:8e:47:a0:38:
                    98:41:0e:c3:ea:fb:24:cd:e2:dc:b0:27:d8:90:06:
                    51:90:26:4c:bb:da:ec:3b:77:ca:db:c9:99:61:93:
                    ad:00:a2:15:37:49:c0:da:60:2f:e3:c7:7c:38:1d:
                    ad:66:4f:22:19:58:b4:9d:15:88:0c:3a:98:ad:b3:
                    a1:93:5c:c8:40:78:98:2b:5b:0e:9a:a4:a0:fa:e6:
                    53:d0:2e:6e:00:4b:a9:08:98:98:60:c5:dc:2f:b4:
                    41:93:42:11:7e:ab:1e:2c:b4:82:00:0d:fa:84:15:
                    e5:08:9c:67:0b:96:17:4f:21:01:22:ac:dc:7d:e1:
                    b1:24:35:0c:5f:67:b0:d7:6d:8e:81:b2:b1:6f:7b:
                    08:60:c9:90:e5:ee:72:42:cc:9f:63:0f:45:0d:c3:
                    9d:c7:af:57:a2:3e:cf:9f:18:80:01:88:45:db:e6:
                    19:48:cd:4a:40:16:cb:ad:8d:95:f9:c8:64:79:2e:
                    53:23:2e:03:0c:12:03:6f:43:73:59:63:37:9e:1d:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EE:8E:78:BC:DD:42:10:B3:1F:D1:74:68:76:2A:B8:55:EE:93:2D
            X509v3 Authority Key Identifier:
                keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:00:61:60:ab:7b:0a:4a:b4:f2:3f:2d:f1:70:f6:26:83:
         ea:ab:57:58:79:f4:dd:d2:67:5c:53:8c:04:5b:0e:bb:bf:0d:
         38:28:a2:de:07:7f:bc:24:6e:e4:c3:79:d9:d9:04:0e:0f:16:
         2e:44:19:4b:33:11:30:d6:7f:91:5a:4c:d0:71:9e:61:23:77:
         94:87:af:e4:88:4a:c3:f8:da:4d:a3:41:ca:89:80:35:4c:59:
         e1:d8:a3:19:e4:25:45:91:33:ab:b1:3f:eb:31:10:ea:a9:69:
         8d:1c:ae:88:d7:48:4e:8d:aa:dc:8a:2a:74:4f:29:d5:77:11:
         1c:fc:02:cb:0a:96:b2:f0:e1:54:88:b0:5a:75:ca:ba:8e:2e:
         74:f8:30:70:76:c3:38:28:16:bf:be:eb:85:b5:a7:cb:98:a2:
         b5:41:b3:3b:cb:79:66:8b:c8:15:92:99:e5:3c:96:08:c3:14:
         09:74:06:b3:83:71:c2:5c:f0:fc:a9:0e:15:cb:d1:3e:ad:11:
         f6:b0:3a:52:a0:81:c2:d8:0f:e7:d6:2a:49:6e:54:bd:33:8a:
         a6:24:97:a1:e8:f1:28:70:cb:0f:20:41:07:1d:d4:58:14:8f:
         42:79:94:e2:21:90:d7:21:85:20:0d:7d:4c:ba:f6:33:71:a4:
         40:21:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:08 2025 by rpki-client