Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File:                     Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier:          kemo8gcAkMldaW1dJPljI057w7bNiWbtpUido1fVEog=
Subject key identifier:   DE:C8:CB:56:7B:39:4D:E6:6A:CA:BA:0A:DA:1A:1E:52:CA:8E:DC:70
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer:       /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial:       0197722D10D48F110558AA4AE756E20BFF39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 06:00:45 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:45 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:45 +0000
Files and hashes:         1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=)
                          2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: jsQw1PrGztbjcvB0g4zjr9o1ZkQeN+bGtPo1IDS53/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:10:d4:8f:11:05:58:aa:4a:e7:56:e2:0b:ff:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
        Validity
            Not Before: Jun 15 06:00:45 2025 GMT
            Not After : Jun 16 06:00:45 2025 GMT
        Subject: CN=dec8cb567b394de66acaba0ada1a1e52ca8edc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:a4:35:97:69:3d:5f:49:af:78:b2:7a:db:
                    99:6e:64:9c:c3:83:58:46:93:cb:80:94:07:a5:a9:
                    e4:8b:7e:91:2b:47:0c:06:87:e0:c7:9d:70:1f:5d:
                    1d:9b:5c:30:0f:9a:4d:90:1c:e6:93:c5:23:1b:7f:
                    72:b9:21:96:77:fe:71:31:0f:29:e0:7d:f0:81:ab:
                    65:48:9a:72:3d:2a:46:63:bc:1c:3e:c4:df:c6:e0:
                    1f:76:df:ba:af:7a:99:fa:83:c1:1c:15:e4:c6:5d:
                    80:78:80:23:73:e5:16:3e:fb:97:73:3b:5d:68:89:
                    53:b9:c6:bd:34:f7:2f:f2:ac:ab:97:74:5d:37:d2:
                    9b:58:ad:f2:59:e0:19:a9:02:8d:db:2b:f5:43:6d:
                    7f:e4:48:ad:4c:3b:b0:82:f9:f4:d0:38:a6:b7:7c:
                    13:55:9c:35:5a:76:6e:5d:6c:3e:d2:0a:40:a2:66:
                    af:4e:78:e3:0b:46:fe:f9:f8:d3:2b:29:a4:c7:ac:
                    c5:09:e1:16:30:25:79:3c:ed:ae:f5:8b:41:8c:c7:
                    75:a7:60:b2:ec:81:3f:a4:b4:dc:cf:f5:a0:d9:fe:
                    ca:ef:e7:e4:74:32:49:a5:dd:e5:b6:ab:4c:53:64:
                    2d:65:b0:ab:88:78:fa:6f:9b:99:0e:31:37:fc:21:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C8:CB:56:7B:39:4D:E6:6A:CA:BA:0A:DA:1A:1E:52:CA:8E:DC:70
            X509v3 Authority Key Identifier:
                keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:3e:86:e3:8a:0f:34:81:91:3e:3c:3e:45:76:e8:3d:d1:
         ec:5f:f6:3d:d9:29:a9:f3:7f:d2:81:e6:c0:66:8b:a5:79:62:
         6a:f8:60:d2:b6:26:f4:09:d8:17:15:a4:a3:51:a5:43:75:d5:
         aa:b6:bd:38:49:48:0a:e0:6e:eb:29:0c:62:c0:a2:12:4b:19:
         dc:e5:86:4b:ad:60:e4:c5:5b:73:47:49:87:d2:11:a9:dc:60:
         74:10:d9:77:87:e1:a9:da:8b:ab:fc:c0:42:94:a5:9d:c6:10:
         47:e9:d2:68:70:d8:6e:fa:47:e4:1b:ab:3c:71:43:40:bd:8c:
         60:93:a4:b8:7e:63:6a:29:6a:bd:3e:92:0d:cb:e0:2a:90:c1:
         2d:c3:79:ac:ca:6b:da:c5:84:f5:1b:08:47:25:1b:9f:75:bc:
         1c:ba:89:ce:ff:9a:c9:74:8e:ff:08:3b:90:19:26:88:54:3c:
         1c:64:47:a7:26:1a:d9:c6:a1:e3:8e:9e:bd:10:32:54:a6:6f:
         36:6e:c6:f9:f4:9d:37:b9:a3:51:b0:af:3f:33:67:cd:2c:ba:
         62:05:1f:d8:c0:af:8c:a1:c7:71:2e:9e:49:07:fa:9e:a7:13:
         8a:38:2b:5b:b3:2c:03:0c:6b:d4:04:c8:41:18:9e:e4:82:6d:
         46:65:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:30 2025 by rpki-client