Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File:                     QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier:          +csX9OUTS/9MCxNRJincIGbWi4ev5x9MFpgXIcZzaq8=
Subject key identifier:   FC:31:62:B2:87:8F:3E:89:59:59:EB:45:38:D5:67:73:A9:C2:84:5E
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer:       /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial:       01975C1373529A6D0EE3AE001CE29E35158E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number:          1261
Signing time:             Tue 10 Jun 2025 23:01:07 +0000
Manifest this update:     Tue 10 Jun 2025 23:01:07 +0000
Manifest next update:     Wed 11 Jun 2025 23:01:07 +0000
Files and hashes:         1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: pJ7Dgy8oTJn7MLccG1T/HVLv4d70bYUBXRlpvbDZGbk=)
                          2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:13:73:52:9a:6d:0e:e3:ae:00:1c:e2:9e:35:15:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
        Validity
            Not Before: Jun 10 23:01:07 2025 GMT
            Not After : Jun 11 23:01:07 2025 GMT
        Subject: CN=fc3162b2878f3e895959eb4538d56773a9c2845e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4e:42:a4:91:be:45:0e:11:07:fd:78:9b:42:
                    dd:2d:c0:2b:8b:70:f6:41:3c:ad:2e:06:22:5f:af:
                    02:cb:7d:8a:da:d2:79:6c:53:4f:81:bb:97:ac:1d:
                    be:a6:d6:f9:84:eb:e2:24:6f:e0:9b:ca:c5:9d:9a:
                    f6:80:ff:e2:6f:29:a5:6b:87:40:c4:21:b7:bd:f8:
                    9b:1c:29:00:2e:cd:c8:3b:18:97:a9:a0:55:3c:c7:
                    b1:b7:de:92:d6:3a:f6:fb:04:2d:6d:96:7d:f2:48:
                    9e:ca:2c:7e:16:62:f2:7b:07:71:d5:a5:83:e2:c9:
                    fc:4e:86:f6:48:56:f8:12:af:82:43:c3:2f:50:ad:
                    8a:44:0c:44:56:9e:1b:37:6a:13:30:fe:bb:26:49:
                    ea:af:f5:00:d8:88:cc:5c:3c:6f:82:08:92:e0:d0:
                    16:75:d4:40:c9:a6:9e:ad:fa:3b:17:4d:7d:15:54:
                    55:15:03:d2:5d:4b:20:a9:e2:b7:85:ea:b9:eb:05:
                    47:fd:3a:3a:3c:7c:5f:f4:1f:67:57:80:14:59:f0:
                    00:90:35:d0:3d:15:b8:50:b6:a2:9d:5f:fc:74:57:
                    2e:42:6e:79:96:b7:93:11:b8:7f:9a:ed:ae:0c:44:
                    5f:7a:b4:bb:b9:39:08:f7:75:68:ce:11:a8:fa:75:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:31:62:B2:87:8F:3E:89:59:59:EB:45:38:D5:67:73:A9:C2:84:5E
            X509v3 Authority Key Identifier:
                keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:52:95:b4:09:21:d0:f4:47:44:a9:37:15:23:cd:cb:3a:cd:
         58:8b:0f:3d:89:24:8f:d9:82:19:07:d0:0a:ac:74:d8:f6:51:
         3c:00:5d:5c:c1:30:a3:ce:2c:39:c0:1e:9b:9e:18:ce:bb:d0:
         63:ee:9b:2c:4c:ee:70:27:1c:0a:6f:2e:cb:93:26:8d:cc:94:
         88:be:ea:b1:55:b7:30:23:d5:7f:05:71:d2:35:c9:81:bf:c4:
         9a:32:c5:86:ff:c5:14:ad:cd:78:6b:c7:05:32:c0:60:72:d9:
         1e:02:7b:f6:ce:ea:9e:c6:56:d2:c9:96:a8:66:6b:e5:47:54:
         96:90:d2:6b:f1:78:ec:20:e2:34:28:27:db:45:b5:81:a7:52:
         22:7d:a9:60:ee:d8:9f:36:e2:e7:02:35:07:6c:1f:fa:73:cf:
         60:3a:17:9d:3f:d3:a6:a3:fc:0a:26:40:7a:41:d6:87:42:f9:
         d2:13:37:d8:73:40:5c:3c:fb:db:81:1a:03:b0:df:d6:c3:f6:
         fa:1a:75:04:7c:ff:7a:b0:be:19:b9:88:52:0a:1d:ef:f1:33:
         e4:51:9d:86:0e:b4:1b:2f:3a:e7:37:d6:46:8d:fe:48:50:72:
         1a:7e:91:bb:fe:8a:c3:0b:f1:29:d5:96:19:37:72:15:ca:2e:
         6d:d8:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:18:39 2025 by rpki-client