Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
File:                     QeODxYB-mzL1dtCluO53RMrPtxc.mft (raw, json)
Hash identifier:          k9k5ckGOmp9tXpFJPEzV8xEpWT+pRncHmhX9doum/O0=
Subject key identifier:   58:CF:24:96:22:FC:BA:55:DA:9B:57:E9:06:7B:A8:A3:73:7A:EA:2C
Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
Certificate issuer:       /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Certificate serial:       0197B70EFB1965B767D1B0EFC94EC7D018EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
Manifest number:          0484
Signing time:             Sat 28 Jun 2025 15:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:41 +0000
Files and hashes:         1: 03enaQCGw_eqXqIAwZyG-7zrfRA.roa (hash: YhNG/6VofCuK7pQjtVrVurKsTSoyBGAKru+JjLAKpoo=)
                          2: DUyUlX3xTZHlVnLSKpECvt4NkYU.roa (hash: ZP6huwEf1pdyFLtyz+3lIcMnm1rz3bsZAcR3RQdU+KU=)
                          3: QeODxYB-mzL1dtCluO53RMrPtxc.crl (hash: 7a3bkbXlVBr9QYXy3XP/vVuxkkW75m1OCT0BLdQWjK4=)
                          4: bB3G3EZqBAqArfU6X5zzc1opBME.roa (hash: gPeixOKastqxOj7HlHBp8UwchVAjS4fsBzFCexJl5H8=)
                          5: lKGyjDcky_IoNZN6qvlaMVTqM58.roa (hash: IiBQAy+zcf79xQNY8RIQMsijGISjsQrLjaoVvIJA9t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:fb:19:65:b7:67:d1:b0:ef:c9:4e:c7:d0:18:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
        Validity
            Not Before: Jun 28 15:01:41 2025 GMT
            Not After : Jun 29 15:01:41 2025 GMT
        Subject: CN=58cf249622fcba55da9b57e9067ba8a3737aea2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:e2:7b:7d:12:d0:6e:c6:e9:f9:69:0a:59:
                    e4:5c:d4:26:f5:8f:2c:36:d4:4a:20:c3:08:c3:43:
                    49:59:0d:fa:e6:f3:de:2e:0a:c3:02:e9:d4:53:eb:
                    69:e6:50:d0:3e:0d:00:ab:42:a9:f2:1f:75:e2:88:
                    96:bb:94:ec:cc:e3:71:c4:90:67:2e:a1:8b:ff:3d:
                    1f:6a:99:cb:e2:fd:a3:09:35:4c:1b:ee:b0:5b:70:
                    67:51:5c:45:b9:14:fc:77:00:d0:c9:5c:fd:23:57:
                    e8:4d:88:36:1f:cd:3b:6e:ae:97:03:16:54:5a:e9:
                    27:f3:26:2e:6a:c0:4b:27:32:37:3f:cc:4f:fe:82:
                    27:ae:b2:cb:8f:6f:11:a9:96:ba:61:39:e6:ed:87:
                    30:64:1a:29:5e:1b:1a:56:3f:0c:5a:cf:d8:c1:04:
                    f9:59:e5:75:e7:c7:25:29:6b:e9:0c:45:1a:95:57:
                    4f:97:62:66:59:88:46:6e:d4:1f:ec:28:52:55:df:
                    fe:a1:ab:da:c4:e1:83:5e:a6:aa:b3:29:59:84:6a:
                    d2:10:5e:2a:69:29:bc:94:84:6b:4f:58:50:85:ea:
                    5a:12:3b:49:fa:c9:3a:bb:2c:4c:ef:ba:12:1f:26:
                    f6:72:ae:67:a8:f2:5e:48:e5:d4:4d:03:9d:3d:bf:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CF:24:96:22:FC:BA:55:DA:9B:57:E9:06:7B:A8:A3:73:7A:EA:2C
            X509v3 Authority Key Identifier:
                keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:66:3d:6e:80:0c:67:f4:92:ca:ad:e5:c9:8f:0b:c0:2d:5d:
         c7:33:1a:47:a8:2d:5a:0a:45:a8:b1:c9:5b:be:01:df:0a:1d:
         d2:bb:3b:49:2f:97:d3:fa:69:98:08:27:3b:c1:b5:d9:fd:a5:
         db:2c:c8:b8:de:e5:e5:ca:cf:a7:57:e8:8c:1b:c4:ef:59:d5:
         e0:c7:c5:40:b0:5c:5a:d8:bb:c9:8b:15:35:f8:f1:4d:9f:f6:
         e9:a4:9d:fb:71:5a:8a:6d:81:d9:fb:75:fd:75:4c:b6:85:ad:
         8a:eb:6c:ad:b2:7f:8c:23:f0:ce:c2:d3:10:f1:3f:ab:66:4f:
         80:0f:a3:44:8b:86:1f:29:44:f1:53:d3:92:c4:f8:e0:a4:67:
         37:bb:1c:e2:14:3d:f4:13:88:2d:2a:77:1d:b9:2e:3b:7a:76:
         3e:7f:55:af:3a:94:ed:d3:65:7e:8f:d6:de:bd:fb:c4:24:34:
         0c:b4:24:66:05:a0:a8:48:fc:41:11:86:a7:9c:f5:2e:f1:02:
         95:99:98:65:85:c7:56:fb:04:0e:3b:18:9a:c7:15:c5:11:b4:
         5a:fd:aa:7b:0d:2c:52:4d:2f:1b:69:02:e3:64:ae:d6:91:ad:
         58:5e:07:60:f8:f3:50:80:2d:bf:e0:ad:d7:05:d7:b3:e7:c2:
         a8:a3:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:21 2025 by rpki-client