Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File:                     qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier:          x8dohv5+ahtiey/MSw3YCZ5PEjh7dclW9vqOvS0+Z+M=
Subject key identifier:   66:D8:4D:AD:B3:45:42:E6:70:3E:E1:52:F7:BF:7B:44:F6:D5:09:2C
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       01974AE82E0D1F76B965971418E1B6AB1810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number:          1587
Signing time:             Sat 07 Jun 2025 15:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:19 +0000
Files and hashes:         1: gLJC-FPMB6JG4uvuoXfj1y1VVB4.roa (hash: bJcY81wfY+5zVAZK4pJVEqgscj1+3rGIYBuBLom9f1Q=)
                          2: j51vgTDCax1tLhOyiZp4zqvzOKU.roa (hash: bN88IoNu8hIQldCCMN1vfnD2HLAoTn8gvr6w/tzj/KM=)
                          3: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: ho/pYobWwRiNuxLuGVjWDonFJEsjR8NruGvojKuOQI8=)
                          4: v9qbF4LYUnhnpR0EOPiha8K3YB4.roa (hash: D6yRkwvsYTKHCx+d4L0SAcGasfUnTpr7jrIeGf0l2G0=)
                          5: z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa (hash: rTNzicdR5UxEu+zSwQpGpaPQg7acnJ6eKVlTT5jJQ8s=)
                          6: zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa (hash: db5+QXNKRG2BQO2CHQMOqU0fUStvszTNPuMXFPPnliI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:2e:0d:1f:76:b9:65:97:14:18:e1:b6:ab:18:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: Jun  7 15:00:19 2025 GMT
            Not After : Jun  8 15:00:19 2025 GMT
        Subject: CN=66d84dadb34542e6703ee152f7bf7b44f6d5092c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:75:90:d1:26:bf:ef:1c:d7:2d:32:ac:71:
                    79:00:3e:61:9e:53:64:5d:31:59:4b:b1:55:b1:5f:
                    a2:0a:95:68:fc:88:84:da:d5:fc:57:01:ae:0a:f3:
                    53:58:96:12:58:77:16:3a:ad:43:7b:c8:46:c3:e9:
                    f6:db:e9:3a:98:c8:da:e1:57:bd:38:9b:b1:a7:2e:
                    3d:45:da:9e:45:0a:24:fa:3e:3f:b0:4c:dd:d2:64:
                    3c:83:dc:ee:26:c2:83:86:ba:a8:82:4f:da:6d:05:
                    4b:9f:80:03:55:a6:b4:62:ac:3f:6c:b6:62:e5:53:
                    30:fc:fe:11:e9:1d:07:74:1d:92:0d:85:b7:f0:65:
                    f3:e5:74:a0:c7:6d:e1:b1:a9:da:5d:18:58:fa:b8:
                    ff:31:9e:57:bb:f6:ab:79:c0:df:15:27:0e:fc:a6:
                    79:56:66:da:82:8c:1e:1a:d6:b0:6f:55:5a:44:b8:
                    d8:54:77:9a:82:b8:cb:48:ba:65:0a:fd:55:eb:54:
                    8a:e0:db:25:5b:33:19:08:a8:c1:f4:ca:7f:1a:ab:
                    79:9c:3f:20:87:50:22:b1:06:58:ea:0b:05:69:2b:
                    36:6f:c5:eb:b6:1e:f3:ec:ef:71:aa:f0:66:75:fe:
                    ed:a6:31:d7:0c:c2:cf:cd:b2:cf:2b:f5:19:05:64:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D8:4D:AD:B3:45:42:E6:70:3E:E1:52:F7:BF:7B:44:F6:D5:09:2C
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:fa:49:17:c5:3a:6b:40:4a:bb:54:74:5c:7f:aa:4c:ae:
         5d:b5:dd:21:79:3c:a2:dc:f4:2c:2c:9f:7e:99:3e:cb:24:fc:
         63:e7:c0:0a:2c:02:9a:78:a4:88:16:e2:8e:d6:a5:3c:5b:75:
         f3:d3:89:d9:47:99:97:2e:51:71:d8:ca:ed:ce:b5:82:aa:9e:
         bb:a3:62:c9:70:a7:26:c6:d1:29:a3:49:28:c3:04:2e:b3:c0:
         f6:af:ad:90:ef:6f:63:46:cb:b9:84:92:30:82:58:d5:c9:d0:
         b2:69:14:f2:23:00:15:3f:47:f3:45:51:b1:a5:db:42:55:f8:
         22:f0:e4:23:59:b7:04:97:14:f7:1b:f7:50:ca:17:04:c1:5e:
         74:ad:fd:e5:bb:17:45:2e:e8:ee:c4:17:2b:55:1e:3d:01:53:
         a3:72:f1:9e:f7:2c:2f:81:3a:a3:e4:43:fe:7b:21:ff:13:cb:
         47:5b:6a:45:5a:f0:a8:92:f2:d8:85:5a:89:4a:76:33:f2:72:
         f6:ee:3d:eb:e4:f0:7d:28:3e:bd:c1:17:67:c7:47:79:82:1e:
         c3:6b:65:79:41:45:c2:16:09:cf:f0:af:67:6b:bd:36:f1:ba:
         f2:58:f3:d1:7b:69:d8:6f:ed:68:3b:83:33:e8:49:f3:9e:f0:
         10:fd:20:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:38 2025 by rpki-client