Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File:                     qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier:          VDadeJeSSSPGcxLa6wSOHQ0EB9HEwpwezZKAXSaUTvQ=
Subject key identifier:   B7:77:99:F5:2E:5C:BE:36:E9:77:DD:16:4B:FD:08:29:D5:E5:F5:84
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer:       /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial:       01975045AE45DE3AE6E73FAD94375069E369
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number:          1586
Signing time:             Sun 08 Jun 2025 16:00:33 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:33 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:33 +0000
Files and hashes:         1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=)
                          2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=)
                          3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=)
                          4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: QwBqq1+K3P/X9MVXQCIyFLlc6CkY6S2aYgtir+u1w7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:ae:45:de:3a:e6:e7:3f:ad:94:37:50:69:e3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
        Validity
            Not Before: Jun  8 16:00:33 2025 GMT
            Not After : Jun  9 16:00:33 2025 GMT
        Subject: CN=b77799f52e5cbe36e977dd164bfd0829d5e5f584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:85:56:9a:a9:09:73:fa:5c:a4:93:51:4f:
                    0b:ab:4f:4a:0a:80:d5:f8:74:5c:f9:e7:ad:fe:c5:
                    f3:f5:08:45:c9:75:22:36:68:6e:ba:36:aa:e1:c9:
                    c9:1b:d9:52:0a:35:14:25:17:c9:b5:b4:2e:20:cd:
                    b1:a5:37:8f:5e:02:4f:6c:56:b5:10:38:82:69:cf:
                    50:7f:17:46:21:5f:67:10:db:94:d0:95:78:24:f7:
                    3a:14:7d:93:4d:65:ff:b3:ed:98:05:4a:39:05:14:
                    07:07:49:39:e4:1f:75:89:77:50:5c:0f:3f:5f:d6:
                    91:9f:9e:f2:18:dd:ea:30:d2:c7:25:69:c6:20:a1:
                    26:28:62:50:81:0e:d2:24:75:0a:18:ae:b7:2a:19:
                    de:83:44:e8:73:1a:d7:ce:55:aa:66:7e:85:0f:b8:
                    b0:c7:62:50:94:3a:d0:63:58:9d:cd:63:80:4c:b5:
                    a2:d2:8e:2f:a7:3e:1c:24:e3:24:64:d7:df:c5:43:
                    7a:15:57:ca:15:63:47:0d:cf:08:ce:48:e5:a6:89:
                    76:41:21:d9:54:10:55:99:24:e0:56:13:bf:17:54:
                    3e:83:4f:20:9e:00:8f:2c:3c:f1:97:1e:0a:50:95:
                    bf:70:56:e4:68:d0:ff:1a:83:95:18:76:28:28:b2:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:77:99:F5:2E:5C:BE:36:E9:77:DD:16:4B:FD:08:29:D5:E5:F5:84
            X509v3 Authority Key Identifier:
                keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e8:d1:e2:65:38:d2:46:12:13:ab:18:d9:86:73:97:ba:d2:
         96:b6:a6:f3:b1:4c:47:e5:1f:f4:67:34:0f:d2:af:21:21:6f:
         ca:30:e8:27:4b:63:0a:b2:06:80:41:87:aa:96:2d:25:4e:63:
         da:26:5e:f4:f3:0b:09:d8:6e:84:49:30:b6:63:ee:f4:ac:52:
         36:a3:85:86:0a:3e:85:0c:c3:c1:fb:03:ca:13:b9:5c:be:94:
         e1:f6:2b:f6:59:96:93:45:a2:a3:4f:c6:ca:b4:0f:07:6c:1e:
         06:7c:bd:b3:ec:0c:c8:b0:c7:33:43:64:e3:5c:77:4a:4e:e1:
         51:b3:dd:52:ae:74:c4:21:2d:e2:01:71:f7:ac:d0:73:6e:be:
         75:6f:ed:dc:03:6c:90:65:06:bf:e3:ae:e4:c9:5c:b2:92:b9:
         ed:12:e0:1f:be:1e:94:6f:78:5e:53:b6:51:d2:dd:43:bd:af:
         91:0c:ef:fc:cc:68:20:f6:1b:6e:26:ad:29:56:36:ed:9d:d6:
         77:b8:fc:a1:6c:36:67:d4:77:68:d7:c3:3c:5c:de:25:e5:20:
         92:22:0a:03:ce:b9:93:71:3b:d9:06:1d:bb:f9:db:3c:e1:48:
         6b:db:39:a7:23:5f:8a:61:0c:5c:3b:34:d6:53:36:c7:9b:a9:
         cf:da:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:18:59 2025 by rpki-client