Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
File:                     q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft (raw, json)
Hash identifier:          0z9y3y729f/mWffyPsnJbCa1Nz7UPI319cDp1K1SS3w=
Subject key identifier:   F4:30:93:0E:B6:41:8B:32:2B:D6:B6:E7:DD:BC:EF:28:67:BE:0C:A8
Authority key identifier: AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C
Certificate issuer:       /CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
Certificate serial:       0197481E3F96D54A1227DF194C84C40B87DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
Manifest number:          0542
Signing time:             Sat 07 Jun 2025 02:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:30 +0000
Files and hashes:         1: WWXaaN1zwBirDLU3BmnsrZPd1-s.roa (hash: ZqdlSOebOyA4siBcQOkN6AJQaX0krOyaiW9rxlzSPYA=)
                          2: q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl (hash: Uu8igFTT9qU4N6i7R/Ie0boNb22G3ad1THOkMWf/nGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:3f:96:d5:4a:12:27:df:19:4c:84:c4:0b:87:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
        Validity
            Not Before: Jun  7 02:00:30 2025 GMT
            Not After : Jun  8 02:00:30 2025 GMT
        Subject: CN=f430930eb6418b322bd6b6e7ddbcef2867be0ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:dc:34:09:dc:17:28:a2:71:2d:75:a4:20:
                    92:93:ce:81:b6:5f:51:13:10:d3:4c:e2:be:3e:d9:
                    77:c7:5c:b0:f4:a9:7b:4c:9d:d7:b1:8a:47:2b:4d:
                    df:a0:d0:d0:73:c7:e4:90:3d:46:3d:41:77:f0:bd:
                    ac:15:cb:ff:da:00:8a:2a:5a:d3:78:a0:1a:e2:1d:
                    01:7b:5f:84:0f:a3:95:98:74:3c:44:7b:15:50:d1:
                    7d:39:39:9e:75:e6:c1:e9:bf:2a:77:9c:48:55:8d:
                    4e:da:0e:ca:d0:aa:88:0a:ef:1d:57:0a:02:5f:a3:
                    fe:96:ac:61:14:3c:bc:b3:1a:25:d5:84:2f:9f:72:
                    04:fc:5f:12:e6:21:10:12:f4:d2:0e:c6:be:9e:f1:
                    97:6e:ae:94:07:2d:70:52:05:5c:71:3a:9f:b8:de:
                    6c:5d:66:48:be:ef:a0:37:09:7d:6b:bd:73:b4:9c:
                    8e:af:72:35:a7:01:c1:d6:54:79:f0:7c:e3:cd:8f:
                    e8:80:bb:4f:04:61:04:b8:e9:1a:48:4a:23:53:0c:
                    9b:9f:8e:66:9b:71:e0:7c:b4:54:df:46:b3:f2:42:
                    2d:20:90:c8:0d:a6:88:e9:c2:25:77:e6:94:e2:a5:
                    c5:58:c8:02:0d:a0:5f:c4:eb:66:d8:c3:f2:ad:d9:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:30:93:0E:B6:41:8B:32:2B:D6:B6:E7:DD:BC:EF:28:67:BE:0C:A8
            X509v3 Authority Key Identifier:
                keyid:AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7e:37:a3:52:62:87:a2:a6:dc:79:ed:2d:7b:1a:73:9a:c2:
         ad:44:05:6f:f7:52:62:c4:bf:87:2e:a2:40:64:b7:e1:78:e0:
         89:43:17:c9:35:43:e8:84:d1:e5:b6:98:e9:61:60:bf:c2:f1:
         50:72:54:1b:78:e9:7a:52:87:7a:27:66:0b:55:5b:28:64:ca:
         bd:76:6d:aa:94:4a:c1:ba:8b:f7:97:0b:aa:97:2a:c5:1a:00:
         b9:b9:1a:94:93:2c:fa:96:47:03:68:a8:c8:bf:e7:5b:72:e6:
         32:e6:d6:f4:e7:1e:d4:41:8a:db:ac:c1:c6:0d:d2:ef:f6:1d:
         ee:bb:f1:af:52:c5:76:5d:f3:bb:c2:d0:3b:2d:15:da:31:fd:
         05:32:6b:17:07:e5:7e:c7:30:d0:bd:6e:12:93:35:41:80:ed:
         16:48:3f:5f:bf:30:85:10:5b:6a:1e:c2:c6:83:a6:12:72:c2:
         aa:c0:ee:c3:58:2f:50:43:41:40:29:2b:41:99:cb:05:da:b3:
         a4:68:79:03:d3:c1:d6:94:87:98:9d:a7:20:41:1f:0b:b3:d9:
         bc:50:4b:18:4a:63:6c:d7:00:06:42:1b:8d:b9:87:d8:c1:c8:
         09:98:4e:9f:e0:c0:e8:90:6a:89:e1:43:bc:bd:f5:19:6c:a5:
         8c:a3:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:07:11 2025 by rpki-client