Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
File:                     qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json)
Hash identifier:          sWM7sK3tum365n/DKNc1q3oDDh8M3faV6UVGvjRF5gE=
Subject key identifier:   0E:68:F9:C7:C0:8F:4B:4A:43:0A:A8:E7:DD:AE:08:DB:B8:72:F3:EE
Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
Certificate issuer:       /CN=ab19000781c183366cba55416fd75b57dba0e4bb
Certificate serial:       01977187DE6CB996246EC2C3433EA65AEF1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
Manifest number:          0260
Signing time:             Sun 15 Jun 2025 03:00:19 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:19 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:19 +0000
Files and hashes:         1: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: lWB1oPCtJzgO/3HgzuojNBobnhjyZt9ApOGDDpFVErI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:87:de:6c:b9:96:24:6e:c2:c3:43:3e:a6:5a:ef:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb
        Validity
            Not Before: Jun 15 03:00:19 2025 GMT
            Not After : Jun 16 03:00:19 2025 GMT
        Subject: CN=0e68f9c7c08f4b4a430aa8e7ddae08dbb872f3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:24:5e:38:40:27:37:b2:2f:51:22:38:8c:
                    a2:27:c2:da:05:fb:0b:ac:5e:88:4c:f8:d4:67:ce:
                    12:bf:49:6a:2e:d2:24:f6:fb:e2:d7:c1:d2:50:c2:
                    1e:5e:56:43:cd:69:c3:4a:1a:57:0d:04:20:68:f2:
                    60:63:48:8d:0e:11:7e:84:2e:12:94:0f:0e:d3:ad:
                    92:f2:eb:3e:4c:ea:17:f2:bc:81:f1:0b:a7:9d:85:
                    60:54:a3:13:7c:e8:30:18:cd:07:0b:a6:e3:75:72:
                    5c:ef:f8:03:18:c9:a7:b2:5b:e2:53:ae:d5:ca:fd:
                    93:66:fa:fd:37:06:f7:d0:f3:d7:c5:c1:7c:03:c8:
                    ff:95:f1:b4:e7:ce:3e:e6:fa:c2:13:95:fa:ef:b6:
                    25:fe:2f:37:de:d1:61:00:7a:1a:80:a7:87:7b:45:
                    5b:02:e0:48:df:e8:48:cb:d7:cd:c9:d0:fc:21:fb:
                    e8:70:37:2c:75:71:32:25:a5:58:61:9f:b3:d1:13:
                    35:b1:18:1c:a1:ff:97:82:9e:53:99:c7:83:16:84:
                    f1:e3:39:e4:19:b8:b5:22:83:d7:13:f3:b8:58:eb:
                    de:8f:1c:07:57:a9:19:d0:13:84:15:67:7b:b0:69:
                    9f:94:3b:e2:49:0d:61:8f:43:aa:06:e4:4f:0f:18:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:68:F9:C7:C0:8F:4B:4A:43:0A:A8:E7:DD:AE:08:DB:B8:72:F3:EE
            X509v3 Authority Key Identifier:
                keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ff:0c:bb:52:df:1e:c3:80:38:4c:56:01:2c:ec:82:de:d0:
         c2:32:52:ae:3a:78:6f:eb:94:ca:d8:62:1c:fa:62:9c:71:a7:
         24:15:84:21:cb:cd:7c:16:cd:59:99:69:66:a1:6f:f3:4b:e1:
         f0:21:d5:83:8a:5b:e9:b3:88:9d:13:81:87:18:86:c8:f6:c3:
         98:9a:92:6d:cc:ab:4c:bd:ba:00:83:71:7d:c1:31:bb:32:47:
         cb:73:af:61:d8:06:d5:3a:d7:66:e1:bd:82:fd:d6:57:1d:7f:
         73:2b:ff:36:3e:a0:85:7a:52:d9:1b:25:fd:83:bf:a0:38:57:
         9b:42:fc:43:88:09:c8:42:9a:10:7e:97:5c:83:4e:65:01:8e:
         14:b6:11:f0:96:53:65:7b:0b:2c:dc:7b:32:c5:c1:db:99:bc:
         60:00:c2:17:19:75:e2:7e:1a:15:12:aa:68:69:0a:b5:e8:c3:
         52:af:06:f6:d1:fb:3d:32:4d:a6:ef:50:81:0c:e3:77:0c:ed:
         42:29:aa:12:4a:ca:4a:4e:91:b6:6a:9c:b2:d1:3d:bd:2b:65:
         b5:a0:f6:27:c7:9a:b9:56:d0:7d:d8:b7:a8:14:8c:9a:c7:45:
         59:58:26:8f:8f:bb:fa:72:7c:94:59:4a:e1:34:30:31:a0:31:
         72:d4:27:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:37 2025 by rpki-client