Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
File:                     Q4T2-m3sztVXioWlHgvWVwHqNOw.mft (raw, json)
Hash identifier:          Ny8QlKPTsFhr4eyrJVldFW1D+RMh9UOQE0GFq4eNvlQ=
Subject key identifier:   3F:D5:4B:C4:60:FF:E5:7F:60:76:14:9F:C2:39:B3:41:AE:FC:C6:D4
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Certificate issuer:       /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial:       01977F44065483B326642649025882633E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
Manifest number:          15AB
Signing time:             Tue 17 Jun 2025 19:00:53 +0000
Manifest this update:     Tue 17 Jun 2025 19:00:53 +0000
Manifest next update:     Wed 18 Jun 2025 19:00:53 +0000
Files and hashes:         1: 29wssqErvKQtR_9f6uK-OYzddNM.roa (hash: Bh05SYc8VBmf4zaIv99zE5UZHb6fBJqOGBDvempbpVM=)
                          2: 6ydkCTIO-cNnh8Hv2Ok88IlcHaI.roa (hash: wLv2JoucZBkU56L2p9pXvAWsrjbYGSWjGCERyhVvXsw=)
                          3: AN-DGU807Zi1GLozE0Ye6tyK7Ic.roa (hash: +/Pg+LZh0oTnlaPXWDZsXPiFa0OXAsSR/g5vgnMvqME=)
                          4: Q4T2-m3sztVXioWlHgvWVwHqNOw.crl (hash: TKxDxaKb/EM7598REMOmLvPIxoUQZojvYgnIdE3IuxU=)
                          5: akr2zEciBp0bAf10VTnQBF8A5hE.roa (hash: SJfaT9rqeoFgX5bxM6d8wxAKVaMpQ7a7c0aJKadx3yo=)
                          6: maXcZQ7N2y2_afrzV1oMNjT4O7g.roa (hash: D+pc8oR4WM9Y/chv55U8MqOsuEcIXejdvRWZ+f3Pszg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:44:06:54:83:b3:26:64:26:49:02:58:82:63:3e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
        Validity
            Not Before: Jun 17 19:00:53 2025 GMT
            Not After : Jun 18 19:00:53 2025 GMT
        Subject: CN=3fd54bc460ffe57f6076149fc239b341aefcc6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:ae:b2:cd:83:df:db:74:8e:a0:ba:70:3c:
                    24:e1:68:16:42:74:e9:1f:69:c9:a7:e5:31:30:c9:
                    08:b3:0b:a3:ba:e6:55:b5:b4:24:b4:a7:15:9e:3b:
                    ab:fd:ff:f0:4e:f8:66:32:3c:e5:4a:c7:d5:ec:39:
                    11:39:7c:69:4b:7c:89:6e:0b:02:c0:a6:89:ec:99:
                    2d:7e:54:d9:14:e4:fb:ac:42:8b:27:27:24:a9:21:
                    d2:75:49:ab:be:07:27:89:9a:33:c6:2c:68:db:4e:
                    02:36:56:81:f3:ff:34:80:4f:1c:31:c6:76:4d:ed:
                    0d:5d:47:fc:fb:3b:9c:ab:f6:f3:2e:80:0a:d4:2a:
                    40:b8:5a:b2:14:12:ea:d7:1c:b9:fb:cb:0d:30:8c:
                    f9:0d:c6:bd:10:c4:19:10:4f:6f:61:8c:99:05:d0:
                    85:95:5e:8a:34:0c:17:b6:91:20:c1:24:4b:53:66:
                    af:f5:f3:6b:87:8d:42:00:df:27:ce:ce:99:24:dd:
                    b0:c0:27:c9:30:9c:68:77:52:1d:10:12:1e:94:25:
                    ba:e4:fd:b1:72:f4:c7:6e:2b:4f:12:58:14:c6:00:
                    c6:46:ce:e6:c3:b3:1f:62:b7:cd:50:d4:3b:f1:27:
                    53:98:24:7f:4c:64:97:82:a4:81:2a:74:05:2c:a5:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D5:4B:C4:60:FF:E5:7F:60:76:14:9F:C2:39:B3:41:AE:FC:C6:D4
            X509v3 Authority Key Identifier:
                keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:8a:a7:2b:6e:7e:53:7e:ec:8a:e6:de:99:f4:4a:92:c1:c1:
         9b:b8:b9:ed:6c:0c:2e:1d:6c:9e:bf:cd:1e:48:f8:1b:b0:85:
         df:00:38:dd:15:f1:1d:3c:ac:11:5e:be:ae:85:be:65:6d:2f:
         ec:bc:4c:fd:e0:de:0a:bd:65:86:36:1b:35:74:4a:bc:50:60:
         65:1a:15:cf:c9:2e:07:ee:04:06:d9:2c:0b:0e:1e:94:f2:06:
         01:1f:da:fe:68:df:f7:ea:2e:91:09:ab:c7:3d:4d:10:9c:c4:
         2d:63:d8:b1:1a:f2:fe:92:e7:e8:63:8e:13:a5:00:37:a9:fc:
         24:34:bb:a4:98:4c:2a:13:f4:86:a8:19:f2:e0:aa:b9:cc:7c:
         8f:fd:af:42:21:3d:0e:4f:76:0d:e3:cf:75:bb:54:47:4b:35:
         1c:ea:1e:9d:dc:26:f2:06:85:af:0b:9a:d7:b5:f0:60:40:98:
         6f:6a:60:b3:34:14:17:17:6f:32:7c:e9:07:9c:b0:c1:d1:b4:
         df:7d:88:2d:ea:b8:4c:9c:a8:a5:7d:24:fc:43:55:0f:ba:72:
         fe:f9:79:f2:c5:dc:c3:73:da:a6:e3:8d:6c:82:16:b9:be:d1:
         af:ee:2b:a3:26:81:a7:c3:af:7c:ae:22:4d:81:a3:7f:7b:bb:
         c8:9c:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:07:31 2025 by rpki-client