Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File:                     QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier:          Q8Hp34OUUFanQBnKDSk45Qpv0lSwtYwtnd1uyAnSL0g=
Subject key identifier:   B5:80:4C:19:F2:D1:E5:C5:FE:F6:AE:4A:14:D3:E3:D6:79:B9:BC:E1
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer:       /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial:       0196B220F701F7D0504213A313B9A62D5DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number:          0C6B
Signing time:             Thu 08 May 2025 23:00:26 +0000
Manifest this update:     Thu 08 May 2025 23:00:26 +0000
Manifest next update:     Fri 09 May 2025 23:00:26 +0000
Files and hashes:         1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: +C/9I/evSKVpLzaWJcwmgVqSpJCWmpUGr+5qaN6Q2TI=)
                          2: WjHlxqu14v8phrZRkyuwZHi4tA0.roa (hash: OgrQu5S4ReMsliJzFxYO2+I1LQQpOGuq17K/+Bl2UJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:20:f7:01:f7:d0:50:42:13:a3:13:b9:a6:2d:5d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
        Validity
            Not Before: May  8 23:00:26 2025 GMT
            Not After : May  9 23:00:26 2025 GMT
        Subject: CN=b5804c19f2d1e5c5fef6ae4a14d3e3d679b9bce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:f0:57:25:8c:3e:e7:47:a8:ae:34:6b:e0:
                    48:77:8c:13:b1:61:ac:e4:a0:b9:fb:6e:c2:8e:21:
                    21:c8:c5:d1:67:a0:59:d6:50:9c:d5:b7:f3:44:48:
                    11:14:da:b5:7d:7d:ba:8a:94:1e:52:10:04:d8:02:
                    59:06:25:0a:3a:03:5b:5f:fd:c4:e6:a5:7c:2a:10:
                    f9:d0:10:69:c2:38:c6:43:c4:2d:0f:03:e5:bc:68:
                    d6:96:eb:ab:9a:46:54:64:d1:fa:66:00:4a:d3:1d:
                    7b:d1:5f:79:43:06:12:23:4b:23:cb:b1:1c:9f:8a:
                    42:89:c2:e1:25:bd:6f:f0:0d:b1:7e:16:33:33:89:
                    2c:fb:d5:4e:d8:53:96:18:d6:76:2d:56:05:01:bd:
                    ea:94:f8:9e:bb:ea:56:1a:0d:dd:6a:0c:3b:67:2b:
                    0e:fc:a9:df:42:7f:f5:9a:10:1c:35:c8:0b:bd:db:
                    0c:f0:22:1a:0f:eb:03:98:9e:41:71:1d:aa:57:d9:
                    fb:35:a9:d1:6e:d2:80:d9:ec:30:05:95:12:e7:73:
                    f3:d6:ec:f8:ee:eb:f2:81:c3:4c:b5:05:97:7d:10:
                    a9:ad:b2:6a:93:cc:4f:10:53:f8:bc:b4:5f:ad:cb:
                    20:e2:07:74:24:ba:6f:42:bc:3d:db:74:51:a5:d3:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:80:4C:19:F2:D1:E5:C5:FE:F6:AE:4A:14:D3:E3:D6:79:B9:BC:E1
            X509v3 Authority Key Identifier:
                keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:42:d6:d5:82:dd:02:08:08:fd:d8:7d:45:f7:95:bc:63:23:
         0d:75:4d:dc:4c:ae:17:ea:9d:a3:fe:5f:c0:94:0c:21:37:1b:
         eb:3c:7f:5e:2a:d8:18:fc:0b:2d:79:5b:95:4e:91:a3:73:7b:
         62:f1:fc:88:e6:f5:76:b7:36:8b:50:fc:27:cf:95:9a:52:f2:
         4a:5d:cd:12:2d:b8:da:d6:36:fb:32:2f:6e:ac:75:92:dc:8f:
         9c:1d:b4:ae:a0:ca:0b:a7:c1:78:99:13:2a:44:2b:9a:da:97:
         1f:65:13:fa:ba:e9:70:35:d1:90:ea:7f:11:53:46:58:50:e0:
         99:26:8e:c2:23:33:1a:9b:9e:81:82:89:59:b2:5a:3f:88:ff:
         ca:d7:3e:3d:d3:67:aa:1f:63:3e:cd:93:9e:9c:72:11:99:80:
         45:58:a8:ea:28:f6:e6:88:63:fa:0c:a8:41:b3:27:95:65:07:
         d6:b6:e0:37:d0:3f:48:6f:ad:f3:a8:5c:af:19:bd:dd:00:bb:
         72:69:2b:b8:13:c2:ac:6d:b6:6c:9b:24:55:19:00:fd:70:e0:
         11:8d:5b:ed:fc:57:84:16:6f:7d:7b:a1:e1:eb:2d:2b:2f:9a:
         40:3b:8a:a8:f6:60:8a:03:34:36:a0:f4:13:7b:d4:9a:d0:da:
         40:5a:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:13:42 2025 by rpki-client