Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File:                     QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier:          8ySMxzy/YbxVIeSFnaQu0FcoXvIcOz11F/2N7vNXnvg=
Subject key identifier:   1B:BB:DC:56:D5:C2:81:E4:13:0D:C8:FB:CC:B1:FA:46:09:2E:86:7D
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer:       /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial:       019770AC47B09ABB0272F39325EB787DFEA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number:          091A
Signing time:             Sat 14 Jun 2025 23:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:28 +0000
Files and hashes:         1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
                          2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: YXhLtMUWjbdvBLCmMajr1iwFLvLRNNzleWyh/iFjjQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:47:b0:9a:bb:02:72:f3:93:25:eb:78:7d:fe:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
        Validity
            Not Before: Jun 14 23:00:28 2025 GMT
            Not After : Jun 15 23:00:28 2025 GMT
        Subject: CN=1bbbdc56d5c281e4130dc8fbccb1fa46092e867d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:ae:e3:49:13:26:79:d0:f5:f2:34:61:51:
                    45:bc:4d:16:c0:32:25:93:92:28:7f:91:78:8c:aa:
                    cf:6e:cb:a2:41:c8:8b:d5:c6:28:2e:97:09:81:9d:
                    81:dc:2d:d1:5b:09:0d:3d:ee:34:d3:dd:3f:4b:6c:
                    73:c5:64:83:ef:fc:1d:bc:0f:2d:76:ff:b0:05:1f:
                    d1:70:f1:84:50:f2:fa:fb:7a:41:7d:05:90:fa:97:
                    f2:6e:d8:52:0c:88:8f:81:35:1f:60:d5:07:ef:c3:
                    e3:77:0a:4e:b8:ff:40:7b:da:c4:9b:ab:32:c8:32:
                    99:10:ce:3d:e1:d4:39:7b:2b:e7:84:8c:94:f8:7c:
                    27:e3:56:1d:98:d4:57:48:a8:c2:97:43:f5:b4:9e:
                    96:05:17:28:1e:55:21:7f:31:ea:5c:1d:8f:65:4b:
                    1e:ed:f1:c9:91:84:1c:15:0b:ce:2b:28:73:a8:b0:
                    17:1d:93:8c:de:8a:8f:53:7c:90:ae:39:f4:37:e3:
                    91:f0:eb:8f:1b:ac:2c:7b:8c:90:30:f8:18:70:bc:
                    1f:8b:34:e0:eb:c5:f1:6f:95:8a:d9:78:fe:8f:98:
                    6a:68:7a:33:53:d0:20:0e:6e:4e:f0:05:7c:ea:37:
                    b3:0d:21:36:34:92:0a:5d:87:1c:af:48:f3:57:dd:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:DC:56:D5:C2:81:E4:13:0D:C8:FB:CC:B1:FA:46:09:2E:86:7D
            X509v3 Authority Key Identifier:
                keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:fb:c1:7d:c8:56:3a:6b:f1:fe:25:57:e2:3a:1c:b5:0c:aa:
         07:91:22:4e:72:7c:f8:4b:5c:82:b2:de:06:7b:42:c7:fc:88:
         cf:66:ad:61:24:c8:14:f3:9f:ef:fb:90:3c:65:8a:68:56:90:
         19:42:10:e2:46:4c:4d:78:e3:a1:7b:31:a1:a0:8c:42:da:56:
         de:6a:b6:f2:8e:2c:66:fe:74:dd:be:55:08:f7:49:fe:9c:3e:
         c2:65:9e:28:24:73:08:63:ab:40:d4:7e:49:e7:28:9c:04:3c:
         0c:d9:6a:d6:9c:0d:64:70:d8:13:19:79:c6:e5:a7:c7:71:94:
         5c:d8:da:fa:96:61:bb:4f:d5:94:a0:da:30:e4:9d:0c:ed:af:
         38:92:e3:5c:d2:cb:07:4d:a2:fc:79:34:3c:06:19:24:b0:bc:
         b6:50:b9:c1:fe:7f:a1:79:08:5e:af:5b:d5:8b:ab:1d:5b:d4:
         d8:0a:92:69:41:6e:20:df:24:14:13:d2:b6:5f:06:82:16:3f:
         14:8e:37:ec:67:23:89:05:6b:89:63:dc:cc:2e:94:d9:7d:a7:
         2a:63:5c:1e:39:6d:13:34:a3:ca:de:94:05:e0:b4:39:ef:90:
         3e:90:ad:eb:fc:a9:b1:cb:23:49:e4:a7:d8:39:d0:0c:27:c0:
         48:ef:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:14 2025 by rpki-client