
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File:                     QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier:          rdgxkPF/L6SL8LJ3MVEOJZCdsdi1Nx/xzDvskdkSFFc=
Subject key identifier:   F5:32:43:95:D8:A2:2F:B1:41:79:A8:44:1E:62:98:74:FE:7B:13:79
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer:       /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial:       0194BB60605F63DA8A727D86EC5AF4878E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number:          10D6
Signing time:             Fri 31 Jan 2025 08:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:43 +0000
Files and hashes:         1: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: j/XomW/ARF2M9mLxZtXZJAAptsvTzr4UFiKVkfA6VfY=)
                          2: ukNphFAe4cX3Zc-R26t80LykhN4.roa (hash: xXUTisVftHwOaoab4KLxi4q4wlsyXqJydXF1SwvOD0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:60:5f:63:da:8a:72:7d:86:ec:5a:f4:87:8e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
        Validity
            Not Before: Jan 31 08:00:43 2025 GMT
            Not After : Feb  1 08:00:43 2025 GMT
        Subject: CN=f5324395d8a22fb14179a8441e629874fe7b1379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:55:4b:61:4f:02:b0:5d:a8:d7:63:74:05:
                    17:f1:3f:7d:39:2c:b2:a0:12:a3:35:85:92:a8:d5:
                    21:f2:f3:46:35:41:c7:b6:a3:f9:8c:89:ab:71:c5:
                    58:d2:d3:b2:b3:f5:0c:d3:96:26:fb:7c:0c:26:4f:
                    d5:07:0a:54:af:c9:eb:cb:bd:d7:2f:f6:67:5e:07:
                    2c:21:25:d0:e0:27:6e:56:d2:6d:4c:9d:58:d3:e9:
                    f8:09:1d:0d:27:1b:8b:df:8b:fc:d8:06:74:e5:e8:
                    e0:0d:1c:cf:b9:ba:2d:ff:46:83:3a:75:68:db:3c:
                    74:87:76:6a:72:48:72:e9:30:dc:87:26:71:ee:6c:
                    e9:e1:42:9c:2a:b7:9d:4a:1b:e2:af:48:d3:9e:d5:
                    ba:ca:4a:c3:7b:78:95:b3:38:b1:d0:98:20:93:dd:
                    bd:73:d1:9e:bb:8d:c6:52:65:0f:77:ed:57:fe:3f:
                    d1:1b:06:c9:8d:9b:47:90:08:13:a9:f3:c2:da:0a:
                    c4:a4:0e:fa:af:43:ee:07:ba:47:76:47:87:bf:e2:
                    e3:e4:50:ba:07:64:76:7f:10:80:92:10:8c:71:0f:
                    5e:33:5c:bc:b4:82:4d:ad:2d:3d:25:73:2a:53:23:
                    59:9b:b1:db:b0:34:0f:07:7e:26:88:42:32:40:ab:
                    8f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:43:95:D8:A2:2F:B1:41:79:A8:44:1E:62:98:74:FE:7B:13:79
            X509v3 Authority Key Identifier:
                keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         bd:e6:b6:bf:7f:b7:d4:52:7f:55:98:6d:76:6a:a1:2a:26:b0:
         ef:d4:d9:a9:eb:51:57:4c:10:e6:10:63:d4:53:e3:a7:64:7d:
         2e:98:4f:ce:1d:fd:17:7f:cf:c6:d8:d9:07:3b:78:93:22:66:
         93:8b:bf:fd:b4:52:29:91:3e:38:01:2a:71:b0:5e:da:82:ba:
         38:0f:4e:80:68:63:98:48:a1:3c:b7:57:e4:6f:f6:1c:c4:3a:
         61:5a:bc:8f:04:d7:e9:e7:f7:a6:3e:12:4b:60:48:2e:a8:92:
         10:d4:7e:68:39:91:3f:2b:6d:af:63:cc:34:c9:11:68:f7:ac:
         6e:ca:27:cd:f2:00:df:7e:81:1b:76:18:5b:be:e6:d4:e6:dc:
         42:d5:92:1e:c7:c8:ef:2f:59:3d:9b:69:ee:49:04:dc:c0:54:
         e4:fb:89:23:e2:d7:85:e7:9a:df:89:4a:94:2c:1f:75:96:a7:
         6b:29:1e:7d:ba:f4:e4:f4:9f:3c:2d:5e:1d:2b:1e:49:1e:ad:
         72:bf:96:52:30:57:51:48:4d:ac:11:f4:70:7a:37:79:9b:b4:
         51:4b:a8:da:a6:07:f1:3e:a3:5f:76:46:f3:48:69:20:3d:24:
         c5:e6:85:2e:d9:cc:00:5a:eb:0d:7c:bb:dc:2d:30:f7:08:83:
         1a:c7:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:44 2025 by rpki-client on console-fra.rpki-client.org