Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          3/F9nrg/QvMFCpUwNM/62A0gBan0xwJCsRqA9sCLNo4=
Subject key identifier:   50:9B:20:54:F8:A2:0C:26:AC:A3:B3:50:52:DE:7F:11:39:DF:EC:4B
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       0197488C648403E65E5FD0511F366E99436D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0C52
Signing time:             Sat 07 Jun 2025 04:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:49 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: 7jBzthjGsCdXyIaVvQQliJBC8ntRtmBeBez6tUWglkw=)
                          2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:64:84:03:e6:5e:5f:d0:51:1f:36:6e:99:43:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Jun  7 04:00:49 2025 GMT
            Not After : Jun  8 04:00:49 2025 GMT
        Subject: CN=509b2054f8a20c26aca3b35052de7f1139dfec4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:c3:3e:2f:c2:9b:b9:75:80:ea:6c:d3:19:
                    b7:e5:54:b9:c2:7d:b2:b1:29:c5:ae:31:aa:9c:13:
                    fc:88:77:94:0e:65:0c:20:ef:8e:bd:4d:eb:96:7e:
                    c5:ad:8e:da:50:ab:8c:21:b6:92:d8:01:84:65:95:
                    da:71:37:6c:01:aa:fc:d1:76:7a:6c:bb:b7:5b:34:
                    52:1e:46:7b:0e:92:1b:69:12:70:ab:dc:00:46:93:
                    74:8c:55:81:cf:aa:86:6f:c6:5e:0d:16:71:86:fa:
                    bd:14:ea:ed:64:e7:9d:df:61:2a:24:ec:aa:f1:f2:
                    5d:36:80:7c:f6:88:99:9d:0d:32:f6:fd:1a:14:da:
                    98:cc:db:f9:e1:c0:31:42:20:dc:58:c0:42:74:d4:
                    0b:3a:e7:be:fc:1c:58:b9:4a:b5:ba:bb:eb:d7:74:
                    f0:b6:36:a4:1d:bb:07:55:70:88:a6:1d:8b:ce:da:
                    c4:a6:e7:12:8f:92:d8:89:86:b5:f7:32:99:8e:64:
                    1e:17:98:bf:23:1a:45:ee:f8:b5:cc:8c:66:82:17:
                    25:ff:ef:5c:75:c5:ba:39:0b:1a:78:b3:c9:c9:02:
                    18:f0:de:8d:cb:8f:b0:8c:58:03:0d:fc:f3:e9:4d:
                    76:83:12:ca:ac:f8:84:12:6f:44:92:ab:4d:b0:f5:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9B:20:54:F8:A2:0C:26:AC:A3:B3:50:52:DE:7F:11:39:DF:EC:4B
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:10:ae:a6:89:e3:c6:f0:b8:5e:19:ef:b1:b0:35:7c:8b:a2:
         dc:45:ee:ec:c8:0e:f6:a7:32:35:5c:1a:47:86:48:b9:62:0c:
         b9:76:44:0e:90:b9:21:87:be:d6:92:80:f8:3b:94:92:38:29:
         ee:39:75:30:d8:32:96:a0:a2:e5:e2:74:e4:be:d8:80:f8:03:
         a0:c0:b7:79:19:ab:91:8c:1d:6a:b7:05:45:2c:c2:07:1e:b2:
         8e:1c:6b:7c:ca:73:50:b7:c8:a7:ca:37:26:cb:53:60:af:f6:
         66:9e:cb:33:cc:9e:f4:35:4c:81:bc:f9:4d:e5:92:05:29:2c:
         61:b4:34:6b:a7:4e:89:0e:9b:23:b7:cc:86:09:5e:b1:38:93:
         16:4f:9e:c1:32:e7:c9:30:d7:8e:46:9d:c1:d9:b9:8e:a8:e4:
         eb:52:32:67:9e:c0:e4:d0:d3:57:65:b4:46:24:e8:df:18:14:
         7c:3b:27:a6:c1:84:e8:64:6c:e9:79:fe:a8:f4:23:f8:8b:37:
         b2:0a:d5:ef:9f:d6:50:36:9a:f9:c8:52:21:07:7d:cd:50:65:
         91:23:f7:54:d5:72:cb:26:7d:6a:93:88:4e:55:7a:9a:76:8f:
         3c:52:c7:cd:a3:0c:24:88:27:ed:b2:7d:39:44:72:1b:c1:f6:
         ff:a6:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:19 2025 by rpki-client