Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File:                     Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier:          8tyLiu7Ry9DszxXKeiFYgwyxrXaU5HBols8o+AWAzPY=
Subject key identifier:   06:98:29:A9:5F:46:4B:E5:B7:75:CA:69:8D:84:2D:2A:49:93:B3:1C
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer:       /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial:       019748C333819ED0F7ACE9D042AA30D7B65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number:          079C
Signing time:             Sat 07 Jun 2025 05:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:41 +0000
Files and hashes:         1: O9UxuLNdjVpPMRVJ8_xamVbi3ck.roa (hash: w7PnuXi3vgOvtTP6oScaXCDqYyS0FwVpkDFtt58ndZ4=)
                          2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: BeH20DT1UtMA5YMLn+56Z3/rSRdiCV0068KQGlT98mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:33:81:9e:d0:f7:ac:e9:d0:42:aa:30:d7:b6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
        Validity
            Not Before: Jun  7 05:00:41 2025 GMT
            Not After : Jun  8 05:00:41 2025 GMT
        Subject: CN=069829a95f464be5b775ca698d842d2a4993b31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:3a:ac:b1:09:cb:06:62:e8:0a:0c:91:a0:
                    82:c1:5c:db:8e:e5:96:16:f7:00:9e:ab:17:1b:85:
                    2e:2e:fb:ec:51:bc:29:25:cb:6e:15:95:b3:6d:0c:
                    2f:6c:72:9a:dd:4d:84:ab:f0:74:48:c4:23:56:c0:
                    0d:de:60:18:15:4e:b9:1c:90:6f:2f:b6:e5:d4:b3:
                    4f:eb:ab:e1:c9:10:59:8a:6d:e3:a9:bb:bb:ce:be:
                    42:16:e6:bd:1c:33:4c:09:68:37:30:e2:64:66:73:
                    30:79:9b:30:e5:42:7c:3b:82:ec:47:a2:8a:da:b6:
                    f9:7d:a7:f4:e7:9f:93:9b:a1:c5:46:2b:34:30:45:
                    7f:f0:df:17:02:a1:13:00:8f:b8:50:a4:f6:33:27:
                    ee:f9:7d:bf:0b:c9:69:a7:fc:fe:86:66:50:5d:b0:
                    88:ad:27:3f:35:34:03:81:d4:56:94:b9:bb:ed:ad:
                    27:f0:fc:b9:1a:70:e8:1a:2c:5f:39:2b:97:8e:a3:
                    cc:0e:5b:a7:c4:3a:c9:01:3c:a8:f2:33:e1:f0:0d:
                    9a:a8:ac:4a:ae:f4:f4:fe:c4:16:70:4d:fc:cd:10:
                    be:84:84:5d:aa:3a:3d:7f:72:6f:6f:00:20:6d:39:
                    d9:b4:df:8a:8c:ef:e3:6e:d5:84:b9:46:bb:4d:13:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:98:29:A9:5F:46:4B:E5:B7:75:CA:69:8D:84:2D:2A:49:93:B3:1C
            X509v3 Authority Key Identifier:
                keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:78:ee:d6:59:18:4e:4b:ec:56:bb:1e:7a:78:d0:75:e0:9d:
         72:6a:9f:b5:24:a7:cd:ba:b8:bc:39:99:19:16:a9:22:c4:5c:
         b2:34:15:1b:2b:3e:47:7b:ac:64:20:92:cd:8d:f5:b7:6e:06:
         87:83:d9:96:2b:a5:fb:05:b3:53:63:8c:fd:d0:e3:b9:39:6b:
         1f:0d:67:6d:3a:ef:f9:ed:b2:0f:fe:01:8c:85:2a:27:f2:bb:
         b0:77:b3:4e:89:4b:63:f4:de:f4:37:27:00:dc:24:1e:b6:ba:
         d1:05:47:7e:cf:00:4c:78:38:51:2b:59:de:90:31:3a:31:93:
         96:a9:37:12:62:df:6c:7e:cb:4f:ec:6a:26:1f:e5:f5:61:50:
         0b:b8:33:00:34:a3:f6:57:7e:05:18:80:ed:9d:d0:1b:4a:f6:
         c3:12:45:5f:b5:44:17:b6:46:35:3a:2c:bd:e5:c0:55:fd:ad:
         e3:7c:1c:20:f2:d7:1c:10:e3:b4:d6:17:51:cf:2b:d0:a0:4f:
         3a:a9:75:4c:69:c7:13:70:90:b6:49:76:4e:68:41:ba:e2:a8:
         7f:d9:21:c8:0d:a4:4a:c7:65:a2:03:53:89:7f:18:90:f6:c3:
         4b:7a:35:e9:e9:3a:b3:6b:0d:a3:57:b6:af:fc:7c:44:64:eb:
         ec:a8:3f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:20 2025 by rpki-client