Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File:                     qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier:          AeBA4qLkHljUwAzCxr4r2oBJqYYjO0yYjZfx4A5H2QM=
Subject key identifier:   E4:9E:CC:05:99:3A:1E:B5:D9:19:C4:79:53:D6:75:2D:D3:E9:F6:DD
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer:       /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial:       0198439BAFEAA18404FB1F8D3B6A31191991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number:          1290
Signing time:             Fri 25 Jul 2025 22:02:13 +0000
Manifest this update:     Fri 25 Jul 2025 22:02:13 +0000
Manifest next update:     Sat 26 Jul 2025 22:02:13 +0000
Files and hashes:         1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
                          2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: NVVV0eUccFyVKP65BnrAei1Ifxrpc8+FG2eLCy6WEiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:9b:af:ea:a1:84:04:fb:1f:8d:3b:6a:31:19:19:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
        Validity
            Not Before: Jul 25 22:02:13 2025 GMT
            Not After : Jul 26 22:02:13 2025 GMT
        Subject: CN=e49ecc05993a1eb5d919c47953d6752dd3e9f6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:86:cf:41:5c:a2:93:4d:0d:2a:56:29:54:8d:
                    95:e7:a8:55:51:1e:db:23:8f:c5:22:7a:78:5d:65:
                    ba:41:e5:16:92:87:bb:65:97:b2:1e:b9:48:9b:8d:
                    94:39:77:bf:89:41:7d:d4:c7:42:c8:d4:9a:1a:ce:
                    ee:9d:01:55:ca:a2:0b:4c:83:50:99:94:b4:ab:0c:
                    fa:84:ec:35:06:cc:77:e9:31:d1:a0:22:2c:17:e1:
                    87:c0:f7:41:30:c1:29:d1:af:e7:cc:56:06:c5:25:
                    4f:6d:0b:94:ef:b1:74:36:bc:5d:86:14:9b:55:b2:
                    d7:a6:92:ec:38:ae:ed:9b:1c:1b:20:1c:4a:91:70:
                    cd:83:a0:a0:e9:96:c5:4c:e9:c5:49:00:0d:0e:9a:
                    05:41:5a:8f:7d:e8:4b:51:87:43:f8:0b:02:0a:d5:
                    04:28:80:61:f8:82:c0:46:e0:bb:ac:7f:6d:d5:f8:
                    4d:80:e4:50:eb:27:06:30:d6:cb:df:53:ae:c7:8b:
                    92:7b:1f:20:33:eb:ff:98:59:a5:10:df:28:82:2e:
                    28:79:e4:36:0f:e7:2d:eb:aa:99:18:25:e4:b5:c9:
                    f4:e0:a7:34:af:1b:4d:c4:78:62:5d:e2:9a:cb:43:
                    7b:dd:29:d6:2c:a8:39:97:84:41:ae:40:1b:1d:c2:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9E:CC:05:99:3A:1E:B5:D9:19:C4:79:53:D6:75:2D:D3:E9:F6:DD
            X509v3 Authority Key Identifier:
                keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e5:4e:90:7b:ab:6b:54:c6:04:b2:77:f8:47:af:60:34:6f:
         7f:81:8b:7b:06:70:10:d7:64:82:e5:ba:1f:d3:2d:c6:0e:f8:
         08:3d:05:5d:4f:00:71:0d:4c:ec:a7:23:ec:c6:a7:2f:17:13:
         cb:58:3e:41:19:59:41:f7:00:16:e7:d1:5a:3e:c5:e5:98:43:
         5b:3a:89:8a:53:3e:b7:7d:f3:06:b0:59:c4:09:09:dd:07:4b:
         a9:68:94:c9:ef:0b:c6:11:78:d2:f8:68:fb:3a:65:d3:64:a4:
         b9:aa:c6:a3:43:d3:ed:3f:c3:d5:19:6e:c6:9f:63:0a:71:01:
         6b:fd:5e:65:5c:6a:50:d6:c5:59:6f:88:d2:c4:20:56:1c:d0:
         a1:6c:2d:7d:ec:88:04:9c:4f:82:dc:76:ff:8f:fb:08:21:9a:
         d9:3f:08:76:7b:49:5f:f3:6a:4d:cc:72:9e:7a:4b:b4:5b:8a:
         20:38:19:f6:2d:23:ed:58:91:a1:9b:f7:3a:db:7e:c7:c7:e0:
         d9:7c:88:e4:d7:92:46:90:e6:ed:ea:98:c8:20:93:76:53:74:
         5b:f9:d8:fc:30:4c:d5:46:22:84:fe:a6:f1:cf:77:93:49:d1:
         87:15:18:fc:ef:7e:31:25:dc:f5:82:d8:30:1d:37:a0:5d:e5:
         9c:ba:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:05:18 2025 by rpki-client