Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File:                     qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier:          k/dHdz2/xzoM3mlhNnaqQz69Ngfb/SofWhgTXosvB88=
Subject key identifier:   C7:A6:A3:46:FF:46:03:AD:3D:4F:C1:70:BC:CC:81:57:70:D7:E2:89
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       01992D0FB560E8196D63393EA76A6FBA453B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number:          1681
Signing time:             Tue 09 Sep 2025 06:00:28 +0000
Manifest this update:     Tue 09 Sep 2025 06:00:28 +0000
Manifest next update:     Wed 10 Sep 2025 06:00:28 +0000
Files and hashes:         1: Q1epDLLNnUzfsf-xFW4a-Y2XkJQ.roa (hash: w84BOAfcBqYsqabALnnfg1Wuoyv3VSmyIx6zia+PYNA=)
                          2: gLJC-FPMB6JG4uvuoXfj1y1VVB4.roa (hash: bJcY81wfY+5zVAZK4pJVEqgscj1+3rGIYBuBLom9f1Q=)
                          3: j51vgTDCax1tLhOyiZp4zqvzOKU.roa (hash: bN88IoNu8hIQldCCMN1vfnD2HLAoTn8gvr6w/tzj/KM=)
                          4: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: dEFEzePkynA0nx3m9DYQeKE5qCMyeZjIUsSzg33BdaA=)
                          5: z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa (hash: rTNzicdR5UxEu+zSwQpGpaPQg7acnJ6eKVlTT5jJQ8s=)
                          6: zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa (hash: db5+QXNKRG2BQO2CHQMOqU0fUStvszTNPuMXFPPnliI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:0f:b5:60:e8:19:6d:63:39:3e:a7:6a:6f:ba:45:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: Sep  9 06:00:28 2025 GMT
            Not After : Sep 10 06:00:28 2025 GMT
        Subject: CN=c7a6a346ff4603ad3d4fc170bccc815770d7e289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:39:97:7b:35:94:df:73:36:da:24:0b:56:
                    9f:71:9a:b2:82:68:52:75:d2:61:4f:0f:84:5e:e3:
                    63:83:ba:8d:ee:8a:bf:aa:7b:4b:fb:a6:0e:b7:ae:
                    ac:fb:66:e3:f8:0c:79:76:72:70:67:8c:8f:e5:62:
                    6d:7e:ad:8e:c4:59:d4:98:86:51:3e:06:59:55:54:
                    06:ad:41:65:13:2c:64:e9:b5:0c:34:a4:80:6d:f6:
                    b2:b0:92:bc:c5:d0:5b:9f:25:e9:73:1e:00:a8:f0:
                    cf:29:32:00:cd:fc:cf:b6:84:48:80:2e:23:e8:1b:
                    da:39:6d:06:29:4c:f4:50:9f:80:81:78:c2:b6:41:
                    1c:50:4b:9e:1b:d0:10:90:82:d9:d4:22:cf:ce:91:
                    eb:3d:d8:af:98:b3:c7:0f:1f:42:b2:ad:9b:df:89:
                    59:90:06:fb:94:c2:22:68:a9:7e:d1:b4:24:74:a7:
                    57:8a:21:a8:ed:e4:0f:93:1a:09:84:42:0b:73:d4:
                    ca:3b:50:5b:32:ea:3e:59:3d:64:20:cc:d0:07:5e:
                    30:32:31:d1:60:4f:3c:5b:ee:3a:e5:5e:74:11:5a:
                    68:3e:2e:5f:2b:62:3e:83:f0:36:01:16:dd:0b:bb:
                    0e:b7:50:80:f9:3f:00:56:48:a5:f5:47:45:0e:0f:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A6:A3:46:FF:46:03:AD:3D:4F:C1:70:BC:CC:81:57:70:D7:E2:89
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:50:6f:cb:95:d1:27:b7:e9:a6:7f:e2:41:b6:5e:8e:20:38:
         e8:84:62:d0:63:ea:90:6d:26:ca:fa:ac:94:d1:6d:24:cc:a8:
         ab:84:c2:d0:d6:f8:47:05:b7:74:e4:1f:02:65:8c:60:7b:fd:
         1f:31:52:5f:35:dd:9d:0a:45:ff:96:1e:d9:2b:93:b8:03:e6:
         d7:ae:cb:50:c4:b2:b3:5a:71:69:0b:27:03:21:9a:0d:f8:23:
         d9:a5:18:bb:70:e7:23:c4:9a:93:2b:bb:d3:ab:17:ca:7b:d7:
         e5:47:26:40:95:63:ff:c9:51:e1:00:d6:a0:01:84:1f:82:e2:
         90:ff:ed:05:43:b4:92:d8:58:64:db:a1:c3:53:88:eb:da:f0:
         2e:fc:46:98:87:02:d9:c0:42:f7:2c:e1:4f:d6:55:2f:41:3a:
         b3:e5:39:c6:0e:fb:6d:fb:6a:29:a3:2d:59:22:da:f8:1a:be:
         eb:bc:0d:f7:8b:83:fd:23:fa:fe:e9:b7:5a:f5:70:70:26:5d:
         e2:13:86:9f:39:4e:5e:82:97:92:44:fa:34:dd:c3:19:2a:91:
         a2:86:b3:34:69:91:44:f0:f3:97:e5:42:d0:1e:f4:1f:99:f7:
         08:a4:d3:e7:7c:3f:4c:b0:09:e7:93:e5:4e:94:f1:c5:5c:54:
         be:77:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 11:52:31 2025 by rpki-client