Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File:                     QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier:          88/jQzkSJxmw1pebuAfRe8K9hfV2CXyUf31dcHjvmMg=
Subject key identifier:   50:88:8A:C9:90:A1:8B:AF:7F:F7:16:03:49:9B:10:97:27:42:8A:15
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer:       /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial:       01974779768DC332B5050930C549388E68BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number:          1584
Signing time:             Fri 06 Jun 2025 23:00:31 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:31 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:31 +0000
Files and hashes:         1: OYOpNeEVsu0T0BbvhmHIdNFIT_o.roa (hash: 5OjFPxxmaTIrwXXRizdKgOIFQoKouBwpJLlgwAhC1mU=)
                          2: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: 8peTDqZ7c705LyAMZWpj2iRw+Yt/p22oB5LgctSbE70=)
                          3: YdfGaXHdTb-LYhTs_wz6s9gnwBM.roa (hash: gNJt9eBEIblRu0IFOMH1K6y+ICB3kC1BNK9Q6bATMgc=)
                          4: q9jElUrbhazQFMEmmCOsDeqbLJA.roa (hash: RedQ+QOQuI2x8mkKA1C82rnZg776YlWDZwTviJY79bo=)
                          5: sJO10EU5Nx8_dkPBaPnnB2dtYNM.roa (hash: XB5B7Wmp004sDj3pl5z8PdpWXfh6a+r4ST0GRlHwVWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:76:8d:c3:32:b5:05:09:30:c5:49:38:8e:68:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
        Validity
            Not Before: Jun  6 23:00:31 2025 GMT
            Not After : Jun  7 23:00:31 2025 GMT
        Subject: CN=50888ac990a18baf7ff71603499b109727428a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:b7:89:1f:d9:f6:cb:6f:2a:d1:20:b4:bc:
                    7e:12:15:17:2c:c8:ae:2a:5c:97:92:7d:97:d5:eb:
                    78:e3:49:75:76:4b:96:3f:aa:31:e0:e3:59:e9:dc:
                    b3:a8:06:00:8a:93:2a:32:48:a7:1c:68:d9:3f:07:
                    64:7b:26:23:53:b3:99:e8:e5:e1:c0:df:62:37:76:
                    2f:3d:86:d5:97:32:3e:bf:e2:a2:c5:37:85:cc:64:
                    63:26:11:d8:08:84:2b:cf:41:2d:9e:b8:5b:d8:73:
                    c5:c4:97:60:bc:59:61:96:59:c3:10:80:c5:30:71:
                    75:c6:7f:c2:7b:1b:46:2a:37:f3:40:ed:a9:50:12:
                    32:3a:3d:71:f8:eb:8d:cc:64:e4:0e:1e:25:bd:f5:
                    aa:f2:c6:64:81:85:60:bb:bf:5a:3e:b1:44:80:c1:
                    2b:7d:b8:e4:29:d4:e6:26:46:b8:ca:b0:07:c7:3c:
                    02:3a:03:a9:3a:44:e8:b2:74:7f:19:88:6d:d7:94:
                    3e:35:64:3c:65:1b:40:c1:f3:2b:06:cf:fd:4e:73:
                    10:a0:76:26:c4:63:36:87:3f:6a:6f:02:64:25:49:
                    8c:56:17:5e:6f:4d:8a:bd:4e:da:ca:51:23:8b:b6:
                    61:81:c6:b6:3d:02:9b:b4:1c:a6:34:ca:62:67:3d:
                    4f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:88:8A:C9:90:A1:8B:AF:7F:F7:16:03:49:9B:10:97:27:42:8A:15
            X509v3 Authority Key Identifier:
                keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:41:e8:5a:fd:91:72:89:41:8e:6b:55:90:a6:c0:c3:d7:b4:
         4d:bd:cd:41:4a:3e:f5:b0:2b:d8:74:37:8a:8e:f0:82:aa:f0:
         2c:51:6b:c5:b9:e8:46:0e:91:c7:07:c3:f6:3b:c1:4c:fe:75:
         41:d1:fb:7a:44:65:9e:88:56:6d:fb:1e:b8:f3:bc:a6:09:7e:
         dc:7f:c9:db:65:19:cc:26:be:b0:0a:4d:cd:32:fd:0a:2b:ae:
         a3:54:14:83:68:3a:90:dd:b4:33:fa:87:8f:3e:6a:3b:7d:fb:
         98:f9:df:39:27:69:f3:f8:b5:47:54:f9:63:59:0d:6a:47:57:
         d5:72:33:32:73:71:20:2e:a4:c6:99:04:48:91:64:6f:32:c6:
         4e:03:92:e4:37:c0:2d:cc:dd:0f:17:52:d9:b4:78:ab:98:fa:
         23:33:17:a9:e4:1a:92:1a:e8:7d:ee:fe:7f:ad:2e:40:8d:bd:
         c4:89:d0:48:c1:27:94:1a:1f:a3:38:6d:14:18:aa:39:86:d5:
         d1:5b:c5:b8:30:7e:43:45:6e:8e:9f:b2:33:f2:f8:b5:bf:48:
         de:96:af:28:29:2b:a3:41:b0:b9:4e:b1:2e:3c:55:ad:5d:28:
         86:4b:d7:4b:d8:78:ca:a1:c7:65:0d:f5:4e:3a:19:07:0f:be:
         22:a5:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:32 2025 by rpki-client