Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File:                     qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier:          eUSg7t6Vx9coqZdnwkAGqp+8JGIoMoO/Fj8bYUEuYcw=
Subject key identifier:   DA:0B:2B:5B:23:E3:B1:93:BC:D3:B9:F9:7F:77:4D:F3:6B:56:66:BC
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer:       /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial:       01974DB2F0D46B134D3E03220D6E0CCCDF89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number:          1585
Signing time:             Sun 08 Jun 2025 04:01:02 +0000
Manifest this update:     Sun 08 Jun 2025 04:01:02 +0000
Manifest next update:     Mon 09 Jun 2025 04:01:02 +0000
Files and hashes:         1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=)
                          2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: Sathr/oaW9a2IMuRfGuQ9vAaUNsr6K9Z1am5HjpWFx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:f0:d4:6b:13:4d:3e:03:22:0d:6e:0c:cc:df:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
        Validity
            Not Before: Jun  8 04:01:02 2025 GMT
            Not After : Jun  9 04:01:02 2025 GMT
        Subject: CN=da0b2b5b23e3b193bcd3b9f97f774df36b5666bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a9:2b:33:5c:c9:71:f3:b7:1c:5c:66:8c:1c:
                    e7:8e:cd:57:c2:62:ef:a3:98:61:a9:02:5e:57:09:
                    e2:23:16:36:e1:27:f6:76:99:d5:02:12:0e:f1:18:
                    5a:f8:a4:37:e2:dd:29:0a:46:4f:35:6d:19:73:63:
                    f3:55:67:fd:36:28:5a:0b:89:8d:90:c1:26:f3:26:
                    1f:f3:f9:66:1e:9e:c7:f9:f8:dd:a8:65:a5:e3:49:
                    1d:aa:d0:b1:2a:26:1b:6a:0c:a4:e6:a1:91:80:f3:
                    51:f7:1b:5e:b8:ae:95:75:00:11:62:08:6c:19:71:
                    08:04:eb:06:b2:37:7b:82:2a:69:60:36:9b:3d:fc:
                    e2:81:58:96:78:dd:b8:67:bf:27:71:f4:25:bc:1e:
                    02:cb:64:8d:69:d2:c4:69:bb:81:d6:73:31:cf:41:
                    7d:87:ca:c8:ec:ba:b5:8a:de:af:c0:8a:05:17:74:
                    e8:c1:d2:31:cc:f5:b2:37:a9:bb:00:de:8f:ed:6e:
                    38:de:0f:8b:a7:b0:19:21:22:ba:c6:90:c8:0d:ba:
                    b9:10:de:4f:b6:59:f1:a1:42:50:e7:20:da:4a:6d:
                    75:29:c3:5d:80:75:15:3e:16:aa:53:a4:65:bb:4a:
                    40:29:99:0c:1c:ef:00:4e:7f:cf:c9:ae:76:e7:46:
                    f1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0B:2B:5B:23:E3:B1:93:BC:D3:B9:F9:7F:77:4D:F3:6B:56:66:BC
            X509v3 Authority Key Identifier:
                keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2c:d8:22:1c:ac:60:5e:5f:89:d9:3c:d1:a1:19:72:c4:96:
         10:cb:c4:16:e8:7a:46:f4:12:73:42:f6:7c:7c:ce:9a:e4:d7:
         45:74:76:11:f8:33:ac:71:ac:33:f7:ab:f5:93:8a:ab:59:08:
         e5:2e:78:35:b2:6a:99:52:28:bc:37:a8:a2:0b:ab:95:ba:6f:
         36:2f:d7:2f:af:cc:fa:42:08:25:fa:da:fc:e6:9f:d0:49:33:
         f5:53:d5:59:9f:72:b9:e0:f3:49:35:d9:90:c3:22:db:92:a7:
         7b:df:77:5d:28:8d:96:71:da:30:ce:62:a9:9c:11:c4:46:1c:
         7e:fa:2e:37:30:5b:92:28:ca:03:3c:f1:6b:e0:bc:ce:b6:c8:
         c7:97:83:5a:3e:92:f6:8b:77:40:2d:88:b0:c1:e2:dc:05:ac:
         6c:2d:8d:7f:a8:e3:df:31:19:d2:d4:1c:ec:b8:96:6d:09:c6:
         ef:da:3e:3b:04:0d:9f:bd:d3:bc:69:7f:18:56:12:3a:d1:5d:
         fa:8b:27:20:d2:be:bd:9f:74:50:cf:f1:ac:2e:95:bd:50:b2:
         ec:d7:6b:30:a9:0d:4a:83:d3:1f:4e:c1:24:2d:ec:b5:71:a4:
         7f:87:62:1e:14:7b:68:14:c1:b6:76:eb:4b:67:7e:d5:1b:8f:
         d9:26:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:58 2025 by rpki-client