Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File:                     qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier:          fJ9TnZmUBfwtQ07wjnhC24nN/BEFxwmXS+JD+RLSA7I=
Subject key identifier:   56:5A:85:B8:D4:44:20:6A:C8:6C:3D:CE:DE:84:31:1D:35:79:A7:AA
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       0197B857B025762EBDDB7F0858E974B3DBB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number:          15C0
Signing time:             Sat 28 Jun 2025 21:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 21:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 21:00:43 +0000
Files and hashes:         1: Q1epDLLNnUzfsf-xFW4a-Y2XkJQ.roa (hash: w84BOAfcBqYsqabALnnfg1Wuoyv3VSmyIx6zia+PYNA=)
                          2: gLJC-FPMB6JG4uvuoXfj1y1VVB4.roa (hash: bJcY81wfY+5zVAZK4pJVEqgscj1+3rGIYBuBLom9f1Q=)
                          3: j51vgTDCax1tLhOyiZp4zqvzOKU.roa (hash: bN88IoNu8hIQldCCMN1vfnD2HLAoTn8gvr6w/tzj/KM=)
                          4: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: O55xjU8ScpBFwYzJNwcIVzvb0bSRqRVUdtDifmRigkY=)
                          5: z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa (hash: rTNzicdR5UxEu+zSwQpGpaPQg7acnJ6eKVlTT5jJQ8s=)
                          6: zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa (hash: db5+QXNKRG2BQO2CHQMOqU0fUStvszTNPuMXFPPnliI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:57:b0:25:76:2e:bd:db:7f:08:58:e9:74:b3:db:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: Jun 28 21:00:43 2025 GMT
            Not After : Jun 29 21:00:43 2025 GMT
        Subject: CN=565a85b8d444206ac86c3dcede84311d3579a7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:cb:89:f3:2f:0a:e2:58:d5:1c:98:b7:a4:
                    6e:a3:e5:a8:08:ac:87:d4:f4:84:7e:f2:b5:c2:9e:
                    da:2f:9d:73:c4:60:a6:c4:0f:a8:40:c5:d5:0f:ea:
                    de:f1:af:f9:02:b8:2f:66:b8:75:33:4a:77:af:1b:
                    df:8e:c2:e9:c0:60:e2:b7:b7:4d:ed:66:4c:7d:4b:
                    6c:97:55:57:4a:e4:88:42:23:1b:7d:f2:b2:40:49:
                    0d:f5:a4:c9:c5:a4:78:a5:0b:8a:81:9b:1e:d7:33:
                    b5:9f:61:d5:88:a8:18:9e:b6:3d:52:17:d3:35:1a:
                    ac:95:b4:ae:c7:5e:3e:44:7d:c3:37:42:4d:79:a1:
                    8f:c8:c7:17:7a:1e:00:ef:1f:20:d1:4e:20:53:da:
                    c3:d0:74:c1:7f:a7:90:62:54:65:1e:f2:84:86:1a:
                    11:ee:78:83:02:11:56:8e:97:ba:e7:5d:31:81:ab:
                    9e:e4:ab:d3:1d:ab:38:f4:48:83:2a:89:93:5b:52:
                    ef:5d:e5:9d:2f:d6:27:99:9d:25:b3:12:10:9c:20:
                    3a:91:64:dd:5f:72:01:31:93:eb:ae:c6:f1:06:b4:
                    b6:d7:62:bb:cd:68:ed:e6:be:3f:ef:8e:6a:0b:61:
                    4b:84:ab:6c:08:cb:6a:25:4c:4b:e6:39:d5:a9:78:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5A:85:B8:D4:44:20:6A:C8:6C:3D:CE:DE:84:31:1D:35:79:A7:AA
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:b4:d8:fb:26:46:2e:d3:2d:5d:be:81:fe:f9:50:15:df:
         cd:24:f8:64:07:73:5d:35:f8:08:3f:a5:d3:5a:e8:b8:bd:3e:
         79:00:52:43:e8:e3:08:60:03:d0:a7:d0:d9:f3:cc:ca:d1:38:
         6d:b9:e0:62:a1:c4:16:a5:df:3e:1d:4a:1a:3d:49:83:88:c4:
         d2:8d:f9:5b:47:8e:db:22:75:e2:70:14:3b:e7:d5:11:d1:11:
         67:bd:8d:6e:58:5e:6a:5f:a5:2f:4e:a5:f9:9d:52:24:07:30:
         1c:52:01:67:0b:9b:4c:51:df:5e:a4:d3:26:47:15:80:95:9d:
         00:43:69:1f:b6:df:6f:d7:52:20:ff:dd:ca:18:f7:c4:11:1b:
         d6:ad:c3:3d:83:eb:cb:1e:53:8a:d3:d0:9a:ca:80:9b:62:c0:
         94:5e:d4:15:a5:60:16:fc:4d:3c:1b:53:a2:0a:06:70:8f:e0:
         d1:1e:2f:d1:f3:5b:b4:6d:cb:45:61:f2:41:0b:a6:4f:5c:2c:
         f3:10:cc:30:c8:5a:37:e3:e8:77:12:8e:24:16:42:ae:e8:93:
         3b:06:a1:fa:c0:ce:7f:fb:9a:1c:21:5c:a9:bd:94:11:e5:f6:
         f2:ef:fd:b5:1f:c9:63:1f:67:45:7d:59:83:f1:70:02:8d:53:
         b7:b6:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:39 2025 by rpki-client