Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File:                     QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier:          SIsPULJEJzy2xjPqCRO/mcSdBR5WfNCYMocPqFY/uHQ=
Subject key identifier:   AC:34:4E:87:1A:85:E7:41:F0:0C:40:88:60:FA:7C:D2:BC:7C:9D:1C
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer:       /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial:       0197643A34EB6E10AB0C1109DB08574643FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number:          0557
Signing time:             Thu 12 Jun 2025 13:00:25 +0000
Manifest this update:     Thu 12 Jun 2025 13:00:25 +0000
Manifest next update:     Fri 13 Jun 2025 13:00:25 +0000
Files and hashes:         1: 4aDro6K4uBzQDwqf0WWWDv-WEKk.roa (hash: KqqgAJBLDDctP248xFMqsm3yeCd/FvEIq/xYuv9Vp94=)
                          2: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: 5IFG82AN0y8wC2Dwg2WEzgwsW3tqJzho5BbXXv2d2Tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:3a:34:eb:6e:10:ab:0c:11:09:db:08:57:46:43:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
        Validity
            Not Before: Jun 12 13:00:25 2025 GMT
            Not After : Jun 13 13:00:25 2025 GMT
        Subject: CN=ac344e871a85e741f00c408860fa7cd2bc7c9d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:bd:ec:88:2c:10:7b:9e:dd:e9:68:3c:61:
                    7b:3e:fb:6d:bc:bf:90:84:5e:a6:02:5e:8c:fd:e8:
                    23:98:4d:e6:ac:00:f1:fc:73:bf:6c:d2:3c:16:cd:
                    08:5f:23:7e:35:97:8f:e0:2e:99:66:39:42:11:06:
                    ac:84:59:23:59:ea:55:77:c7:21:44:b7:92:fb:4c:
                    1b:38:89:6f:7b:7b:7a:b2:09:72:22:3d:a1:10:c0:
                    30:5b:b6:86:29:c1:58:25:42:b3:37:38:92:76:a7:
                    62:86:4f:cf:9d:50:34:30:d2:f4:6b:8d:b7:86:31:
                    a1:52:8b:20:2f:51:6c:8a:5e:97:ec:da:06:2c:3e:
                    e0:86:ed:18:ed:2e:48:96:ee:fc:68:ff:fb:84:79:
                    02:b1:6f:29:0f:12:21:aa:0e:95:2d:81:ca:98:85:
                    95:d5:16:93:ac:bf:97:1b:48:23:3c:70:2a:e9:ad:
                    b1:69:89:46:eb:7f:3b:fa:3d:bb:ed:9e:3a:bf:e0:
                    ac:db:a0:1e:11:0a:60:ab:2b:81:bf:68:ed:38:e6:
                    f6:68:3c:c3:b1:c6:74:f9:f3:84:af:80:6b:9d:64:
                    2c:7c:30:b9:23:c8:f7:8d:db:4f:56:71:61:75:36:
                    e7:e0:39:e8:98:d7:d5:56:65:00:db:57:77:99:02:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:34:4E:87:1A:85:E7:41:F0:0C:40:88:60:FA:7C:D2:BC:7C:9D:1C
            X509v3 Authority Key Identifier:
                keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:58:92:05:be:9a:37:55:14:87:69:7d:8e:de:20:9d:e1:84:
         a4:2b:c0:89:c4:a4:9c:c9:8b:4a:98:e0:9e:e7:18:45:c4:00:
         93:d7:6b:e7:83:ea:a9:0b:34:a5:5d:01:dd:df:22:80:d3:4f:
         0a:66:db:33:66:cf:b2:e4:e2:d6:ee:8f:02:c1:0b:6f:6c:5e:
         04:f8:09:b3:9b:63:ee:48:bf:7e:31:92:0b:34:a5:48:63:b6:
         c1:aa:6f:b8:e5:d8:79:3f:2a:68:a5:3a:db:0c:36:dd:d2:eb:
         2a:1b:2f:9b:57:60:4e:a1:95:49:53:ed:7b:81:7b:6a:de:84:
         8b:d3:ae:e0:c0:4f:7d:76:87:2d:84:af:22:e5:d1:0a:eb:68:
         36:a3:1a:ae:d6:65:5e:fa:70:28:4b:ca:d2:5a:4e:14:41:66:
         11:e1:75:88:67:7a:c9:fc:36:df:af:e8:16:ba:a8:0d:e3:34:
         e5:cf:43:cf:45:fc:b0:25:02:c0:6f:f4:37:09:22:2d:cc:22:
         51:56:fe:04:31:08:25:3a:67:54:12:79:f9:89:98:09:80:5b:
         11:9d:14:fb:15:ee:9c:d9:79:27:b1:cb:6f:2d:d1:51:39:bb:
         cf:87:9b:45:e0:48:f3:ba:58:71:bf:77:b5:81:7d:41:14:8e:
         e3:47:cd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:41:31 2025 by rpki-client