Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File:                     Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier:          V2xnWccJXI0iZTCTPttihsXePQIpv7OuhEgnwMH3KuA=
Subject key identifier:   9B:E5:6A:FA:E0:84:0A:F9:8E:1C:B0:A4:8F:E5:DA:FF:53:74:04:33
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer:       /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial:       01976584C10C932E79924E2F4D1D0631B6ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number:          1587
Signing time:             Thu 12 Jun 2025 19:01:28 +0000
Manifest this update:     Thu 12 Jun 2025 19:01:28 +0000
Manifest next update:     Fri 13 Jun 2025 19:01:28 +0000
Files and hashes:         1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: 8LZRT4vU5zWbHY0uCp5uabU6M8YsOcg4AEEXvbEVNWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 19:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:84:c1:0c:93:2e:79:92:4e:2f:4d:1d:06:31:b6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
        Validity
            Not Before: Jun 12 19:01:28 2025 GMT
            Not After : Jun 13 19:01:28 2025 GMT
        Subject: CN=9be56afae0840af98e1cb0a48fe5daff53740433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:46:c5:a8:be:22:33:9a:cc:36:25:91:e9:2c:
                    58:29:38:e3:7f:0b:3d:3d:03:85:98:1e:c1:2c:67:
                    78:86:40:03:0c:14:2a:12:d6:f5:5a:99:73:7b:09:
                    51:03:32:f4:ec:77:dd:e1:8e:e8:26:3f:de:c9:60:
                    8b:36:41:5d:84:5b:3e:16:01:d4:2c:cf:6a:c3:ec:
                    c5:8a:07:ed:c5:a3:f0:2f:b9:90:b8:6f:7d:d5:54:
                    21:67:d0:52:ff:45:60:47:f1:c6:4c:5e:25:c7:38:
                    cf:83:fa:8b:47:8a:0d:71:c8:97:75:3f:75:0a:b3:
                    d9:70:9e:73:af:47:69:72:a0:02:93:79:d5:85:91:
                    f3:6d:1d:57:8e:b0:93:3c:e7:15:51:80:4a:04:67:
                    15:12:80:f2:bc:67:f8:b8:0a:93:89:22:c5:78:0f:
                    3f:36:da:dd:a8:3f:cb:10:07:08:95:b8:00:4c:06:
                    ca:94:be:88:de:f6:52:f4:06:d6:79:82:78:30:35:
                    04:5c:8d:6a:e6:27:22:3d:e8:56:1f:02:66:a2:cc:
                    17:03:cb:70:9a:98:81:be:fc:ad:51:f2:e7:c7:ee:
                    aa:c5:10:89:f4:7a:60:8b:cd:3a:16:da:79:85:04:
                    92:22:2b:3b:3a:96:10:36:98:bf:67:b2:35:33:ce:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E5:6A:FA:E0:84:0A:F9:8E:1C:B0:A4:8F:E5:DA:FF:53:74:04:33
            X509v3 Authority Key Identifier:
                keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e7:11:e4:a5:67:21:a5:d3:4c:4c:68:cc:bb:4e:b3:2b:af:
         9f:ca:09:6d:2f:e5:37:4d:f8:a8:5e:af:8d:e1:cd:50:1c:b1:
         6b:41:91:70:d6:76:0c:e9:62:e6:b5:9d:82:d3:b7:97:a0:a3:
         66:22:fc:f6:80:81:da:8d:13:3d:df:a5:ef:65:da:ee:9e:43:
         bb:9a:3d:ae:4d:0c:23:c1:4c:4f:06:9b:a5:74:61:28:3c:af:
         fd:83:c8:25:44:e9:95:be:f5:d4:bc:9e:2c:72:19:b2:7a:9c:
         c4:a4:fe:74:de:d3:21:ba:de:71:9d:ed:55:7b:3a:74:03:83:
         94:ff:82:8e:72:3e:5b:12:3c:fd:a9:d4:df:96:a0:f3:76:d9:
         09:cb:9d:1d:ff:96:1e:6e:f9:3f:97:8c:3c:14:6a:ed:f9:55:
         40:4a:6f:53:d7:d9:f1:f9:4a:8d:20:d5:f9:7d:06:26:c8:ad:
         5b:bb:be:c8:e0:d0:f9:b8:2c:1c:01:df:c2:08:e8:d5:0d:f7:
         4c:2d:91:a9:6e:73:f6:7d:29:7e:31:f4:94:f5:aa:a3:59:fc:
         5a:a7:63:ed:97:05:51:8e:64:0a:16:76:72:bf:a8:43:0c:ed:
         ee:b2:6a:dd:80:34:3a:db:6b:d6:f2:5b:a4:e6:2e:9b:71:a3:
         63:39:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:56:09 2025 by rpki-client