Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File:                     Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier:          sDvNWHZVTUG2TEi0hE+3hOE57fIzWZ/0PJRGO2lLI94=
Subject key identifier:   C0:96:8C:11:94:CB:6A:DA:83:EE:D7:10:5E:55:04:54:03:D8:16:4C
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer:       /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial:       019765F234D28C31DB26794157B41C999362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number:          158B
Signing time:             Thu 12 Jun 2025 21:01:01 +0000
Manifest this update:     Thu 12 Jun 2025 21:01:01 +0000
Manifest next update:     Fri 13 Jun 2025 21:01:01 +0000
Files and hashes:         1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=)
                          2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: fPZy9fc60YxUgUNDZG96E0D3720qMv96gg5gMdd5dr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:34:d2:8c:31:db:26:79:41:57:b4:1c:99:93:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
        Validity
            Not Before: Jun 12 21:01:01 2025 GMT
            Not After : Jun 13 21:01:01 2025 GMT
        Subject: CN=c0968c1194cb6ada83eed7105e55045403d8164c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:91:d5:95:16:91:4e:5c:5c:d1:79:23:90:26:
                    52:69:16:8d:ab:29:da:1d:24:28:30:31:55:51:13:
                    4a:14:1e:aa:05:89:fb:96:4c:20:d0:84:e9:e2:8c:
                    f6:e0:65:b9:a5:95:05:80:33:68:48:68:8d:3f:d9:
                    4c:e0:de:bf:1a:ca:2a:de:7b:aa:ef:a5:d3:44:bd:
                    7e:66:a2:8c:e6:73:bd:07:c6:d3:0f:24:4c:67:a0:
                    53:b7:7d:e2:a7:a3:0f:ff:c0:54:a6:fa:28:1f:3d:
                    60:68:c8:4b:c4:c0:eb:6c:95:40:60:42:ed:2e:a1:
                    10:9b:58:89:72:2a:28:62:39:67:87:90:d9:c2:0e:
                    6d:f4:3a:22:36:83:0a:44:f1:e9:a8:5b:0f:7d:47:
                    b9:d0:08:27:8c:76:b9:c0:8e:a7:e7:d1:6d:f4:d6:
                    78:9c:ba:4f:3c:ff:1e:4e:08:b7:35:83:c2:ce:77:
                    d6:cd:b9:6b:e8:92:e4:4f:b3:e2:43:35:b4:92:3c:
                    59:21:17:fe:55:e8:c1:c3:3b:88:5f:e8:33:6c:92:
                    dc:5d:c7:66:99:65:b1:77:28:19:0d:54:b8:7c:ee:
                    0d:7c:e7:b8:3f:85:8c:cf:d3:ea:ab:75:ee:29:92:
                    eb:2e:59:ae:f1:1f:06:97:f0:a9:1a:28:eb:45:ca:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:8C:11:94:CB:6A:DA:83:EE:D7:10:5E:55:04:54:03:D8:16:4C
            X509v3 Authority Key Identifier:
                keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:c8:94:16:66:21:e9:68:91:84:f7:4d:51:ff:24:a0:67:
         aa:a1:ab:53:16:e1:03:69:b4:22:6a:03:7e:fa:10:b9:87:49:
         21:58:ed:5f:34:a1:a0:7d:bb:50:3b:d0:8a:cc:63:06:c2:24:
         d3:d6:9d:ae:53:c4:c2:5c:6e:d2:b5:86:67:08:6b:aa:e6:f0:
         93:5b:3f:df:a1:74:bc:f3:51:6b:cd:74:64:de:d5:9a:e9:33:
         8c:5a:0e:f6:89:7c:66:f3:9a:c9:6b:6d:1c:c2:33:f6:9e:7e:
         ba:74:10:a6:84:2e:3c:55:00:fc:9b:03:06:a5:67:df:f1:0e:
         01:c8:3a:e1:6d:d0:72:1f:cd:1f:8f:4d:df:a0:30:d1:28:9e:
         f2:71:9d:86:cb:63:db:08:00:0b:06:d7:85:d9:9f:32:b5:19:
         9a:f0:de:2b:f1:8b:0a:d9:2b:fc:55:ab:b2:8f:7c:33:89:73:
         30:46:67:4d:8e:17:3f:c5:20:05:d6:50:5f:20:ba:45:dc:0c:
         f9:df:de:93:39:7a:87:43:90:b8:31:3c:24:cb:8e:b8:bf:7f:
         c8:bb:18:cc:92:50:ee:1b:9a:c6:25:f0:80:08:0f:1f:89:1e:
         d7:3c:4d:5a:95:50:e1:36:d1:5f:b9:8b:31:f7:57:32:05:7f:
         cf:98:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:34:13 2025 by rpki-client