Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File:                     QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier:          SMeENCCq0UdPGjkqxilvIoGIic/JikKBJ2lDLRJV3r4=
Subject key identifier:   57:C6:DF:B5:AF:40:15:7F:4E:01:EE:A3:B0:11:CA:C4:D4:DC:69:B2
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer:       /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial:       019747795F6CCFFC7632B0437BD19445D1EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number:          041B
Signing time:             Fri 06 Jun 2025 23:00:25 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:25 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:25 +0000
Files and hashes:         1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: v/FVJiQJYyXdLandAJckxHXGvQNBTA5OwLFkh6bysyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:5f:6c:cf:fc:76:32:b0:43:7b:d1:94:45:d1:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
        Validity
            Not Before: Jun  6 23:00:25 2025 GMT
            Not After : Jun  7 23:00:25 2025 GMT
        Subject: CN=57c6dfb5af40157f4e01eea3b011cac4d4dc69b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:e4:c7:36:81:8c:f0:7c:54:60:7c:46:1e:
                    bd:04:60:71:e9:ff:3d:fd:f2:7a:e1:77:d7:c2:9c:
                    de:31:51:fe:e0:1c:9a:49:0a:a1:1b:b1:91:aa:f9:
                    42:af:97:eb:dd:22:53:94:33:06:e8:7c:7c:9b:cb:
                    a1:1b:6c:58:9f:80:50:a1:f8:5e:c8:e8:01:6f:ed:
                    6f:67:8d:37:d6:36:31:9a:c6:9a:31:73:32:c8:e9:
                    41:18:7a:91:5a:90:9f:ad:8d:c3:ed:c0:04:23:11:
                    57:8f:ca:71:2a:c0:fa:5c:ba:a9:f8:0b:1e:83:f2:
                    d3:c6:06:6f:54:0b:ca:66:41:45:75:b1:94:b4:c1:
                    9a:49:ea:33:19:09:67:54:93:b8:23:cb:35:cc:22:
                    72:fe:86:91:10:6d:e6:5a:b7:58:af:76:5e:b7:cf:
                    9c:f5:13:11:9d:3a:bf:7b:2a:6f:5a:1d:c1:7a:eb:
                    eb:48:7f:75:cd:1e:b5:2c:33:ee:65:b4:41:04:cd:
                    1f:a2:8b:c7:e1:cd:3f:c5:34:e1:5a:51:78:bd:52:
                    d9:c0:4b:76:60:ed:38:59:e9:17:15:76:67:da:da:
                    41:6e:e1:93:14:2d:5b:da:13:2b:79:1e:90:f6:01:
                    0a:e3:5c:42:64:a5:ce:b0:a9:3e:11:1f:6b:69:86:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C6:DF:B5:AF:40:15:7F:4E:01:EE:A3:B0:11:CA:C4:D4:DC:69:B2
            X509v3 Authority Key Identifier:
                keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:dd:3e:41:52:e7:92:53:d2:ef:35:13:5d:10:5c:63:4e:
         41:a2:0b:ce:e7:e2:54:2b:b1:01:e1:72:5a:ce:0f:c3:75:a7:
         f2:70:21:46:38:1e:6e:f3:c1:59:e7:64:df:0d:71:7f:23:d8:
         e0:c8:cb:9a:8a:67:09:97:64:6b:cc:d0:21:7b:e0:02:d3:34:
         9d:fa:9d:28:76:fb:3d:5e:40:3d:ad:76:bd:c9:ee:13:7f:f0:
         6c:02:6f:90:07:09:6a:78:c1:60:79:98:52:f6:0f:20:dc:b3:
         97:b9:b4:70:4e:78:1c:a0:07:4c:e8:34:7f:8b:6e:97:19:7e:
         49:b4:0a:1d:4f:80:9b:8c:70:12:dd:bf:86:35:90:2a:66:50:
         cb:05:ad:a2:ae:24:c6:b7:8c:d8:ee:54:34:db:f9:82:b1:3a:
         a2:97:5e:c2:93:d5:0b:59:e9:9a:b0:ad:ec:d0:12:6b:b7:d4:
         47:35:5b:a5:35:1b:b2:a0:45:fe:e0:27:ca:26:e9:7d:7b:8e:
         5d:97:6c:11:bc:f9:0e:d9:8b:16:64:c5:6f:ba:f1:ed:76:cd:
         b5:62:e7:d7:06:39:16:7a:4b:1e:fc:04:84:a7:f6:b2:7d:56:
         1b:40:04:c6:f2:8d:7a:41:1c:e6:53:d9:bc:8a:9b:28:f1:c3:
         a3:7a:de:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeV9sz/x2MrBDe9GURdHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWJmY2IwNTU4Yzg2ZjgxM2QwMTEwNDVmZDE3ZDE2YWUy
ZWJlOGUwHhcNMjUwNjA2MjMwMDI1WhcNMjUwNjA3MjMwMDI1WjAzMTEwLwYDVQQD
Eyg1N2M2ZGZiNWFmNDAxNTdmNGUwMWVlYTNiMDExY2FjNGQ0ZGM2OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz3kxzaBjPB8VGB8Rh69BGBx6f89
/fJ64XfXwpzeMVH+4ByaSQqhG7GRqvlCr5fr3SJTlDMG6Hx8m8uhG2xYn4BQofhe
yOgBb+1vZ4031jYxmsaaMXMyyOlBGHqRWpCfrY3D7cAEIxFXj8pxKsD6XLqp+Ase
g/LTxgZvVAvKZkFFdbGUtMGaSeozGQlnVJO4I8s1zCJy/oaREG3mWrdYr3Zet8+c
9RMRnTq/eypvWh3BeuvrSH91zR61LDPuZbRBBM0foovH4c0/xTThWlF4vVLZwEt2
YO04WekXFXZn2tpBbuGTFC1b2hMreR6Q9gEK41xCZKXOsKk+ER9raYb5EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfG37WvQBV/TgHuo7ARysTU3GmyMB8GA1UdIwQY
MBaAFEFb/LBVjIb4E9ARBF/RfRauLr6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEt
ODcxZWRlOTAxNGU0LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEtODcxZWRlOTAxNGU0
LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/PdPkFS
55JT0u81E10QXGNOQaILzufiVCuxAeFyWs4Pw3Wn8nAhRjgebvPBWedk3w1xfyPY
4MjLmopnCZdka8zQIXvgAtM0nfqdKHb7PV5APa12vcnuE3/wbAJvkAcJanjBYHmY
UvYPINyzl7m0cE54HKAHTOg0f4tulxl+SbQKHU+Am4xwEt2/hjWQKmZQywWtoq4k
xreM2O5UNNv5grE6opdewpPVC1npmrCt7NASa7fURzVbpTUbsqBF/uAnyibpfXuO
XZdsEbz5DtmLFmTFb7rx7XbNtWLn1wY5FnpLHvwEhKf2sn1WG0AExvKNekEc5lPZ
vIqbKPHDo3re0g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:56 2025 by rpki-client