Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File:                     qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier:          39tuioDrcGe5QwNyZYLb98ekaQju3usm+ElXv0XdS/s=
Subject key identifier:   80:13:B0:BF:BD:E6:69:2D:1F:52:18:D7:FB:0C:F0:F5:29:8B:C8:55
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer:       /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial:       01976EBE3AE69959240843B376B1F2C6AAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number:          0C85
Signing time:             Sat 14 Jun 2025 14:00:49 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:49 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:49 +0000
Files and hashes:         1: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: GNcny4E/WukkzVKyP9HpoB8ZnDq4xMPpRb/jhKe+SrQ=)
                          2: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (hash: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:3a:e6:99:59:24:08:43:b3:76:b1:f2:c6:aa:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
        Validity
            Not Before: Jun 14 14:00:49 2025 GMT
            Not After : Jun 15 14:00:49 2025 GMT
        Subject: CN=8013b0bfbde6692d1f5218d7fb0cf0f5298bc855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:4e:01:1c:85:db:98:ed:56:08:d0:4e:ba:
                    7e:6b:e0:b4:b6:3f:d7:af:72:06:86:98:10:e9:61:
                    a8:2c:80:14:aa:4f:bb:16:e3:a5:d9:80:9f:fd:44:
                    58:86:b3:9a:ca:16:92:f2:dc:b6:46:81:15:a6:83:
                    5c:3e:33:37:53:97:52:e4:52:4e:82:e8:e5:fb:4c:
                    c2:32:2b:96:5d:7d:ef:f6:6d:7f:5b:2e:69:3d:82:
                    3c:42:d2:03:72:d9:9c:79:c6:4b:c8:b0:1f:c3:a3:
                    c2:74:b7:a6:0d:08:11:c7:40:c6:e2:84:cf:79:a6:
                    46:59:5e:f2:ad:b6:64:b9:af:02:90:ef:40:5e:4b:
                    9e:a1:34:f4:ed:c3:00:22:9c:7e:7f:dd:52:46:3e:
                    b9:fb:42:ce:33:e2:f5:7b:4d:e4:02:11:f8:e7:9a:
                    48:7a:d4:0e:87:2c:d0:3a:9c:e2:68:2a:f7:d1:61:
                    25:6c:93:37:5a:ea:81:d2:19:79:9c:a2:1d:eb:e3:
                    68:17:49:50:06:3f:bf:2e:06:58:78:84:d1:b8:9c:
                    ac:66:57:7f:e7:8a:1c:ee:66:8e:0f:5e:ef:b0:29:
                    4b:a2:55:c7:59:b6:dd:99:53:46:74:a5:61:02:44:
                    5a:54:53:8b:1d:83:b2:8b:37:31:41:4f:80:f4:15:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:13:B0:BF:BD:E6:69:2D:1F:52:18:D7:FB:0C:F0:F5:29:8B:C8:55
            X509v3 Authority Key Identifier:
                keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:77:c5:91:2c:68:e5:f9:9b:28:27:3b:71:c6:45:eb:f7:3e:
         0d:0c:52:e1:f7:eb:8c:5f:b8:35:53:47:cf:58:5b:15:fa:8d:
         63:d9:bd:be:15:37:88:9f:be:10:a3:17:62:a0:ca:68:c8:66:
         fb:ea:7f:7b:fa:06:f6:bf:ac:00:74:46:db:ea:ea:5a:36:fd:
         2b:6b:84:4b:24:0a:92:7a:2c:56:b4:28:12:10:de:6c:35:f8:
         86:bf:0b:31:ec:d5:49:2c:45:dc:db:99:e3:57:59:73:80:69:
         fd:67:40:46:ce:d8:16:aa:29:62:c6:b1:45:41:89:10:9b:68:
         ad:72:f6:be:1a:a7:8c:e3:eb:d0:19:91:7a:be:ba:69:f0:a9:
         41:2d:96:d7:3b:38:21:ac:66:d2:c7:fa:3f:a1:e2:54:06:e2:
         61:9b:68:1a:52:df:db:99:f6:80:22:10:96:cf:6d:6f:cd:a9:
         3d:76:75:2c:a7:b4:c4:72:15:bd:a1:2d:1a:a0:a5:bc:61:f9:
         af:0f:75:e4:b7:6e:a8:5d:20:8d:4c:16:2f:d8:10:bc:cc:80:
         93:a7:c7:dd:a9:e0:ab:72:8f:04:99:cc:b8:3a:87:89:63:a2:
         75:f8:e1:33:26:95:15:50:3b:ed:26:6a:c1:7a:59:ad:27:2b:
         13:4a:7a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvjrmmVkkCEOzdrHyxqqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjFlMDViZDdiM2Y4Y2E5YjRhYmQwZjg5OTkxMjE3OWI1
NjZkZjcwHhcNMjUwNjE0MTQwMDQ5WhcNMjUwNjE1MTQwMDQ5WjAzMTEwLwYDVQQD
Eyg4MDEzYjBiZmJkZTY2OTJkMWY1MjE4ZDdmYjBjZjBmNTI5OGJjODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNBOARyF25jtVgjQTrp+a+C0tj/X
r3IGhpgQ6WGoLIAUqk+7FuOl2YCf/URYhrOayhaS8ty2RoEVpoNcPjM3U5dS5FJO
gujl+0zCMiuWXX3v9m1/Wy5pPYI8QtIDctmcecZLyLAfw6PCdLemDQgRx0DG4oTP
eaZGWV7yrbZkua8CkO9AXkueoTT07cMAIpx+f91SRj65+0LOM+L1e03kAhH455pI
etQOhyzQOpziaCr30WElbJM3WuqB0hl5nKId6+NoF0lQBj+/LgZYeITRuJysZld/
54oc7maOD17vsClLolXHWbbdmVNGdKVhAkRaVFOLHYOyizcxQU+A9BXedQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIATsL+95mktH1IY1/sM8PUpi8hVMB8GA1UdIwQY
MBaAFKjx4FvXs/jKm0q9D4mZEhebVm33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80NDY5YjUtM2JmNy00MDk1LTg5YzIt
YmU5ZGQxNWQ4MjkxLzEvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80NDY5YjUtM2JmNy00MDk1LTg5YzItYmU5ZGQxNWQ4Mjkx
LzEvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHfFkSxo
5fmbKCc7ccZF6/c+DQxS4ffrjF+4NVNHz1hbFfqNY9m9vhU3iJ++EKMXYqDKaMhm
++p/e/oG9r+sAHRG2+rqWjb9K2uESyQKknosVrQoEhDebDX4hr8LMezVSSxF3NuZ
41dZc4Bp/WdARs7YFqopYsaxRUGJEJtorXL2vhqnjOPr0BmRer66afCpQS2W1zs4
Iaxm0sf6P6HiVAbiYZtoGlLf25n2gCIQls9tb82pPXZ1LKe0xHIVvaEtGqClvGH5
rw915LduqF0gjUwWL9gQvMyAk6fH3angq3KPBJnMuDqHiWOidfjhMyaVFVA77SZq
wXpZrScrE0p6ww==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:14:20 2025 by rpki-client