Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
File:                     QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json)
Hash identifier:          lkNfo5adyiNVPMe/QhY9dgADMFdM/EJ6YBz443/oX/M=
Subject key identifier:   6E:4E:1C:08:86:6C:49:05:F8:75:6B:48:D7:B8:5B:C2:BA:67:30:FC
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Certificate issuer:       /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial:       019748558A24ACC4BD9F1081F6D49150F566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
Manifest number:          0845
Signing time:             Sat 07 Jun 2025 03:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:54 +0000
Files and hashes:         1: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: 5rNUHs/WFpOea2BYjf2KjeA9LBRe4eimYiyldD3XSKQ=)
                          2: dwbiIWEratA3KWkL5imPi021V8I.roa (hash: uBYUZ2jEhyVMlLuwkanT9PAiy5t/N1UtpXaLMB0jCDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:8a:24:ac:c4:bd:9f:10:81:f6:d4:91:50:f5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
        Validity
            Not Before: Jun  7 03:00:54 2025 GMT
            Not After : Jun  8 03:00:54 2025 GMT
        Subject: CN=6e4e1c08866c4905f8756b48d7b85bc2ba6730fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:53:50:d2:98:77:9e:e2:f8:fe:b9:64:3b:
                    ee:cc:9d:e8:8d:a8:54:fb:41:cb:56:58:e8:e8:f6:
                    ab:87:f9:9b:7d:2f:2a:1f:c0:63:88:38:2c:f5:85:
                    f6:17:cf:b9:fc:de:d6:96:36:c1:91:c9:63:4c:cc:
                    23:42:72:ec:e8:85:86:11:69:e2:0f:4b:05:07:d0:
                    58:29:75:bc:98:3d:58:e6:cc:b8:3c:73:ac:41:28:
                    c3:56:87:86:09:8e:5b:fa:75:ac:3f:f1:7e:f4:23:
                    e4:43:ea:c5:54:55:8d:81:cc:32:63:a4:79:07:a2:
                    61:db:dd:7c:25:06:c6:06:de:84:7f:b4:4a:c1:7e:
                    69:1c:ad:1e:99:5d:d2:c2:32:7d:e3:c5:55:e5:9d:
                    72:cd:5f:a4:95:af:4b:e6:e2:cb:d0:52:ca:59:d8:
                    ec:f0:5a:82:b8:f1:1e:2e:5f:59:15:72:00:17:e5:
                    de:ab:ff:40:0c:c9:a4:1b:27:d4:e9:e3:28:57:88:
                    41:7c:16:3a:80:32:26:11:d1:20:d3:28:ee:4b:0d:
                    29:bb:bb:eb:58:37:b0:95:87:52:1f:69:e4:e4:94:
                    62:70:69:89:01:be:85:9b:d7:88:02:e2:cf:b6:24:
                    af:c8:79:0a:44:07:40:d6:37:65:94:92:00:80:d7:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4E:1C:08:86:6C:49:05:F8:75:6B:48:D7:B8:5B:C2:BA:67:30:FC
            X509v3 Authority Key Identifier:
                keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:50:8e:b2:e0:40:6f:c4:be:6f:42:ad:7a:c6:72:7b:bc:52:
         15:21:3f:95:31:9f:41:e8:23:bc:ef:98:6a:7e:e6:f9:c9:86:
         4c:48:3d:14:e3:2a:0c:4b:1d:51:12:1d:4e:a4:a4:8e:3d:98:
         22:fe:13:c5:d7:e6:66:85:dc:70:47:d2:a7:e6:97:f2:b3:ef:
         85:10:35:c6:c6:1a:d4:41:4c:e6:35:96:f7:7a:c1:4e:c9:59:
         99:44:41:5a:ff:1d:70:a7:86:97:1c:80:7b:31:95:a8:09:2e:
         6c:7c:45:2d:c7:7f:8e:bf:cd:d7:23:35:80:b7:78:0b:be:33:
         46:31:61:91:c0:17:aa:48:ff:90:0b:9d:28:2b:4e:6f:36:84:
         59:9a:b4:15:2a:11:8a:13:a7:fc:5b:99:8e:3f:73:80:26:49:
         58:ac:da:a6:a3:b3:43:7e:72:4f:d2:4e:55:bf:87:77:c9:a7:
         92:ff:57:77:e5:96:53:ec:46:94:a2:d7:17:81:67:7b:08:75:
         78:31:4d:be:db:3d:7b:4c:dc:00:ab:79:18:eb:0b:1a:e1:85:
         0b:2a:fc:ab:1f:ef:20:f7:6c:18:e8:15:ec:db:5d:d3:3c:84:
         05:27:26:e8:31:06:6c:53:cd:b4:1a:46:61:d1:d6:4a:7e:68:
         ee:16:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:25 2025 by rpki-client