Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
File:                     q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft (raw, json)
Hash identifier:          D/Ae5Ybm2MxJcY4GIxWpaSpRqwbPciholAo6WcXBe9c=
Subject key identifier:   31:78:B8:05:4C:E0:EC:54:A9:38:7A:08:74:D5:7C:DC:5A:0E:A1:2C
Authority key identifier: AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
Certificate issuer:       /CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Certificate serial:       019748FA1C63490542175C49F68EE503D671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
Manifest number:          0B6F
Signing time:             Sat 07 Jun 2025 06:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:40 +0000
Files and hashes:         1: 0SSsSk3JYtZfVKoUdIXep-skUls.roa (hash: lo1rRlcKmSiP/o5fsPXMsNzyze1q/0lfZDjTXaH15HI=)
                          2: q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl (hash: DhaB2DEfsicVi+2ZDS8n+YF+tbLbLBV50MySUJ7STWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:1c:63:49:05:42:17:5c:49:f6:8e:e5:03:d6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
        Validity
            Not Before: Jun  7 06:00:40 2025 GMT
            Not After : Jun  8 06:00:40 2025 GMT
        Subject: CN=3178b8054ce0ec54a9387a0874d57cdc5a0ea12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:f7:2f:8c:0d:11:2b:a7:29:6f:73:e4:c0:
                    43:de:9a:fb:cf:11:ff:45:b6:a7:08:b8:f7:0e:ce:
                    68:c3:13:ed:2d:c0:ee:57:9f:5e:4a:9e:13:4a:22:
                    36:1e:03:4d:0b:89:53:7d:aa:c4:07:dd:5e:91:21:
                    e0:79:be:a6:0b:5f:eb:e3:0a:f6:21:4c:8c:f5:d0:
                    3f:d0:7b:88:b4:e8:39:ca:cc:9b:81:b3:51:bd:ca:
                    9f:69:0c:65:26:76:62:71:c0:b3:bc:41:bc:3b:45:
                    82:1a:2c:22:31:53:d5:7e:ee:50:3f:5a:0e:ce:95:
                    cd:57:20:32:90:57:1d:2c:29:fe:ef:ff:58:08:82:
                    48:67:46:c0:63:fb:ea:31:94:86:7a:dd:77:87:eb:
                    39:55:3f:65:0d:ca:f6:fe:7f:65:f8:cc:1a:99:f8:
                    33:24:8d:f4:d4:93:f7:c6:2d:73:1f:99:4c:f9:2f:
                    94:40:17:23:07:8f:9d:83:34:d8:e7:8e:95:92:63:
                    46:18:12:5a:7e:38:5e:34:20:70:c5:b5:0c:25:1e:
                    5c:94:53:ac:99:36:00:e6:b7:e9:ec:90:8d:72:da:
                    11:41:e7:b7:ba:8d:99:05:6c:be:15:9c:d8:36:7d:
                    7b:18:c3:c5:2a:3e:29:10:34:d8:d1:e6:94:84:09:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:78:B8:05:4C:E0:EC:54:A9:38:7A:08:74:D5:7C:DC:5A:0E:A1:2C
            X509v3 Authority Key Identifier:
                keyid:AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:e7:57:c4:cf:d8:2f:ff:ba:c9:aa:aa:3d:ce:05:56:16:
         f7:e2:c4:36:bd:4f:ed:10:b1:ba:41:be:b9:25:98:c8:c1:d6:
         e3:69:8a:dd:47:63:e3:b1:6c:64:ba:9d:fe:09:f9:5a:32:e7:
         ec:22:f1:52:33:07:d9:95:e7:9f:fc:da:ba:c4:05:a5:8c:25:
         dc:ac:0d:e8:ee:2d:18:db:e4:e3:b7:2e:09:dd:ad:72:97:21:
         86:da:bf:bf:bf:2a:b7:60:c8:43:ca:28:41:ae:54:88:c5:02:
         43:3f:c5:ba:0b:79:7c:45:74:24:35:2d:63:d2:2e:8e:4a:29:
         2f:fc:b6:38:11:af:28:6a:bb:d4:8b:7a:3e:75:24:0c:62:38:
         13:da:41:f6:88:82:0b:ef:95:3c:f2:23:01:72:ae:53:9e:72:
         2a:c7:1b:7b:0b:44:31:1c:93:c4:2a:7c:65:cc:7a:91:51:8a:
         74:7b:4b:e4:5b:41:1c:7c:5a:70:8e:27:ca:68:53:0e:0b:62:
         ca:a5:18:1e:3c:22:6f:9d:39:f7:c8:e9:8c:f9:f6:92:5f:b1:
         c8:7b:9a:54:82:2d:d1:2e:47:3a:5e:db:e2:18:31:d7:64:d7:
         80:55:43:56:4e:48:16:d6:18:cb:a9:db:b4:e1:59:f7:c2:f0:
         d2:92:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:06 2025 by rpki-client