Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File:                     QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier:          ogzMEJSjC2CprCSNWosplFUsQtD7R8LOmH7RHxo8aAk=
Subject key identifier:   42:C1:B7:A3:49:19:B2:E6:BD:9C:63:33:90:D2:1E:66:06:C1:4E:68
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer:       /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial:       019749312C19B1E3C31012E47BBBDB4818DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number:          12CA
Signing time:             Sat 07 Jun 2025 07:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:48 +0000
Files and hashes:         1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: 6C8l6CrjkAJ+gNU/EP9Wn/s2Jhdl9VxKoc7Zk4cz/AQ=)
                          2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:2c:19:b1:e3:c3:10:12:e4:7b:bb:db:48:18:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
        Validity
            Not Before: Jun  7 07:00:48 2025 GMT
            Not After : Jun  8 07:00:48 2025 GMT
        Subject: CN=42c1b7a34919b2e6bd9c633390d21e6606c14e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:53:aa:6d:81:8f:6f:af:80:89:1e:62:a4:9c:
                    f2:29:7e:e8:ec:ad:0f:bd:12:35:a2:ae:c6:be:9e:
                    9d:d8:49:41:50:15:e4:f1:9d:41:41:de:eb:1d:cd:
                    2a:83:a5:c5:69:f6:5d:04:70:13:d5:5a:81:f2:f6:
                    d5:f7:76:88:e6:d9:0c:f0:a4:c3:dd:6d:61:d2:d9:
                    5f:93:89:75:f1:4a:16:84:56:d7:00:f1:54:c5:12:
                    85:de:7e:95:8a:67:6c:49:71:bd:19:e9:2a:3f:97:
                    e8:9f:87:53:08:3e:ad:5a:a6:9d:3d:e6:72:40:79:
                    c1:71:4a:67:53:4e:6b:43:44:50:81:e1:87:28:e7:
                    55:9a:08:ac:e8:4d:43:4a:1a:03:cd:e5:ae:2e:a2:
                    8b:da:29:10:94:66:58:36:89:6b:cc:74:47:67:31:
                    d9:c0:76:16:20:75:5f:5b:1c:0f:04:d4:9f:c7:de:
                    08:7e:e5:d9:1b:0d:35:a9:a3:66:ed:7a:e1:af:b0:
                    d1:ab:4a:74:01:1d:52:bd:35:f6:f4:a1:1c:4d:1c:
                    d6:c7:15:0a:d7:f5:c1:91:90:bc:35:ef:a3:19:32:
                    11:f1:db:b3:e5:0c:c2:98:4a:17:50:a4:02:a2:7a:
                    3b:3f:b2:ff:80:d0:e5:4f:5f:82:72:db:30:51:e2:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C1:B7:A3:49:19:B2:E6:BD:9C:63:33:90:D2:1E:66:06:C1:4E:68
            X509v3 Authority Key Identifier:
                keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:b3:e7:23:92:38:da:1b:b6:bd:cb:c0:bb:8f:e5:ee:e3:
         d8:22:4f:2a:0e:b3:05:ed:87:20:26:d1:b1:26:ea:66:5f:a6:
         a9:55:39:a9:42:90:d5:bc:8e:70:2d:1d:24:ac:40:30:cb:3b:
         d4:99:87:90:b7:a3:31:ae:bd:37:1b:6d:7d:cd:3e:d4:e6:03:
         e8:74:c6:d3:4e:b1:3b:ec:10:1d:37:71:28:c9:4c:7b:ed:ee:
         e3:ca:64:65:b2:bf:64:0c:86:4a:4f:06:40:dc:50:92:7c:19:
         8a:41:9d:e5:eb:d1:c2:ea:00:83:2a:17:31:b8:bf:36:44:93:
         fe:ec:36:05:49:4c:cd:53:34:e9:41:d3:70:c0:79:11:a1:9a:
         28:8b:d8:99:cb:1a:84:e1:9e:33:fd:74:3c:5a:a7:2d:0b:f9:
         57:38:05:c5:2e:07:22:41:fb:47:d7:fc:f8:ee:a6:16:e3:ea:
         3f:68:6f:69:a8:86:5d:da:42:94:57:55:81:22:a6:a1:b7:f4:
         9c:2d:76:14:31:04:a0:38:b1:2d:84:4c:58:b3:f7:f8:79:05:
         c8:3a:a0:55:18:f1:44:f5:38:61:34:3d:69:ad:eb:fa:ea:ef:
         7b:e0:74:6e:1e:04:ed:e0:dc:60:18:d2:82:de:6d:f4:2c:7f:
         08:c9:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:28:34 2025 by rpki-client