Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File:                     Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier:          vaNViLKlhYs2WlmZcZ63be7IMqO0ogbgAQ7WJtuu4r8=
Subject key identifier:   F0:87:20:4A:D5:5E:07:07:9A:C1:79:92:63:A7:1F:5B:FF:94:E0:49
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer:       /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial:       01976929FC7CB3EE42DB8DF20FD5D88F4CA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number:          02A5
Signing time:             Fri 13 Jun 2025 12:00:48 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:48 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:48 +0000
Files and hashes:         1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: XDVjcmqxJ3dImav8LRzKy1WWm44TR5WOtE8KMmmWHac=)
                          2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:fc:7c:b3:ee:42:db:8d:f2:0f:d5:d8:8f:4c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
        Validity
            Not Before: Jun 13 12:00:48 2025 GMT
            Not After : Jun 14 12:00:48 2025 GMT
        Subject: CN=f087204ad55e07079ac1799263a71f5bff94e049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:15:4a:92:4f:cb:df:44:32:cc:ba:e1:ef:
                    88:6e:1d:f1:fe:db:5a:db:d4:cb:6d:10:44:05:87:
                    23:2f:1d:d6:90:85:d5:d8:1b:e8:04:84:4c:7c:c4:
                    92:9c:a5:99:49:86:a7:e7:66:1a:63:57:c1:d8:af:
                    80:78:4b:46:de:44:73:8d:d0:96:eb:86:f6:cf:fc:
                    df:0b:f5:cd:1a:22:08:24:bc:7c:78:28:77:05:8a:
                    de:71:d7:a1:56:1c:2c:12:4d:a1:7b:4e:c5:39:0d:
                    41:fa:89:9a:3f:4d:c4:31:61:83:71:5e:33:4b:05:
                    90:06:b5:15:90:0d:9c:16:7a:99:29:e2:dc:59:e4:
                    5b:2f:54:fe:5a:ca:16:8b:10:48:87:8c:e4:4e:19:
                    16:dc:34:d1:e7:9a:d5:65:af:c4:04:e9:a7:55:1d:
                    84:d0:d9:fb:f0:70:58:8c:bb:87:ff:bb:6d:10:ab:
                    86:d9:78:26:b9:b3:4b:29:1c:f2:9e:ef:6a:c5:a6:
                    5f:88:6b:24:7f:3e:23:40:47:c0:4f:7c:43:5e:88:
                    ab:af:b8:ce:a4:7d:91:57:ad:30:5c:cd:5d:5b:2f:
                    41:df:5c:31:86:bf:da:ef:74:67:ac:c7:0a:a7:4d:
                    af:80:ae:da:af:28:18:4f:7d:53:e6:e1:d0:da:ad:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:87:20:4A:D5:5E:07:07:9A:C1:79:92:63:A7:1F:5B:FF:94:E0:49
            X509v3 Authority Key Identifier:
                keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:bb:fa:76:53:62:90:28:7a:b0:07:ee:b4:aa:6e:38:5c:
         f3:37:25:99:fd:b9:95:28:9d:d4:6e:f8:37:d9:2c:5d:41:9a:
         f2:9f:b1:28:fc:39:00:33:92:03:dd:31:2a:14:fe:16:4d:6a:
         49:28:c4:d8:d3:ad:b7:1d:01:a7:2c:65:b4:a2:97:92:a0:49:
         b0:5b:b5:32:5d:00:62:ab:23:38:60:2d:42:46:88:50:63:b7:
         bd:30:91:3f:5b:af:f6:c6:70:9d:34:1d:c8:96:fe:1a:8e:27:
         ae:92:a1:35:b7:5b:f5:e4:c7:13:8a:d4:32:2b:fb:3f:94:87:
         ea:32:60:79:2e:47:e9:58:63:20:50:41:d5:26:97:6d:7c:d1:
         ec:f5:dd:0f:07:85:7f:ca:a0:a0:59:77:cc:97:d8:c6:8e:1a:
         d0:bc:c0:63:b8:81:98:fc:17:bc:8e:5d:05:32:1d:a7:f8:b9:
         eb:df:b2:3f:12:80:07:64:43:5c:6e:51:d7:16:9a:b6:9c:9e:
         52:c3:e4:e5:bc:91:7e:09:83:80:fd:d2:3e:3d:01:23:46:95:
         eb:fc:5f:81:be:c3:9f:0e:75:b1:7a:f2:0e:03:43:a5:c3:2d:
         93:1b:1d:d5:a2:0f:b6:d1:95:7c:af:65:e1:6f:60:4a:83:16:
         05:39:9e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:27 2025 by rpki-client