Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
File:                     QVpBISe1FPZFXsiobinTjrCrtaw.mft (raw, json)
Hash identifier:          5Ihz1Y5L7OvHfhs0splpLjgX0TOM3JCHjxO0StrytAo=
Subject key identifier:   64:65:52:1B:2F:81:1D:93:6B:D8:11:D1:23:68:3E:46:C7:18:FB:BB
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Certificate issuer:       /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial:       01976F2CBB1316A202BB640844F44FF282CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 16:01:31 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:31 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:31 +0000
Files and hashes:         1: OBn58ZJwEh4MhAnhsFAWGGJLifI.roa (hash: 168HaFL19xy+6TCd3GYc8l6QrgMbWSIwNLv5YeyfQ/w=)
                          2: Q0GMmj0TLNZKmzThv89XKbeW0UI.roa (hash: JZ14w91MZvqFvHWvtqxAYRsNPtiKbIaz1hieDnidrSg=)
                          3: QVpBISe1FPZFXsiobinTjrCrtaw.crl (hash: 4NsgjFhlJjLgAk3T8gXfZe7dmY1KpLl8FE2wWwv5NfM=)
                          4: QY8orDNDFtPRatFK02MXIdps050.roa (hash: NiooW7R3ctbGvF0POc0TxPmXz9RBOYgCBww2xqBcPpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:bb:13:16:a2:02:bb:64:08:44:f4:4f:f2:82:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
        Validity
            Not Before: Jun 14 16:01:31 2025 GMT
            Not After : Jun 15 16:01:31 2025 GMT
        Subject: CN=6465521b2f811d936bd811d123683e46c718fbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:77:d9:60:00:9c:8a:15:8c:73:99:c1:bf:
                    58:6f:8f:72:d1:b4:9a:d8:57:7f:05:a4:05:b2:bb:
                    d3:c3:4f:9d:0c:97:28:87:00:df:fe:c8:33:04:fc:
                    74:ff:b4:1c:dc:13:f2:e3:40:82:68:9d:b1:d0:64:
                    1a:92:fc:72:f6:53:5e:a9:0c:e7:d2:c3:a4:0e:46:
                    e6:ac:d3:2a:e4:b9:f6:12:ce:a7:0e:f6:d0:80:ff:
                    02:26:c6:1c:ad:3f:31:4b:7e:76:dd:cc:8c:bc:16:
                    cf:ed:f0:5d:e5:e2:d6:c4:95:74:a9:89:04:1c:02:
                    b5:31:ea:c5:aa:fc:5e:66:40:d5:ee:02:72:d6:80:
                    30:2c:cd:a3:af:3c:1e:d1:c1:14:a5:06:2b:66:ec:
                    12:32:bf:3d:2a:14:85:18:5a:fc:d7:da:22:60:0b:
                    09:57:b6:43:39:cc:ed:f7:c9:b8:61:dc:63:4d:e3:
                    cd:24:57:4a:9b:eb:a7:7c:6b:b5:56:7a:62:5c:b6:
                    be:d9:4d:23:80:4d:c7:07:cb:6e:95:da:c7:3d:1e:
                    e6:42:ba:b5:aa:9a:63:32:3a:d6:07:d7:ad:af:ee:
                    6e:1e:e3:3b:5e:44:42:6c:06:fa:63:a5:c7:5f:38:
                    df:37:2c:35:73:e9:09:09:c7:dc:c1:90:8d:62:df:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:65:52:1B:2F:81:1D:93:6B:D8:11:D1:23:68:3E:46:C7:18:FB:BB
            X509v3 Authority Key Identifier:
                keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:be:67:ae:7b:fb:df:17:e9:3d:5e:5a:20:86:c5:e2:5b:
         e7:81:78:c5:92:85:71:03:72:29:2a:2a:0a:51:83:3c:4b:e4:
         6f:26:62:71:45:3f:68:e5:3a:39:b1:26:c7:33:20:8a:95:a8:
         fb:6e:05:d8:8c:4f:1c:df:fe:4b:95:e4:50:8c:30:4d:76:7e:
         5b:2f:26:e5:70:ef:09:d4:23:c4:b2:2b:47:58:a0:b6:1c:7a:
         09:76:c0:57:8a:3b:c8:d7:64:38:89:5b:01:64:f8:04:f6:1d:
         ab:d9:33:a2:3d:8e:10:0c:19:0c:e2:31:92:d6:14:38:02:de:
         ab:26:a1:c5:e0:85:b0:08:33:40:2d:d4:9b:d0:4f:b8:87:41:
         c4:c4:be:80:ed:48:77:27:07:5a:af:10:a9:af:5b:d7:53:08:
         fa:4d:66:19:53:b8:b8:44:66:4d:4c:ec:ab:4c:af:c4:a7:39:
         3d:e2:e4:23:ec:48:bf:96:86:63:8c:68:fc:a4:c9:c2:12:e0:
         a5:14:7d:e7:3c:a6:4b:00:f0:81:47:f0:e3:9f:f0:d9:2f:37:
         13:04:51:61:4a:16:f7:5e:bf:2b:52:11:57:c3:f9:36:95:02:
         e8:d2:21:e4:2f:eb:bd:06:e8:0b:19:ac:ed:66:53:37:87:eb:
         1e:e3:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:50:26 2025 by rpki-client