Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File:                     QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier:          E3vLyuAzoVQfqhY2+YSsH2JbHAPbxo84tjxE/5b8Q44=
Subject key identifier:   56:BB:E3:57:C8:3B:B5:27:D4:8E:02:58:18:74:5D:67:89:5A:FE:42
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer:       /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial:       01976FD0C2E45AFD0FE4A8A2F8AC856A1D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number:          016E
Signing time:             Sat 14 Jun 2025 19:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:41 +0000
Files and hashes:         1: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: 9nOaO8P6fusbgLZ6ovsB7COEascTaLGpEHWaRGc9hEw=)
                          2: e5dMHPand7tLiGm-I939H3JZTvY.roa (hash: y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:c2:e4:5a:fd:0f:e4:a8:a2:f8:ac:85:6a:1d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
        Validity
            Not Before: Jun 14 19:00:41 2025 GMT
            Not After : Jun 15 19:00:41 2025 GMT
        Subject: CN=56bbe357c83bb527d48e025818745d67895afe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:48:c8:c0:f9:db:3f:8d:d6:96:91:84:cd:
                    df:b2:9f:b1:d0:8e:cb:49:1e:3c:b4:c8:2d:a0:3a:
                    20:32:d8:1f:d9:2e:cd:e4:4e:17:2c:3f:52:be:62:
                    6a:42:78:29:2c:7d:14:fa:81:dc:5f:11:99:dc:70:
                    5e:b5:94:11:2e:50:c4:35:62:f1:6b:d5:3e:7d:7f:
                    93:eb:ae:a8:9b:3e:39:dc:2d:b8:a1:51:c9:e1:8f:
                    e3:e8:ce:c2:eb:aa:ce:ff:40:1f:ee:8a:34:19:96:
                    0b:b4:80:cb:58:c6:32:cf:7b:b2:c3:5c:f0:c3:fd:
                    75:c4:f2:a0:56:e1:7d:14:9d:10:ea:11:40:3c:7a:
                    05:37:74:d8:6f:3c:05:a6:4e:ea:62:f1:68:9a:ce:
                    fe:a2:1f:0a:e9:98:c1:36:26:d7:0e:94:01:61:5c:
                    00:6f:8a:67:c4:fc:f3:66:7c:20:55:54:a3:50:82:
                    fe:f6:a4:22:ac:55:29:40:09:a1:f0:12:ad:bc:97:
                    25:33:c9:8b:be:e3:d4:13:5c:15:44:a6:b3:f3:e4:
                    d8:9d:5a:ce:2b:fd:8f:36:65:b1:af:dc:67:6a:b1:
                    a4:ab:e9:c3:2c:c9:90:75:4a:28:e2:16:c1:3b:80:
                    1a:2c:6f:63:4b:de:c2:e7:ac:46:58:f4:40:0c:15:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BB:E3:57:C8:3B:B5:27:D4:8E:02:58:18:74:5D:67:89:5A:FE:42
            X509v3 Authority Key Identifier:
                keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b4:c3:d8:29:c4:9d:f3:9d:e9:9f:eb:87:66:c5:a8:3a:a5:
         d0:0a:92:06:e5:64:2c:62:f9:54:cb:25:c9:3c:93:15:4d:e6:
         05:3b:ae:eb:d8:dc:14:38:90:ec:37:8c:2d:b8:43:dd:09:89:
         5c:c6:85:3c:60:19:4b:b6:0f:cc:ed:64:8f:7b:18:c3:8b:92:
         2e:97:28:1d:33:24:62:d1:7d:69:5d:32:cd:87:b6:47:50:b9:
         f5:2d:90:e3:60:80:9c:58:ca:1c:62:36:7e:ac:cd:5c:f3:07:
         f1:bf:14:48:47:83:7c:47:4e:60:08:65:29:89:85:9b:9f:a8:
         05:a1:89:53:15:71:0f:c0:7a:13:49:58:25:c4:23:04:15:56:
         4a:5a:fe:b0:fb:18:09:a5:5b:87:ac:a2:0d:c0:55:d0:46:10:
         93:d7:1c:83:7d:a1:34:ba:47:df:e2:ff:2c:f0:37:74:00:07:
         71:15:af:1f:7d:f6:dd:45:c1:a7:3f:48:e9:e2:59:55:58:f9:
         05:94:e0:21:cb:b5:6c:a1:8c:0e:d4:e3:75:dc:6e:f7:76:f4:
         db:6d:1b:4f:bf:c0:74:2b:c0:45:ec:14:fb:85:89:1c:b1:c3:
         21:0e:3f:4a:d7:a4:e9:55:3d:7a:06:e1:e6:b8:08:86:79:32:
         c4:49:71:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0MLkWv0P5Kii+KyFah1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTY4OTJkMDdhMDA5MDZiMWI3YWQ0YmY4NTBkOGJmODA4
ODZmYmMwHhcNMjUwNjE0MTkwMDQxWhcNMjUwNjE1MTkwMDQxWjAzMTEwLwYDVQQD
Eyg1NmJiZTM1N2M4M2JiNTI3ZDQ4ZTAyNTgxODc0NWQ2Nzg5NWFmZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhpIyMD52z+N1paRhM3fsp+x0I7L
SR48tMgtoDogMtgf2S7N5E4XLD9SvmJqQngpLH0U+oHcXxGZ3HBetZQRLlDENWLx
a9U+fX+T666omz453C24oVHJ4Y/j6M7C66rO/0Af7oo0GZYLtIDLWMYyz3uyw1zw
w/11xPKgVuF9FJ0Q6hFAPHoFN3TYbzwFpk7qYvFoms7+oh8K6ZjBNibXDpQBYVwA
b4pnxPzzZnwgVVSjUIL+9qQirFUpQAmh8BKtvJclM8mLvuPUE1wVRKaz8+TYnVrO
K/2PNmWxr9xnarGkq+nDLMmQdUoo4hbBO4AaLG9jS97C56xGWPRADBXqZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa741fIO7Un1I4CWBh0XWeJWv5CMB8GA1UdIwQY
MBaAFEGWiS0HoAkGsbetS/hQ2L+AiG+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVphSkxRZWdDUWF4dDYxTC1GRFl2NENJYjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wNzIyOGUtMzJhOS00ZTFjLWFhZGEt
ZGVlMzMzM2MzNjdiLzEvUVphSkxRZWdDUWF4dDYxTC1GRFl2NENJYjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8wNzIyOGUtMzJhOS00ZTFjLWFhZGEtZGVlMzMzM2MzNjdi
LzEvUVphSkxRZWdDUWF4dDYxTC1GRFl2NENJYjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbTD2CnE
nfOd6Z/rh2bFqDql0AqSBuVkLGL5VMslyTyTFU3mBTuu69jcFDiQ7DeMLbhD3QmJ
XMaFPGAZS7YPzO1kj3sYw4uSLpcoHTMkYtF9aV0yzYe2R1C59S2Q42CAnFjKHGI2
fqzNXPMH8b8USEeDfEdOYAhlKYmFm5+oBaGJUxVxD8B6E0lYJcQjBBVWSlr+sPsY
CaVbh6yiDcBV0EYQk9ccg32hNLpH3+L/LPA3dAAHcRWvH3323UXBpz9I6eJZVVj5
BZTgIcu1bKGMDtTjddxu93b0220bT7/AdCvARewU+4WJHLHDIQ4/Stek6VU9egbh
5rgIhnkyxElxIw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:18:02 2025 by rpki-client