Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          jav1sZdfxCzt1O2xj0BcMfzpL0wCoVbnqJKIgbdH3zA=
Subject key identifier:   40:4F:1E:A9:A5:88:6F:44:CE:03:47:09:FA:4A:E9:53:78:D9:0D:00
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       01977C42B3A9B58568169B0C096B8B4CDA65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          1528
Signing time:             Tue 17 Jun 2025 05:00:35 +0000
Manifest this update:     Tue 17 Jun 2025 05:00:35 +0000
Manifest next update:     Wed 18 Jun 2025 05:00:35 +0000
Files and hashes:         1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=)
                          2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: emqD+6PneN/vZRnL/VpkOMVUaKCg1/dpZD73aV7qj60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:42:b3:a9:b5:85:68:16:9b:0c:09:6b:8b:4c:da:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: Jun 17 05:00:35 2025 GMT
            Not After : Jun 18 05:00:35 2025 GMT
        Subject: CN=404f1ea9a5886f44ce034709fa4ae95378d90d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:f6:44:ef:15:b4:d7:52:54:c0:a2:a8:c5:
                    12:6d:fd:1f:1a:20:51:40:33:59:28:b6:c1:06:c7:
                    47:0d:67:e7:20:84:21:22:d0:f9:9f:c0:f3:2f:d4:
                    8a:e7:80:ea:c1:d2:de:e6:0b:a5:33:88:9e:c0:ce:
                    a1:79:ce:c7:45:e9:9e:03:93:95:c4:09:34:89:8f:
                    72:89:8f:36:97:3b:cb:bb:3e:74:49:7e:6e:04:0e:
                    bf:24:f0:cc:4f:97:91:ad:90:65:66:95:49:8b:2d:
                    ab:80:82:ea:bb:25:36:f7:e4:f5:4b:53:05:82:c8:
                    f8:b0:22:a5:d5:39:fd:60:11:9f:89:e2:da:60:2a:
                    28:6c:a2:d9:f1:8b:8d:9b:53:ae:d8:2f:07:64:10:
                    a1:e9:4b:80:82:5a:ab:2c:38:82:28:f8:53:3b:74:
                    1e:a8:05:22:44:20:1a:bd:9a:1e:94:50:6b:ad:b2:
                    c9:10:ae:b8:36:90:68:4c:83:d1:b1:18:9d:1e:8b:
                    51:1e:f2:aa:75:35:5c:1c:64:d6:20:70:b9:f0:02:
                    7b:1a:41:21:07:5e:4f:e3:00:83:30:d4:6c:3b:e6:
                    b2:85:f9:5e:23:78:fb:36:fb:92:43:90:de:1e:56:
                    56:d8:c4:0b:ad:e7:7a:5e:e8:71:96:2a:7d:71:3c:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4F:1E:A9:A5:88:6F:44:CE:03:47:09:FA:4A:E9:53:78:D9:0D:00
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ae:a7:d3:60:66:3f:4f:1a:0b:8c:78:4d:6d:57:27:5d:f8:
         84:0a:04:f4:c2:9f:2e:76:7e:06:28:79:e4:96:c6:06:4f:20:
         20:95:a1:af:a4:6f:70:92:e4:6c:b0:6e:c4:3a:1e:c7:6d:41:
         ea:b4:41:c2:cc:be:83:03:42:3d:59:82:31:00:8a:82:44:9c:
         ce:7e:80:ad:37:37:07:a8:2b:b1:28:50:19:f0:93:16:8f:e4:
         a2:9f:87:8a:e6:51:dd:4c:05:d5:a2:1b:eb:7c:53:b5:7a:37:
         14:c2:82:ad:7a:c7:92:9d:1a:50:1e:de:9b:4d:13:ad:7b:f2:
         01:a9:90:30:9f:04:3b:47:38:94:7d:22:2d:2b:16:4f:46:7d:
         6c:44:f2:ac:70:d0:7d:e7:19:53:bf:b0:3c:00:4a:89:41:35:
         da:da:0f:48:74:2a:18:91:ac:e7:02:01:e1:ec:1e:b2:af:05:
         dd:24:6e:ec:88:f0:e9:36:e0:38:93:cb:8f:a9:b9:0a:24:b8:
         de:d3:5e:ec:51:5e:83:4f:74:25:0f:30:cc:a7:0e:6b:ec:33:
         75:45:26:29:90:d2:7b:d6:66:ed:4b:e8:d9:54:da:fd:ea:17:
         f4:96:ba:90:94:c9:cb:e7:6d:f8:c2:fd:8d:58:28:8a:03:75:
         5c:42:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:53:47 2025 by rpki-client