Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File:                     Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier:          skZrMI6rySmnN2R9HXPR2dFgCVVX3MZ1YyMWg/2IvFk=
Subject key identifier:   82:CB:24:B0:4D:88:A8:6E:79:28:90:90:6C:64:E6:E5:E6:8B:9A:A3
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer:       /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial:       01976CCFA59E817779C82F9DE5BE438CCA0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number:          0169
Signing time:             Sat 14 Jun 2025 05:00:37 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:37 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:37 +0000
Files and hashes:         1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: 6D47RcX1Qt1cs7iBRPQzAHJiCZoV1oyLFbomzjCWsYg=)
                          2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:a5:9e:81:77:79:c8:2f:9d:e5:be:43:8c:ca:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
        Validity
            Not Before: Jun 14 05:00:37 2025 GMT
            Not After : Jun 15 05:00:37 2025 GMT
        Subject: CN=82cb24b04d88a86e792890906c64e6e5e68b9aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5a:ee:19:a4:d0:00:7e:63:f5:41:5f:ab:f9:
                    2e:13:cf:ff:0c:d1:ad:4f:97:c1:2d:21:b0:a2:78:
                    9e:1f:3d:52:a5:b1:39:25:51:df:f2:76:c8:38:f8:
                    d4:dd:65:5b:87:98:2e:58:25:65:e6:33:26:bd:dd:
                    b4:0f:7d:32:45:ec:6d:7b:da:6a:c7:83:48:85:2e:
                    bd:03:92:b6:51:99:37:49:9f:af:db:12:53:45:69:
                    21:47:47:e5:e8:51:2e:dc:63:18:4a:3a:ee:13:99:
                    24:f8:dd:62:5b:61:3f:49:f6:9b:dd:f8:b8:98:5b:
                    30:53:8f:a8:be:30:79:46:c8:6e:39:56:10:cc:3c:
                    00:82:58:24:69:57:ee:9f:64:e6:f7:f8:71:36:23:
                    53:3e:d0:a6:6c:f7:e2:ff:17:f8:d8:3c:66:18:46:
                    df:8f:05:3f:99:44:d9:64:f0:3a:53:1c:e1:fc:d1:
                    f5:5e:f1:ae:0a:f5:ae:05:0b:16:9e:38:a1:7c:e6:
                    91:2f:04:30:1d:80:6e:ae:9d:e0:69:43:d0:a3:8b:
                    87:27:d3:ed:5a:67:35:43:62:c1:7d:21:22:42:52:
                    8f:5d:eb:4f:de:52:9b:de:18:f3:97:58:45:ec:59:
                    6e:85:66:97:93:02:82:d2:cf:d2:4b:10:e0:ad:85:
                    7a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CB:24:B0:4D:88:A8:6E:79:28:90:90:6C:64:E6:E5:E6:8B:9A:A3
            X509v3 Authority Key Identifier:
                keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:68:e8:5f:c3:a5:35:7d:55:e0:6f:64:9b:52:b1:d1:ea:
         c5:d1:c6:09:96:64:4b:e6:e4:a3:38:e2:94:62:52:1d:f3:cc:
         c6:6a:d0:ef:30:41:e4:4a:49:de:74:b8:0d:75:9b:b6:17:c8:
         9d:1c:a4:f5:9b:6e:4d:2b:20:91:aa:1c:a4:ac:4d:8f:74:31:
         78:3e:65:d5:0a:eb:aa:49:b7:a2:ee:d4:b5:bc:5c:00:51:72:
         e2:ae:fa:0c:59:b5:29:6c:38:c8:eb:2a:d8:e5:7c:93:c7:55:
         3e:f0:29:34:0f:e3:4c:56:ba:02:43:b0:e6:a7:06:79:03:46:
         a9:cf:ac:cd:ad:cc:4c:c2:c1:8b:dd:c5:84:45:53:c9:b3:f5:
         16:4f:92:53:3c:0f:3d:82:fc:d5:04:79:3c:46:7a:c3:49:f7:
         82:ba:4c:87:1b:83:12:89:e7:89:2a:aa:5b:cb:81:37:9b:4d:
         72:c5:ba:80:c8:74:7b:a7:5f:35:68:b6:27:f9:62:d5:01:d4:
         17:c8:ab:3e:23:b4:20:46:f3:7e:52:68:78:94:b7:f2:13:eb:
         27:b0:d2:a1:10:37:88:41:27:85:24:0e:4a:b3:0e:9b:d2:bd:
         d2:bf:64:fc:f7:21:2c:26:8b:60:ed:cd:47:6d:4b:04:06:62:
         36:04:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:22:10 2025 by rpki-client