Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File:                     qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier:          mY3w3V5k+lNgaEuMWctwVI/QI7rojp5vSfpvJk6DyB4=
Subject key identifier:   82:0D:F4:6A:CA:57:F1:63:70:7C:61:32:77:6A:62:98:15:01:61:23
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer:       /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial:       01976A05C1596D561241703C1208EFC1387F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number:          14FD
Signing time:             Fri 13 Jun 2025 16:00:51 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:51 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:51 +0000
Files and hashes:         1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: k49D+8EdoErG3GRoE8zn4ZcdNHpvdx1BNyrcWl00OcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:c1:59:6d:56:12:41:70:3c:12:08:ef:c1:38:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
        Validity
            Not Before: Jun 13 16:00:51 2025 GMT
            Not After : Jun 14 16:00:51 2025 GMT
        Subject: CN=820df46aca57f163707c6132776a629815016123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:46:80:fb:8f:fe:e7:9d:50:ab:fe:ad:a7:
                    00:56:f7:5d:f8:26:1c:ba:0f:a8:f1:9c:e4:74:d3:
                    13:c2:af:44:03:d2:03:00:16:24:53:de:d2:eb:5e:
                    14:b4:90:d0:96:9b:18:0a:f3:e1:76:ce:77:86:00:
                    4c:b6:7d:0c:be:66:51:82:2e:98:17:cb:e4:61:d8:
                    a0:41:92:4b:cb:5f:52:c6:6b:3a:de:3e:a6:30:5c:
                    6a:7f:48:be:80:56:b0:65:89:28:85:32:f8:7b:79:
                    ad:9c:fb:8f:0f:b2:63:3f:95:4d:37:99:14:55:c1:
                    dc:dc:80:b4:13:66:70:40:21:99:fd:e9:b1:2f:ed:
                    8e:db:3f:19:d4:0e:fd:71:e5:02:e3:ee:df:04:d4:
                    75:12:cd:1f:11:79:a4:2c:b1:a3:15:f8:18:09:1e:
                    13:fc:7c:4d:18:79:c1:75:d3:60:31:3f:a3:78:90:
                    ee:35:07:ca:95:50:de:87:03:17:36:3e:f2:17:c6:
                    bf:4e:ea:83:73:36:56:c5:d1:72:35:6f:ba:a3:30:
                    9c:94:b7:cd:70:44:3a:26:41:8f:98:70:e7:11:99:
                    e4:79:3c:8b:1b:14:70:e0:6c:e2:42:65:a0:77:30:
                    35:b3:23:79:47:8f:54:62:ed:65:9a:1e:b9:0a:2f:
                    88:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:F4:6A:CA:57:F1:63:70:7C:61:32:77:6A:62:98:15:01:61:23
            X509v3 Authority Key Identifier:
                keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:17:c9:cc:4b:bf:65:99:e8:c6:68:41:a2:81:40:a0:2e:ca:
         9f:1e:fe:eb:fd:44:64:a7:89:34:7c:a9:b9:4b:91:21:9d:a2:
         89:4f:b7:52:0c:2b:7f:93:51:78:63:79:30:47:67:4e:01:a8:
         8a:26:88:fa:3a:22:6b:cc:0a:3b:eb:45:5e:65:47:bd:ce:9c:
         56:17:93:d1:13:8d:99:eb:92:28:39:0c:62:27:0d:0e:19:2f:
         ca:83:0a:38:04:7e:ee:2b:6f:b6:49:ee:3b:83:36:af:fe:2f:
         2a:61:fa:0f:69:dc:b4:d3:1c:6f:e2:68:f7:e5:76:7a:c3:1e:
         ae:46:24:b7:50:c0:55:60:a2:58:15:50:47:05:ac:3d:40:1c:
         7d:50:05:4f:a4:20:28:b4:e3:5f:90:98:78:c3:22:72:df:34:
         7c:e9:34:1d:11:4f:8b:86:d1:73:2e:11:43:1d:a5:26:a7:85:
         64:c4:ba:ed:f6:cc:9a:1e:dd:1b:68:a9:76:33:41:7d:bc:b1:
         4b:95:56:4d:01:47:ea:92:7b:02:9a:81:0a:4d:cd:7d:90:7a:
         75:27:8e:62:9d:0f:bd:89:c1:fa:3a:f9:b8:58:d7:cc:9c:68:
         a2:c7:5d:0b:69:d9:c4:8e:5f:45:f2:f4:63:79:c5:7b:bd:0d:
         5d:76:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:23 2025 by rpki-client