Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File:                     _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier:          G0HCK+ptWYBPgZD2A1J3EyIsSJsg6ObnC9HiVety47o=
Subject key identifier:   9C:14:63:F2:4F:3A:D8:1E:45:B0:40:DB:4D:9B:AF:56:8D:C3:38:D8
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer:       /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial:       01977CB09201D474D91B605304E5666D0B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number:          1019
Signing time:             Tue 17 Jun 2025 07:00:35 +0000
Manifest this update:     Tue 17 Jun 2025 07:00:35 +0000
Manifest next update:     Wed 18 Jun 2025 07:00:35 +0000
Files and hashes:         1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
                          2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: KPDG/y/e6j09Ia7mx1QXuvOh6RYENyp5hZJSlaExBg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:b0:92:01:d4:74:d9:1b:60:53:04:e5:66:6d:0b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
        Validity
            Not Before: Jun 17 07:00:35 2025 GMT
            Not After : Jun 18 07:00:35 2025 GMT
        Subject: CN=9c1463f24f3ad81e45b040db4d9baf568dc338d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:75:29:7e:93:39:dd:b4:76:4a:e5:82:88:
                    4e:33:00:ae:5e:e4:33:eb:3e:0a:ac:33:0b:ae:26:
                    93:b9:19:4f:db:a6:43:fa:34:0a:37:69:b3:87:c3:
                    76:8b:06:7f:75:b4:f0:ea:b8:1c:78:e0:29:34:1e:
                    4e:34:58:45:a7:f5:dd:b9:83:8e:a1:f5:e1:23:bf:
                    ab:31:a9:a9:66:4b:86:8c:cb:39:c6:ee:09:73:f4:
                    af:99:c3:89:02:3a:b5:77:c9:ea:47:4c:ee:dc:df:
                    b7:24:62:6a:28:b7:c3:67:60:f3:09:7a:38:67:df:
                    90:72:2d:1f:bd:d8:da:7e:a4:29:36:19:cc:e1:e1:
                    16:70:12:f3:ff:7e:f7:2f:0e:ab:b6:e9:43:a9:41:
                    26:36:8f:f5:e4:55:67:af:a4:5a:90:ca:31:34:06:
                    00:90:bb:3f:7c:8f:44:57:bc:57:81:17:02:4f:ff:
                    4d:07:80:73:03:97:79:e7:86:ca:65:94:ad:5a:0f:
                    10:10:5d:ee:55:3c:8d:6e:52:08:99:be:4e:74:79:
                    76:bf:a0:3e:68:8d:e5:d2:64:4d:41:c2:d6:90:29:
                    a8:bb:a5:90:c1:30:58:d8:d7:4b:4a:d2:03:a9:6a:
                    f6:78:54:67:c2:1a:3e:4c:84:19:30:a7:77:44:60:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:14:63:F2:4F:3A:D8:1E:45:B0:40:DB:4D:9B:AF:56:8D:C3:38:D8
            X509v3 Authority Key Identifier:
                keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:33:b0:48:db:22:dd:f8:6d:5e:f5:8f:f2:d7:f3:ad:9d:
         99:32:4e:5a:95:5b:d6:c8:94:0c:14:cf:51:2b:9a:06:72:2b:
         44:45:03:8b:57:61:1f:0f:7c:aa:34:96:46:e9:21:ea:4c:28:
         3d:3a:8a:fb:92:b6:af:fa:4b:77:c4:22:84:fd:a7:69:03:65:
         73:3f:11:ec:ac:11:c0:77:e6:a9:75:6e:36:90:fa:cc:18:3f:
         41:cc:af:52:01:bb:a8:82:13:28:12:74:e3:1a:2d:6d:2f:4e:
         bf:61:a3:c2:d8:3f:98:a9:b6:a3:d7:06:a9:ea:3c:4e:3e:f1:
         ca:c2:c1:ea:80:6a:ed:86:1f:18:e1:83:eb:d4:3e:ca:41:0c:
         c4:55:00:0b:ba:78:fa:91:b0:4e:f1:03:8c:ba:36:d3:94:db:
         ad:76:0a:c9:b5:13:c3:8a:9d:09:5e:0a:9b:40:71:15:eb:cc:
         29:c8:d4:99:07:96:8e:43:09:c2:4e:3b:44:ff:25:bd:dd:c6:
         c7:4f:4d:9d:5c:e0:0f:39:ac:8a:43:e4:9d:ca:db:d6:27:c2:
         9a:e6:f6:23:94:1c:00:fc:bf:f1:39:2b:24:e2:cb:cf:e3:f8:
         b0:c2:1b:d2:3a:52:4f:91:eb:3a:35:db:bd:ef:d5:d1:51:e5:
         b0:54:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:53:49 2025 by rpki-client