Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
File:                     Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft (raw, json)
Hash identifier:          ok5d2zbotgsrZ3TaAPPZV42KH3SY87J8flUvJGFm+fI=
Subject key identifier:   05:B1:78:64:F5:EA:01:D0:71:44:24:D2:F1:DA:9C:65:BC:A8:7F:94
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Certificate issuer:       /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial:       01992631E25EFB953817B679509EDA8D36ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
Manifest number:          09E7
Signing time:             Sun 07 Sep 2025 22:00:27 +0000
Manifest this update:     Sun 07 Sep 2025 22:00:27 +0000
Manifest next update:     Mon 08 Sep 2025 22:00:27 +0000
Files and hashes:         1: Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl (hash: dFDcECrViSL0aWaubw68gFJX2sgkcXna8IlJK3YE+mc=)
                          2: xzcqcrFf-ra6k9gJVEfYsUOL7r0.roa (hash: tLEmQ4Ip0nJAlYr4VF0AY9UERYkLlEbUUc3k5bIYBQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:26:31:e2:5e:fb:95:38:17:b6:79:50:9e:da:8d:36:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
        Validity
            Not Before: Sep  7 22:00:27 2025 GMT
            Not After : Sep  8 22:00:27 2025 GMT
        Subject: CN=05b17864f5ea01d0714424d2f1da9c65bca87f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7a:50:80:72:92:74:f7:64:0d:54:ab:95:53:
                    32:73:ab:b0:3c:41:6a:a1:10:5f:76:c4:f7:99:07:
                    0b:78:8e:98:89:6f:a8:21:7f:bc:f7:46:69:34:f7:
                    3f:ba:27:69:ff:40:58:ad:e3:22:3b:df:64:57:ed:
                    54:c0:05:f4:dd:e0:a3:19:f0:cc:f2:41:80:74:ff:
                    4b:09:38:78:fd:f5:18:f6:b0:e2:e5:d6:bd:cb:40:
                    89:74:11:b7:d9:8f:29:ba:f8:b5:07:cd:63:72:0b:
                    03:1b:de:50:be:6d:17:44:2e:33:3e:00:f6:2e:81:
                    f2:8d:e5:11:de:17:6c:19:a3:c6:64:19:3f:b7:4c:
                    05:fe:3b:52:15:5d:7a:3e:1b:66:a5:b4:b1:b3:1b:
                    b9:fe:dc:be:96:cd:7f:00:61:67:51:5c:f3:ff:0c:
                    22:80:7f:3c:a7:42:db:06:35:4a:fa:36:3d:6b:52:
                    91:1a:4d:6e:50:3e:b4:d2:61:9e:6d:fe:41:ba:a6:
                    3b:6b:1a:d9:0d:a1:ff:e1:71:a9:ec:92:45:21:11:
                    8c:9a:00:1b:74:6d:56:8a:ee:57:17:da:ea:e8:a8:
                    c0:7d:54:c7:93:75:89:3e:8c:43:40:4f:db:0f:4f:
                    15:60:e3:a2:2a:07:f9:e8:63:25:45:99:23:a1:a4:
                    5f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:78:64:F5:EA:01:D0:71:44:24:D2:F1:DA:9C:65:BC:A8:7F:94
            X509v3 Authority Key Identifier:
                keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e3:84:0d:43:32:58:6d:63:48:4a:60:5d:db:2a:05:57:8b:
         d5:5a:33:b6:1f:0d:e2:2b:e7:4f:e2:a9:78:e6:9e:5f:ed:e7:
         2c:7d:09:ac:00:44:a8:63:c5:62:a1:6f:ab:1d:52:ed:aa:ce:
         39:7d:ef:7e:06:b4:5e:f3:e8:ab:33:3e:07:af:34:b6:c8:69:
         92:d8:25:16:86:eb:6d:09:f5:93:0d:4d:ba:b5:9f:2d:99:b5:
         71:86:09:97:56:3f:78:ec:80:aa:df:08:37:77:d8:4e:b4:ea:
         ba:da:c2:2c:1b:3e:c6:04:c5:3e:bd:06:4d:c9:56:84:8b:4a:
         89:e6:8f:af:7f:16:56:b7:8f:28:2a:87:e4:4f:8f:0e:c3:ac:
         12:cd:23:92:32:70:7b:8a:74:ae:e2:37:60:5d:17:c1:73:0f:
         11:67:c9:2a:10:cf:d1:72:f0:f4:52:93:a3:9f:60:06:c2:60:
         57:ff:b5:ae:16:1d:9a:6b:6e:20:6f:07:87:63:7a:82:39:7c:
         32:a7:78:e7:29:b9:32:8d:12:2b:6e:0d:0b:f5:47:07:e1:ac:
         c1:04:d7:98:be:ed:e8:a7:d9:75:8d:ca:34:52:68:f6:f5:20:
         db:f4:7c:91:9f:4b:c8:df:fe:02:56:cf:e7:e4:b7:23:0a:28:
         fe:56:3b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:12:54 2025 by rpki-client