Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File:                     q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier:          Auqh+AY84GCJW0hxKDLRJrwTKe4Us5im3h4JHufjXOg=
Subject key identifier:   52:01:5C:BB:90:DB:8F:F4:EF:F5:6C:01:E7:0A:CD:0B:55:4E:F7:CF
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer:       /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial:       01974FD80C3C18DD0D9E4536E33459561F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number:          85
Signing time:             Sun 08 Jun 2025 14:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:48 +0000
Files and hashes:         1: 7abujg5YyGw-Dy5kOxbayEhXp8E.roa (hash: lOz5VIr6Vz6VAh0bdDShfDUIzKOutVJzrANsECMkN+c=)
                          2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: Mijm22J+wTSVwtqGOAUCI043qQkvmRzYOol+y0ryRms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d8:0c:3c:18:dd:0d:9e:45:36:e3:34:59:56:1f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
        Validity
            Not Before: Jun  8 14:00:48 2025 GMT
            Not After : Jun  9 14:00:48 2025 GMT
        Subject: CN=52015cbb90db8ff4eff56c01e70acd0b554ef7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:4c:6f:82:18:38:e2:56:71:71:05:3e:7f:
                    2d:61:81:1a:5a:d9:2a:76:3a:36:b5:2f:a9:c7:db:
                    98:77:2a:36:c7:90:f3:7f:67:c1:27:f3:2c:d7:8d:
                    fd:e1:a0:b9:bf:54:e5:f8:90:c9:73:a9:12:f3:65:
                    15:f0:33:ef:6f:4a:96:37:bc:a8:47:16:3a:d0:a3:
                    37:72:dc:ef:59:ef:a9:88:b8:4a:ae:a5:46:00:af:
                    f9:57:47:fc:c2:48:2c:39:69:21:99:f2:74:cd:16:
                    a8:97:4d:18:13:88:17:36:6f:40:3d:c9:41:ff:41:
                    b3:43:46:c9:e0:29:3f:ff:d2:0e:f3:96:c4:4c:80:
                    21:82:4b:18:b5:49:43:74:44:5f:ad:09:34:f1:52:
                    5c:f7:b3:8c:12:df:d6:ab:42:b1:a0:43:26:32:9a:
                    8e:8b:5b:8c:74:89:32:ce:7f:01:5c:be:e9:6e:f5:
                    c6:e0:d3:a1:04:66:83:81:a5:bf:e5:95:19:6f:66:
                    37:fb:62:57:fe:c1:d5:8e:27:4d:70:18:1a:ab:83:
                    22:69:63:e3:df:ca:5d:5a:57:33:3d:c2:df:bc:fa:
                    b9:7b:8c:7f:83:be:df:9c:8b:b3:20:15:f9:5e:8b:
                    bc:fb:37:20:09:5d:55:c5:d8:a1:f5:4f:09:a3:fc:
                    2c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:01:5C:BB:90:DB:8F:F4:EF:F5:6C:01:E7:0A:CD:0B:55:4E:F7:CF
            X509v3 Authority Key Identifier:
                keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3f:2c:60:09:01:85:ca:55:74:b5:19:54:42:14:d7:e2:f0:
         c3:95:1f:0d:21:ca:59:de:9d:8d:70:d8:6b:8e:f5:dd:8a:fd:
         af:4c:9f:13:32:b0:6e:7c:65:fa:d4:95:c7:40:b3:60:9e:c7:
         98:11:6a:42:79:39:08:e8:d8:79:4f:c6:e3:40:34:b1:12:d0:
         12:e1:43:6b:75:a0:21:90:19:fa:91:51:73:da:15:eb:09:1f:
         bb:e4:98:5e:e1:93:e2:2b:c4:db:a8:f1:ce:6b:57:d0:5e:a2:
         9d:ef:c3:92:01:a2:88:94:15:6f:b2:55:81:b7:7d:d3:5c:71:
         db:b0:7a:68:04:aa:81:0d:9d:24:57:49:aa:65:c3:bf:3a:5b:
         f2:58:f8:c0:5e:a5:48:30:bb:e7:da:44:ee:d1:36:10:69:14:
         44:d7:06:fc:31:dc:73:52:4f:f9:0f:0b:d5:d4:f5:0d:21:89:
         53:c4:94:f8:1d:84:9e:79:de:76:2d:0b:69:50:c5:bd:9a:f4:
         00:55:27:79:95:c6:c7:2c:ce:6b:aa:e8:09:7c:08:5b:8c:94:
         9e:41:06:cf:a0:1e:72:e7:34:a6:a8:f5:37:06:7e:8e:56:55:
         c6:4f:0a:6f:a4:35:ff:a0:fd:0f:a6:34:75:25:09:1d:70:bc:
         fb:e9:8d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:20:20 2025 by rpki-client