Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
File:                     Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft (raw, json)
Hash identifier:          XU6LsOKpm1+qM3HbldoeFjmlW/NvWay83dRGGGi9NHo=
Subject key identifier:   37:EE:A3:F8:BB:56:A2:BE:88:90:59:C3:19:FE:DF:2F:ED:D8:CD:74
Authority key identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
Certificate issuer:       /CN=42afd560d513077e339fabfe0ccda90940bdd814
Certificate serial:       019770075CCE2C527B0CB6F5F4477F2B29F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 20:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:19 +0000
Files and hashes:         1: Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl (hash: alX/T9tfQk4H4XvDURJ1+t0ACQIZ0OKt70gPOAncEWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:5c:ce:2c:52:7b:0c:b6:f5:f4:47:7f:2b:29:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42afd560d513077e339fabfe0ccda90940bdd814
        Validity
            Not Before: Jun 14 20:00:19 2025 GMT
            Not After : Jun 15 20:00:19 2025 GMT
        Subject: CN=37eea3f8bb56a2be889059c319fedf2fedd8cd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:1f:4e:0a:bf:34:57:30:85:cc:69:47:ec:
                    10:04:cb:59:99:c8:0c:6c:80:d3:95:92:db:76:23:
                    95:3e:4e:ff:15:a3:8c:b1:2f:ee:b8:e5:67:31:ea:
                    25:14:ea:b3:34:c4:8b:7a:95:e6:a5:77:ff:f3:f4:
                    77:18:eb:90:c0:7a:09:d7:63:e7:17:84:8e:3f:40:
                    67:ae:e4:f9:27:20:3a:ca:66:7c:7a:bb:de:0d:f7:
                    de:e2:ce:70:b4:7c:8f:58:af:01:58:e2:90:a9:c6:
                    b1:15:ca:c8:fd:c8:fe:47:01:3a:98:dc:1c:ce:63:
                    f9:de:6a:ac:e6:23:b6:3f:1e:3c:ab:a7:b1:5a:a1:
                    87:6c:65:4b:21:25:a5:a9:fe:f0:a6:81:51:fa:cd:
                    61:d4:fa:80:6e:1a:42:5f:4c:62:e3:28:7f:d3:47:
                    12:af:7d:4e:cb:9b:b3:da:c5:22:96:87:c6:82:84:
                    3d:b1:1b:14:a4:e1:9b:2c:a0:29:16:c9:69:91:cf:
                    01:e2:23:60:71:e3:ae:08:ce:b5:f9:41:2d:d4:39:
                    0d:3a:88:8a:7e:2a:22:27:6f:90:1b:e4:74:f4:bb:
                    bb:91:2a:64:62:13:68:e9:e5:6a:36:29:f0:a7:59:
                    dc:8b:89:b1:07:62:9c:39:e4:10:21:4a:22:7f:8f:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EE:A3:F8:BB:56:A2:BE:88:90:59:C3:19:FE:DF:2F:ED:D8:CD:74
            X509v3 Authority Key Identifier:
                keyid:42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c3:19:07:85:14:0e:1f:7f:ee:b7:1c:a5:b3:ac:a5:55:03:
         d7:ba:82:be:70:c0:f5:25:4b:f9:61:70:4c:ed:f9:dd:03:cb:
         b5:86:70:71:3a:04:6b:92:41:c8:33:46:94:7d:a4:13:68:9c:
         e6:f7:e4:98:96:f0:28:6a:e6:72:4d:f6:fa:4e:b9:29:74:a8:
         c4:34:c1:45:1e:d0:bd:98:01:8f:df:0e:d2:81:dd:2f:37:05:
         3b:c5:44:99:55:7d:ea:0d:7a:a9:ae:1c:77:8f:22:dd:23:82:
         33:d8:f2:f4:91:c7:ca:b8:44:51:eb:8a:08:f4:69:90:8f:52:
         16:14:1d:dc:16:59:52:2b:24:70:e9:d0:c3:20:36:16:40:96:
         5b:62:b7:0c:52:c2:ca:19:da:c9:06:16:59:63:29:79:bb:3a:
         68:e9:14:74:54:7b:5d:60:1f:13:e1:cb:60:cb:eb:ce:3a:eb:
         4e:b3:f7:9f:e7:92:88:e0:de:87:9e:01:69:73:1c:6f:12:2a:
         b5:66:4a:45:91:bc:88:fb:49:cc:bb:14:9e:7d:ef:f5:a0:89:
         86:73:c7:70:e7:c1:32:ca:02:a3:88:5f:5d:79:df:6a:5d:04:
         69:b3:78:e1:86:36:2a:46:8a:b8:b3:b9:f6:de:4d:7b:c5:1c:
         6e:2b:b8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:26 2025 by rpki-client