Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File:                     qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier:          L+fuaUo4xcILshQ+RH7+sBt3ZXHf2L+WyV1XOeTV0ag=
Subject key identifier:   4D:24:C8:E2:97:37:70:93:0C:09:06:B1:D6:CA:BE:25:B7:C3:FF:63
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       019777532A09727AFCC36508F701FEF50CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number:          159E
Signing time:             Mon 16 Jun 2025 06:00:28 +0000
Manifest this update:     Mon 16 Jun 2025 06:00:28 +0000
Manifest next update:     Tue 17 Jun 2025 06:00:28 +0000
Files and hashes:         1: gLJC-FPMB6JG4uvuoXfj1y1VVB4.roa (hash: bJcY81wfY+5zVAZK4pJVEqgscj1+3rGIYBuBLom9f1Q=)
                          2: j51vgTDCax1tLhOyiZp4zqvzOKU.roa (hash: bN88IoNu8hIQldCCMN1vfnD2HLAoTn8gvr6w/tzj/KM=)
                          3: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: Vt7xin7ip4UEkemDi93xN58DGOVnk0FEjoc7f73jsl0=)
                          4: v9qbF4LYUnhnpR0EOPiha8K3YB4.roa (hash: D6yRkwvsYTKHCx+d4L0SAcGasfUnTpr7jrIeGf0l2G0=)
                          5: z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa (hash: rTNzicdR5UxEu+zSwQpGpaPQg7acnJ6eKVlTT5jJQ8s=)
                          6: zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa (hash: db5+QXNKRG2BQO2CHQMOqU0fUStvszTNPuMXFPPnliI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:53:2a:09:72:7a:fc:c3:65:08:f7:01:fe:f5:0c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: Jun 16 06:00:28 2025 GMT
            Not After : Jun 17 06:00:28 2025 GMT
        Subject: CN=4d24c8e2973770930c0906b1d6cabe25b7c3ff63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:3f:d8:a2:fa:3a:18:79:a8:97:e6:9d:fc:
                    cf:5d:6f:42:bf:63:54:b1:71:09:a4:cf:4b:ce:db:
                    8b:64:14:3d:a5:1f:d8:0f:44:cd:3d:50:af:31:dd:
                    b5:b5:5c:87:d4:af:0e:e9:e5:27:42:a6:fd:ea:e7:
                    12:ab:ae:88:33:b2:ed:5c:b2:66:94:6f:68:6c:23:
                    2c:1f:b3:b5:1d:5e:e9:b5:79:90:d4:60:5f:da:a1:
                    05:60:ae:94:89:cd:2f:b5:2b:8c:f4:f7:1c:29:f6:
                    65:83:13:d6:95:6f:18:84:04:69:f3:8b:0f:d3:87:
                    b0:4c:d8:94:7c:16:fa:ac:ec:b8:a4:d0:66:4e:4c:
                    0f:54:7b:f2:d1:da:0e:61:03:7e:21:e3:07:74:6b:
                    62:0f:97:a5:b6:73:06:aa:42:73:a9:c8:ff:9f:6a:
                    42:2b:8a:81:3d:7f:6e:3f:20:42:34:e9:d9:d7:f7:
                    cc:7a:60:e0:a6:02:9d:43:8b:04:1d:8c:09:bf:a0:
                    c5:de:e3:9d:2b:ae:08:3b:70:86:2e:fd:ce:84:98:
                    df:a7:2d:68:61:8b:cf:e8:f4:00:68:44:4c:1f:be:
                    75:13:31:2d:af:95:42:fd:cc:cb:a1:cd:c7:34:22:
                    07:13:bf:f4:5c:90:8c:2c:c5:64:0d:fb:11:18:16:
                    ab:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:24:C8:E2:97:37:70:93:0C:09:06:B1:D6:CA:BE:25:B7:C3:FF:63
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:78:7f:90:fa:09:c5:44:31:ef:c3:e4:25:2c:39:53:4c:ad:
         7a:9a:f4:66:26:f4:77:bd:eb:76:b4:80:b7:71:f6:f2:cb:5c:
         36:ef:99:28:9f:ea:68:ae:36:45:03:27:b1:1d:f7:8c:14:8e:
         b4:83:e1:c9:a9:2d:9c:44:35:87:cc:c4:d2:80:bc:b4:c1:ad:
         61:1c:42:4d:c5:cb:80:f2:b1:a3:3e:1d:9e:ba:1b:9c:23:48:
         c4:92:50:c4:4f:34:9d:f2:02:53:9e:a2:42:0b:f9:fe:fa:a6:
         c3:5d:a9:ce:d8:d0:c5:9f:63:ce:e8:dc:c7:4d:e7:87:3c:e3:
         1b:3d:b9:bf:ee:64:d5:8a:7d:97:b6:9c:50:5c:50:ed:b1:d8:
         9f:e2:bd:ec:86:d3:ad:8e:1e:68:e7:79:94:e9:0d:62:ef:56:
         7b:3a:37:39:76:86:c8:d4:03:6a:e1:0a:44:33:e1:6e:d0:ed:
         5b:a5:f2:6e:1f:5b:c7:20:ec:cc:d6:7d:63:31:40:eb:6c:c9:
         8e:5b:65:69:af:58:e4:fa:ec:16:87:a9:14:09:c9:f3:20:26:
         cb:5b:72:12:9a:d1:39:3d:9d:78:45:9b:be:12:9d:1f:f3:21:
         d8:71:f9:75:95:57:4d:8a:3b:a6:68:d5:0b:66:eb:7e:6b:b8:
         0c:0c:ef:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3UyoJcnr8w2UI9wH+9QzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh
Zjk2M2EwHhcNMjUwNjE2MDYwMDI4WhcNMjUwNjE3MDYwMDI4WjAzMTEwLwYDVQQD
Eyg0ZDI0YzhlMjk3Mzc3MDkzMGMwOTA2YjFkNmNhYmUyNWI3YzNmZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC8/2KL6Ohh5qJfmnfzPXW9Cv2NU
sXEJpM9LztuLZBQ9pR/YD0TNPVCvMd21tVyH1K8O6eUnQqb96ucSq66IM7LtXLJm
lG9obCMsH7O1HV7ptXmQ1GBf2qEFYK6Uic0vtSuM9PccKfZlgxPWlW8YhARp84sP
04ewTNiUfBb6rOy4pNBmTkwPVHvy0doOYQN+IeMHdGtiD5eltnMGqkJzqcj/n2pC
K4qBPX9uPyBCNOnZ1/fMemDgpgKdQ4sEHYwJv6DF3uOdK64IO3CGLv3OhJjfpy1o
YYvP6PQAaERMH751EzEtr5VC/czLoc3HNCIHE7/0XJCMLMVkDfsRGBariwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0kyOKXN3CTDAkGsdbKviW3w/9jMB8GA1UdIwQY
MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt
OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5
LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHh/kPoJ
xUQx78PkJSw5U0ytepr0Zib0d73rdrSAt3H28stcNu+ZKJ/qaK42RQMnsR33jBSO
tIPhyaktnEQ1h8zE0oC8tMGtYRxCTcXLgPKxoz4dnrobnCNIxJJQxE80nfICU56i
Qgv5/vqmw12pztjQxZ9jzujcx03nhzzjGz25v+5k1Yp9l7acUFxQ7bHYn+K97IbT
rY4eaOd5lOkNYu9Wezo3OXaGyNQDauEKRDPhbtDtW6Xybh9bxyDszNZ9YzFA62zJ
jltlaa9Y5PrsFoepFAnJ8yAmy1tyEprROT2deEWbvhKdH/Mh2HH5dZVXTYo7pmjV
C2brfmu4DAzvqw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:41:38 2025 by rpki-client