Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File:                     QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier:          AcjftceD6a7KQWsdsw7Hi4lPpjl6ZESHdrwazov41mg=
Subject key identifier:   13:84:90:A4:B2:98:3B:DF:63:92:C2:7F:5B:95:90:CA:5C:51:9F:F2
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer:       /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial:       01978244D2016E0636D2867488DE7EA8477A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number:          093C
Signing time:             Wed 18 Jun 2025 09:00:37 +0000
Manifest this update:     Wed 18 Jun 2025 09:00:37 +0000
Manifest next update:     Thu 19 Jun 2025 09:00:37 +0000
Files and hashes:         1: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: XfjKmd4T/liwBteDTzKrjXeS1uCg+qQcnEY2w0rY5YM=)
                          2: VtNDBe4WLUvuXuHOTlAK7Ldf5W4.roa (hash: 2/Ux5k6jwyAwcxnEpPd/SFbt5+kWg1F4N3TK8J41W34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:44:d2:01:6e:06:36:d2:86:74:88:de:7e:a8:47:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
        Validity
            Not Before: Jun 18 09:00:37 2025 GMT
            Not After : Jun 19 09:00:37 2025 GMT
        Subject: CN=138490a4b2983bdf6392c27f5b9590ca5c519ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:f2:e0:a8:e0:c5:b9:38:68:56:07:93:df:
                    cb:62:d3:e3:c0:65:33:ba:ea:43:ec:86:1b:6a:9d:
                    ed:b4:d4:c8:35:67:96:eb:75:5a:92:d1:5d:67:af:
                    d2:9d:54:a0:cb:45:f8:19:91:d4:d1:6c:33:c8:23:
                    8c:9b:a5:c1:42:07:77:87:01:16:f4:74:49:5e:66:
                    98:ff:b4:2a:05:d0:0c:f4:dd:be:ec:23:6a:a5:4e:
                    9c:7e:7c:58:fe:1a:48:4b:d2:7e:a2:70:76:5e:95:
                    42:fb:e4:54:6c:70:2e:a6:eb:61:78:da:28:1e:09:
                    81:22:0a:86:81:9c:01:d9:60:1b:f3:a2:18:b2:6e:
                    61:e0:90:4d:05:5b:ae:92:d9:34:54:59:1c:17:17:
                    40:34:d3:54:72:c8:67:39:f6:bb:dd:7f:5e:6e:2a:
                    b7:52:33:7c:0d:e8:d6:28:83:ad:97:a4:c9:71:fd:
                    73:4b:ee:38:2b:a7:7b:f6:cf:99:1c:c7:ee:f4:bb:
                    2d:31:30:f9:13:b5:96:ad:8f:92:96:27:ad:0d:eb:
                    23:47:44:65:df:0f:1d:3e:90:bd:09:75:9e:87:cc:
                    ac:c0:d9:cc:8e:5f:8c:37:ae:d4:4a:43:44:be:4b:
                    ec:c1:92:2f:b2:d6:09:80:19:0b:1d:7c:01:a2:1b:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:84:90:A4:B2:98:3B:DF:63:92:C2:7F:5B:95:90:CA:5C:51:9F:F2
            X509v3 Authority Key Identifier:
                keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:e3:36:34:9e:7f:d7:24:55:b6:cf:fa:ba:61:f0:a3:1a:
         0b:f8:16:9e:65:42:0a:fb:a9:98:33:ee:21:b2:70:e4:ca:30:
         53:b5:e9:c8:b2:39:ea:01:42:45:4a:d5:fc:a0:b7:bd:17:5a:
         fd:90:a6:58:7a:b7:9f:66:82:5b:04:74:41:a0:66:f8:cb:75:
         b9:7d:30:8e:9b:de:18:48:8e:d8:ee:81:2f:dd:3e:73:51:af:
         cb:78:a8:a9:8c:0a:9a:ca:66:e0:66:2e:87:df:6e:b4:d1:3e:
         71:a2:bf:5b:ab:92:4a:94:0f:b2:8d:23:8f:d1:2c:e3:e8:79:
         b1:99:9f:ed:fe:9d:e8:e8:4a:ce:47:11:c2:af:6d:3b:ff:e2:
         e8:88:98:55:50:08:f2:77:09:6c:72:89:e4:ea:28:46:86:34:
         f9:05:13:55:35:65:e3:83:3f:f6:b8:ad:77:5e:4b:ea:a7:bf:
         a5:ef:76:98:3f:00:1f:ae:ba:ee:b6:37:9a:22:b5:0d:ce:ce:
         ae:24:21:02:c5:eb:d6:0e:bd:ce:0d:fb:b5:3a:d2:39:55:fe:
         24:c5:3b:49:14:0b:e8:c3:9a:cd:3c:2a:19:b9:dc:95:fa:31:
         80:9c:02:a5:71:33:c1:3f:ac:cb:74:ee:6d:2f:df:8a:55:72:
         32:c9:28:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:57:03 2025 by rpki-client