Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
File:                     QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json)
Hash identifier:          WrXi/hsmn9Zn22CQ9/OPRJ/boWjqFdkTrZ9hwD18PFo=
Subject key identifier:   AD:A6:CF:2E:0A:A8:34:70:2E:AD:6E:C4:EF:C0:DD:64:CD:FD:59:F0
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Certificate issuer:       /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial:       01976D06868215C8B721EAAD1C313458F0DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
Manifest number:          047A
Signing time:             Sat 14 Jun 2025 06:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:33 +0000
Files and hashes:         1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: 1Iua2Dq1pDQkmi5V/xMThS3Taq/vxOtmKsQFgCWp+uo=)
                          2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:86:82:15:c8:b7:21:ea:ad:1c:31:34:58:f0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
        Validity
            Not Before: Jun 14 06:00:33 2025 GMT
            Not After : Jun 15 06:00:33 2025 GMT
        Subject: CN=ada6cf2e0aa834702ead6ec4efc0dd64cdfd59f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:df:da:ae:c6:da:74:d6:06:0b:a8:f4:04:
                    bb:0a:9d:84:51:fd:fc:c2:e1:fa:ee:fa:05:97:96:
                    df:2c:d2:4d:8c:ea:76:1a:1f:e9:ca:65:d6:ee:e0:
                    a4:46:d9:29:ba:21:11:f2:60:02:68:7f:48:02:59:
                    65:a3:b3:49:a0:68:73:1d:ee:56:1f:05:12:3a:f4:
                    ba:8a:44:77:42:3e:f3:f9:ff:02:a5:38:5f:46:9f:
                    b6:ba:a5:cf:0a:15:e9:31:47:69:26:78:88:09:2b:
                    7f:ce:c4:85:4b:b7:91:e8:75:43:b0:35:8e:18:1e:
                    cc:0d:2a:fe:1b:8c:4f:2b:af:0a:f5:ee:91:a2:14:
                    10:68:97:f7:18:14:c7:00:63:8f:a2:e1:90:38:8d:
                    47:15:07:3f:0c:4c:61:9f:9d:42:84:9a:de:cc:0b:
                    d8:e7:a5:14:da:7d:d1:19:14:18:60:87:44:1b:57:
                    22:36:92:e2:c3:0c:6a:e1:3c:ab:37:9b:f5:cf:2b:
                    a8:ff:f3:d7:a2:37:7f:19:0c:c8:8a:cc:25:32:b3:
                    c8:a6:0a:19:64:76:db:16:de:6c:c3:89:63:f4:1a:
                    fe:4a:72:99:80:20:03:3a:49:c7:5c:0b:ce:7d:2f:
                    d2:e2:70:08:55:ec:21:8c:65:90:d8:4e:eb:ca:3a:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A6:CF:2E:0A:A8:34:70:2E:AD:6E:C4:EF:C0:DD:64:CD:FD:59:F0
            X509v3 Authority Key Identifier:
                keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:58:83:a4:04:8a:86:d1:8b:be:fb:76:17:97:22:d7:84:
         7f:a7:59:24:02:84:70:61:be:ff:7a:fa:c6:b0:82:8f:c3:c6:
         fc:d7:bd:6e:0c:56:6e:0a:87:1a:67:ac:a9:25:a0:f7:c5:d7:
         5f:d3:f0:69:1e:41:88:07:13:47:b7:d4:b3:d9:1f:fa:40:89:
         77:ad:ae:d8:8e:92:08:21:a4:3e:f0:f0:a1:65:ad:ee:b2:e0:
         35:fa:06:38:9d:93:6a:6c:76:d0:57:8b:e7:e0:fb:50:e0:39:
         ee:e0:25:d8:7d:a0:f2:fd:8c:8e:f6:77:d9:25:6f:08:4d:f3:
         b5:16:e6:c6:aa:4c:68:61:74:9f:d3:da:e4:01:22:1b:06:7e:
         d5:b0:0e:c7:e2:6c:e4:6e:2a:f8:6d:14:b2:20:cc:ff:2a:71:
         f3:d1:e9:37:96:55:cc:49:0f:d2:da:f2:44:b1:2d:ec:c2:35:
         f7:d9:a0:d2:10:76:39:07:36:ae:f1:03:25:c8:e0:18:4c:68:
         56:ea:a9:f6:86:47:45:93:7a:25:7d:ab:63:f2:bf:8c:db:30:
         8f:ae:29:07:4b:4f:b3:5b:40:c8:2e:53:3f:ef:55:ca:b1:25:
         c4:f2:a4:2c:e8:87:1b:38:55:0f:33:f2:b7:cb:95:36:fd:6b:
         fc:5e:20:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:12:32 2025 by rpki-client