Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File:                     QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier:          581BHN1HKsyLFakeZTIcv4WPB9ffP/xuyMlu4PMLLD8=
Subject key identifier:   3A:39:3A:AA:F3:D7:EA:DA:97:54:27:13:27:EC:C3:BE:BB:1D:86:7C
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer:       /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial:       019758360925744B144F7908A23D238333CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number:          125F
Signing time:             Tue 10 Jun 2025 05:00:25 +0000
Manifest this update:     Tue 10 Jun 2025 05:00:25 +0000
Manifest next update:     Wed 11 Jun 2025 05:00:25 +0000
Files and hashes:         1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: I8aKX42ln+0PomvdZ2Gfj3r79NgZhFYq28sMXMoJp5c=)
                          2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:36:09:25:74:4b:14:4f:79:08:a2:3d:23:83:33:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
        Validity
            Not Before: Jun 10 05:00:25 2025 GMT
            Not After : Jun 11 05:00:25 2025 GMT
        Subject: CN=3a393aaaf3d7eada9754271327ecc3bebb1d867c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:47:7e:d2:2f:66:3e:c2:e7:3f:cc:96:47:b4:
                    a6:c2:e6:64:83:47:71:16:7f:48:36:65:14:75:eb:
                    dd:6d:8e:4b:fd:d4:7d:82:f7:11:fe:50:de:3f:da:
                    2c:09:68:7c:c4:26:4d:ba:10:99:05:3b:98:fa:3c:
                    c5:56:15:cb:d8:ec:e3:af:db:54:fc:b6:59:8d:a0:
                    bf:17:53:9f:41:07:cf:f0:46:a4:df:32:7f:67:a1:
                    a6:2d:df:82:f2:ae:f6:ff:21:6e:3d:25:5a:1a:a2:
                    82:e6:a8:0d:89:83:68:78:8c:4c:09:22:a3:02:4e:
                    ac:82:44:33:0b:70:ad:7a:5d:f2:f2:a2:9d:08:61:
                    f3:74:20:8f:4d:7d:40:44:bc:37:0e:bc:51:98:35:
                    b0:24:d5:e5:61:35:72:bd:f6:a3:18:13:3e:59:40:
                    55:56:eb:9d:02:cd:24:8a:e9:74:f2:c8:a1:08:66:
                    62:e7:5e:23:a8:d5:54:45:2e:26:5c:64:1f:a1:38:
                    4c:a7:21:bc:19:1e:90:6e:7e:fa:5e:21:79:6a:15:
                    85:be:54:2f:22:24:86:9f:3d:9e:8a:a0:4e:24:15:
                    b3:cb:3d:7e:c1:f2:c2:66:45:c2:14:41:d2:a4:a6:
                    6a:77:55:33:9d:49:f7:41:75:27:99:2e:35:cd:f5:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:39:3A:AA:F3:D7:EA:DA:97:54:27:13:27:EC:C3:BE:BB:1D:86:7C
            X509v3 Authority Key Identifier:
                keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9b:ca:6d:c3:2d:cc:ee:7b:27:10:95:94:68:5c:5f:83:ca:
         b1:98:50:79:2f:41:7c:ef:ae:e9:8b:82:06:16:4e:49:30:9d:
         99:38:c8:f5:2a:1b:36:1f:d2:90:17:ea:5b:03:b0:e2:41:5e:
         07:cf:eb:fd:b3:89:9f:6e:79:8d:77:f9:93:a8:b6:9f:9c:4c:
         92:fd:a2:5f:30:33:7a:32:23:68:18:bf:4c:c5:49:f0:e2:96:
         e6:80:d1:81:53:42:30:f2:e1:43:ae:18:e6:28:ff:ed:f6:31:
         12:33:1d:5f:23:5f:92:76:86:8d:18:00:0b:8b:8f:f3:a3:29:
         53:2e:25:c8:de:6d:d9:fa:88:65:a3:94:e8:ff:7e:e3:47:53:
         73:e2:6c:d1:b8:b7:a1:ab:a5:2b:85:88:1e:1d:71:ca:eb:99:
         3f:82:f6:c1:aa:5c:6a:d0:69:67:17:81:60:92:13:f0:d9:5a:
         7c:73:39:80:48:69:f4:ec:d5:be:15:d1:b9:55:05:67:cd:86:
         84:ed:5f:b1:b6:fa:e2:5c:bc:22:0f:14:84:ca:83:09:45:39:
         f7:98:0a:1e:40:71:fa:57:7c:40:ed:ce:d8:41:4a:06:14:c1:
         de:43:87:34:38:27:b2:b4:b0:15:e8:63:62:ed:43:f4:e5:54:
         f3:1d:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:22:15 2025 by rpki-client