Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
File:                     qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft (raw, json)
Hash identifier:          vHSRBFmM0no2xw7Jz4sUKE5LRopOjzTOneBK3ULnTFI=
Subject key identifier:   56:7A:47:1E:71:BC:88:77:DD:FF:AB:53:AB:EF:B6:AB:6F:9A:EC:BD
Authority key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
Certificate issuer:       /CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Certificate serial:       019893361B1F9F72159AD6D608573F63A3D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
Manifest number:          04E0
Signing time:             Sun 10 Aug 2025 09:00:53 +0000
Manifest this update:     Sun 10 Aug 2025 09:00:53 +0000
Manifest next update:     Mon 11 Aug 2025 09:00:53 +0000
Files and hashes:         1: dr0aQwlMd5wprYGuM-4A6wgZRyk.roa (hash: 5kfUYUIepAA22bF94//hZe6cokijIGlywb6OIAlIy1Y=)
                          2: qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl (hash: S6bbmlO1CnphHPx594x3hqskcKjI0FPsuXJuhjUEIPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:36:1b:1f:9f:72:15:9a:d6:d6:08:57:3f:63:a3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
        Validity
            Not Before: Aug 10 09:00:53 2025 GMT
            Not After : Aug 11 09:00:53 2025 GMT
        Subject: CN=567a471e71bc8877ddffab53abefb6ab6f9aecbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dd:b1:74:44:0c:cc:66:13:b1:f2:58:b7:8f:
                    70:51:54:6a:c9:52:d5:ff:94:4d:20:46:da:ec:51:
                    f5:0a:46:76:b5:82:ce:38:8d:e8:0e:a7:f0:62:92:
                    5f:3b:09:ce:56:4a:51:44:80:0f:d7:bf:4f:71:36:
                    ec:5c:44:72:34:b9:0a:a5:8d:c5:e6:3c:26:a1:b2:
                    80:89:06:07:13:64:fe:b7:f2:e1:35:4d:9a:c2:08:
                    51:74:20:fd:d2:99:7a:1c:d2:63:1b:16:53:6d:e7:
                    ba:ed:25:97:9d:d5:9f:ba:36:24:19:af:ce:ed:59:
                    b9:23:03:61:8d:70:93:d8:ab:92:40:da:5b:cc:cc:
                    e7:09:29:46:b0:2f:93:3d:92:05:c4:cb:ae:61:00:
                    09:9a:31:1a:b7:cb:35:44:20:cf:0e:d5:53:bb:7f:
                    d6:fa:19:95:ee:93:78:19:10:5a:8d:e3:54:5a:46:
                    6a:89:a0:66:da:ca:7c:66:e7:a3:cd:f0:95:48:e6:
                    a9:8b:92:b7:4b:59:aa:37:37:bf:41:c7:db:88:e1:
                    a3:15:f0:b7:03:bc:f5:4a:98:80:34:cd:be:bc:52:
                    45:a9:e1:11:74:f1:27:f0:95:a8:07:f6:45:ec:5c:
                    90:86:b5:1b:aa:8f:0c:b1:4e:48:2d:0a:53:b2:a4:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7A:47:1E:71:BC:88:77:DD:FF:AB:53:AB:EF:B6:AB:6F:9A:EC:BD
            X509v3 Authority Key Identifier:
                keyid:AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:82:17:16:58:a4:21:f3:d7:62:86:b5:3b:43:df:8f:e4:
         53:b1:38:20:0d:2f:31:27:4e:47:84:a1:a0:a8:dc:2e:a3:9a:
         94:47:8d:8a:fc:7c:7e:c5:87:e2:1e:6f:52:bb:15:9c:b9:ff:
         66:fd:9c:29:de:df:a8:97:62:60:9a:f9:82:0b:db:f6:9d:0d:
         4c:80:91:2a:bc:42:8f:dc:33:50:4d:1d:8f:1f:bd:02:d9:38:
         02:5e:40:ed:17:66:e2:e5:0b:4e:af:90:d5:b0:f4:3d:3e:03:
         84:67:26:f9:a9:1e:67:d8:82:84:f0:f7:87:1c:f9:11:22:e4:
         91:be:8c:55:37:50:aa:db:be:4e:56:88:bd:a2:6c:25:62:79:
         a1:25:58:93:ea:93:a7:0e:e6:07:58:a2:e9:37:07:72:09:96:
         48:fa:62:8c:b1:76:b0:dd:d9:47:ce:90:fb:02:da:94:17:36:
         a3:f2:ba:5b:b4:31:8d:bf:0d:4d:63:57:36:c6:a4:6c:04:85:
         9d:47:e9:85:96:3f:98:ed:fd:a5:a9:5c:df:cf:52:2a:08:48:
         1e:13:7a:f1:e1:59:e0:e1:cc:73:c0:84:74:e8:39:37:f0:cc:
         9a:9d:69:df:5e:69:3a:06:ef:8c:ef:2f:ca:d2:fa:d2:32:6f:
         24:ff:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:01:46 2025 by rpki-client