Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File:                     QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier:          +n0URH+DPeqjl5pY6rLeQ/4AcMAQtUecX+xQOk5RGCA=
Subject key identifier:   F7:EE:A1:BA:52:86:6F:7A:17:45:7B:F0:DD:ED:D9:15:ED:28:68:8A
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer:       /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial:       01976D3E864ADD952AFF99898FB80C7A0E74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number:          0B9E
Signing time:             Sat 14 Jun 2025 07:01:43 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:43 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:43 +0000
Files and hashes:         1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: hIS5o3oXPSKGocJrILaN47+tTSgpR4+i7JUrgEgmBFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:86:4a:dd:95:2a:ff:99:89:8f:b8:0c:7a:0e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
        Validity
            Not Before: Jun 14 07:01:43 2025 GMT
            Not After : Jun 15 07:01:43 2025 GMT
        Subject: CN=f7eea1ba52866f7a17457bf0ddedd915ed28688a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d3:9b:84:54:1b:e5:df:b8:9c:2a:e3:a8:3d:
                    a2:26:ac:55:72:94:eb:85:85:2c:66:67:50:e8:66:
                    6c:38:c8:e9:73:51:23:ab:4e:06:90:0a:42:9e:93:
                    73:3b:c1:de:bd:3c:5b:54:26:12:37:3a:76:c7:98:
                    9a:bc:32:7e:17:82:44:f3:a9:aa:dd:a9:d3:d1:2f:
                    5d:db:eb:7e:d4:9a:a8:e8:9f:eb:3b:34:78:0b:82:
                    e1:e8:b8:3b:0c:ae:24:5d:b2:3b:46:52:ba:1d:53:
                    48:76:d7:ce:a1:6c:fb:41:c1:28:63:f9:c4:57:09:
                    d7:45:c0:53:13:7e:80:52:fe:4d:e1:b1:1b:e5:94:
                    60:13:23:5f:99:73:02:9c:d1:15:53:31:5b:bf:77:
                    55:e8:5f:b5:cf:62:c2:0a:03:11:29:64:41:1f:50:
                    07:55:07:a0:22:d2:4b:83:9e:d6:ec:d4:64:76:ed:
                    be:ab:d0:57:2c:d2:da:88:59:67:74:af:f1:64:f9:
                    ef:33:a8:c1:b8:2d:26:69:60:78:0e:dd:71:c0:df:
                    a3:2e:22:02:6f:0e:7d:90:59:a9:d2:ae:3f:7e:bd:
                    fa:f9:46:42:6d:50:70:e9:cf:f9:d7:29:aa:41:47:
                    7e:34:4c:bb:75:bd:d2:95:d7:3d:df:f4:de:7e:fe:
                    2b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EE:A1:BA:52:86:6F:7A:17:45:7B:F0:DD:ED:D9:15:ED:28:68:8A
            X509v3 Authority Key Identifier:
                keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:50:f2:7f:c1:4c:a9:bd:a3:07:4d:d0:12:23:a2:08:a0:e0:
         1d:7a:2b:40:50:d0:94:1c:c4:16:47:ac:45:02:20:53:cd:56:
         2d:ea:e0:2c:3a:1e:15:79:c0:16:a7:43:2d:41:ea:18:0b:09:
         37:d3:09:99:1f:30:61:f4:a8:f4:03:3f:8c:61:26:03:ad:b7:
         e0:25:47:a1:21:ad:27:20:91:6d:e4:ae:c0:1a:02:d5:59:b9:
         01:0e:44:78:45:6b:2b:cc:19:30:e9:d4:69:96:dd:65:dd:05:
         9e:ff:46:ec:4f:78:57:a7:dc:e7:60:e9:b3:23:6a:c6:6e:a8:
         76:df:88:02:51:ed:4b:e1:98:d5:38:df:7c:6b:77:93:13:78:
         f0:25:7b:8e:96:92:c1:e3:ec:17:d0:5d:53:a4:77:db:32:d9:
         13:06:4a:a3:e4:3d:2f:1b:0c:52:e8:7c:ad:dd:c0:73:83:e1:
         0c:bd:62:ff:69:53:57:62:ee:9a:b0:27:ac:f9:98:b6:94:55:
         b0:55:42:be:9b:d4:84:8a:29:98:d6:56:ca:76:36:9b:58:1b:
         6f:b5:65:3b:67:1a:01:b9:c9:dc:12:f1:3c:4b:6c:8e:0c:c4:
         fd:7b:87:32:d7:be:c0:29:9c:f9:a8:58:2a:03:24:9e:cb:cc:
         82:81:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:30 2025 by rpki-client