Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File:                     QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier:          XDoUmWSN6BdCcOh6TUfjf8NktBxkisy7nq7Fv/kw5zU=
Subject key identifier:   DA:26:F4:12:91:36:16:23:25:92:40:80:16:86:DF:FD:28:8B:4F:84
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer:       /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial:       0197469EAB22F7CA13B17819D8AD5B48CFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number:          0B8A
Signing time:             Fri 06 Jun 2025 19:01:32 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:32 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:32 +0000
Files and hashes:         1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: UyUnw+0jwL4O4BY1aygxSSBc99GalcFPCIq2wXP4aS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:ab:22:f7:ca:13:b1:78:19:d8:ad:5b:48:cf:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
        Validity
            Not Before: Jun  6 19:01:32 2025 GMT
            Not After : Jun  7 19:01:32 2025 GMT
        Subject: CN=da26f41291361623259240801686dffd288b4f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:c5:5d:05:3b:e3:e1:0d:05:46:3f:03:50:
                    ae:b7:24:d5:66:e8:c7:06:99:2f:d1:db:b0:35:d7:
                    12:a4:1b:39:6a:53:d8:3c:2e:06:52:91:6a:9e:aa:
                    1b:a0:9a:b7:4e:45:39:f5:00:f8:ed:39:ec:9c:21:
                    1d:6f:9a:bd:39:03:b9:63:55:39:4c:16:5b:2d:cc:
                    89:8b:79:73:65:00:76:1d:e9:eb:73:4d:85:d5:ec:
                    f1:56:de:65:c2:b0:eb:74:c8:30:ff:c4:ad:36:a6:
                    55:86:cc:17:10:1d:e5:69:79:bd:96:f1:df:56:7c:
                    b4:87:8d:58:0c:21:f7:4a:28:c4:70:4e:3b:84:b3:
                    c6:30:7f:f3:0b:86:a6:48:d8:1a:82:e0:7a:56:c7:
                    7e:be:94:52:01:a2:30:14:54:26:7d:7e:0f:fe:cf:
                    73:3f:a8:fc:ef:3d:04:5f:f3:37:2a:d3:54:1e:d7:
                    e2:18:01:7b:dd:ed:6a:d7:a9:90:87:03:e8:38:75:
                    17:1c:bc:c1:f7:72:52:01:02:d8:6c:dc:0e:0b:a5:
                    40:3e:5f:23:b6:ac:c1:96:fe:14:78:64:04:8a:15:
                    ee:bc:ee:70:f9:24:98:77:e3:83:ca:77:64:e6:32:
                    62:94:f7:b8:c7:90:56:41:e4:3c:63:92:f3:9b:d0:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:26:F4:12:91:36:16:23:25:92:40:80:16:86:DF:FD:28:8B:4F:84
            X509v3 Authority Key Identifier:
                keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:69:39:7c:37:70:54:50:a8:0e:3a:0b:d7:78:1e:e9:7e:99:
         8d:74:15:26:33:15:1f:67:38:2e:c5:b3:ed:3a:f4:62:fb:ff:
         13:58:f4:dd:0d:d5:de:88:14:70:12:75:4f:87:9d:f2:d4:7e:
         05:7e:24:e5:6b:5b:e5:43:64:3f:8b:27:d2:26:9e:4b:10:c5:
         d1:cc:a8:62:f3:55:48:52:7e:0a:b7:91:6e:4a:c6:d9:9f:3a:
         00:7e:15:60:20:d7:16:73:d3:2c:f6:13:60:5c:cd:6f:92:82:
         ce:62:3a:76:2b:9f:9e:2d:e0:f8:0b:b6:94:32:0c:6c:7d:28:
         04:ce:a5:b2:5c:e4:86:d7:4e:2e:d8:f4:19:ea:6c:b1:99:a0:
         0c:f6:92:87:9a:fd:d0:81:59:e3:13:2c:84:3d:89:95:6d:9a:
         f9:60:1f:aa:82:a3:5c:01:19:cf:43:2f:01:4b:c2:b5:8b:0b:
         d6:87:07:c0:42:6f:1d:01:42:02:8d:ca:3a:60:79:bb:4a:18:
         22:5d:df:a3:af:ca:d8:c5:2d:82:f3:7f:23:ed:ad:6d:c9:e9:
         71:7e:d4:31:5c:ef:02:b7:3e:85:7c:f0:46:08:83:0a:fc:7b:
         85:09:d0:10:10:07:de:22:61:d9:fb:d9:3d:88:9b:9e:9d:f9:
         5d:aa:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:46 2025 by rpki-client