Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          qr3Tz8DC8DxyfckmLX/umAwQ+iR3cV+CzBk058YHMSY=
Subject key identifier:   77:0E:CD:1D:8C:E4:3B:0B:3A:CE:FB:E8:72:54:EF:01:2A:A3:D1:63
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       0196A6C2069AF24D99A92C75F9E1218E4326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          08F7
Signing time:             Tue 06 May 2025 18:00:55 +0000
Manifest this update:     Tue 06 May 2025 18:00:55 +0000
Manifest next update:     Wed 07 May 2025 18:00:55 +0000
Files and hashes:         1: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
                          2: Mso8HCZYvubZwvzJB-sovDxI8mw.roa (hash: 5QSILlhvVsZeQGG8ZFj/oRE0YF6aKeUC8j5XzlKYPOQ=)
                          3: Wi63x1CJXlZGfNJJvYSEjYX3SS4.roa (hash: tSrW8yYQj/zhxzh9dR2YbQPqRj4MiI4gJVwxhewvr88=)
                          4: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
                          5: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
                          6: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: 91up/rSFiTJvRIyAjiEc7S6IqQqRaffDz8rj+WWXkSk=)
                          8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
                          9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c2:06:9a:f2:4d:99:a9:2c:75:f9:e1:21:8e:43:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: May  6 18:00:55 2025 GMT
            Not After : May  7 18:00:55 2025 GMT
        Subject: CN=770ecd1d8ce43b0b3acefbe87254ef012aa3d163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:99:12:ae:fe:33:68:c0:1a:91:03:08:2d:
                    97:7a:29:b3:4c:51:4b:64:75:90:81:f8:75:6d:de:
                    ce:69:b8:96:1a:47:8e:25:9e:a5:f7:7e:13:6a:7f:
                    56:7b:aa:dc:70:0e:be:b0:13:90:1a:34:d4:d0:99:
                    dc:9e:9e:e4:f0:96:db:2f:55:50:a6:10:7a:41:f5:
                    a0:98:cd:d2:c0:a4:3b:9e:82:ab:60:0d:08:a0:f4:
                    9c:03:c3:cb:ef:70:67:67:e9:0a:69:63:e8:19:65:
                    cb:a7:28:ce:3e:94:2e:65:51:fd:63:33:64:0d:33:
                    6b:32:9b:a3:23:55:54:f9:ec:ee:13:88:81:61:82:
                    5e:f5:02:49:83:fc:89:9e:7c:f2:b3:c1:fa:8d:33:
                    9e:f8:47:e3:c0:e0:c4:39:d1:19:49:8a:06:45:02:
                    a0:08:57:5e:2b:61:70:de:e6:c9:35:bc:f8:16:83:
                    22:c6:38:30:fb:0f:70:d9:07:6e:cd:6a:55:18:91:
                    53:00:83:ea:8e:e6:32:10:0f:5a:6d:86:f3:da:51:
                    18:4c:de:ed:32:e5:68:50:09:1b:3f:c7:22:b8:4a:
                    b7:e0:46:32:ea:c4:1a:50:cf:b9:a6:32:a7:cd:58:
                    9d:a9:b0:45:41:4a:6d:74:74:6e:96:85:8b:bf:38:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0E:CD:1D:8C:E4:3B:0B:3A:CE:FB:E8:72:54:EF:01:2A:A3:D1:63
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ae:25:7c:17:85:fd:18:29:e3:25:e6:45:8c:47:9e:88:9d:
         71:1e:86:32:9c:e7:0c:94:fe:5e:4f:a0:54:76:3d:ff:36:57:
         fd:76:93:90:cd:8d:d2:98:8b:da:9a:d8:39:0c:ee:71:b5:03:
         c0:b3:82:db:b6:87:78:bc:68:6a:80:79:f1:56:18:03:7f:af:
         d6:90:53:ac:32:71:d2:3a:77:aa:87:37:ad:26:9e:67:a3:c6:
         16:91:b2:64:19:fc:a4:5e:9a:66:9f:80:89:36:ce:27:cc:e6:
         16:c2:23:04:26:cd:a0:15:e4:ec:f0:db:f0:7e:52:a0:ea:2a:
         e8:d4:6d:c2:80:1f:ff:94:be:03:f4:41:d2:c0:07:bd:41:8d:
         d9:b8:40:33:3d:08:2a:32:c8:c0:69:72:c5:e9:2c:a1:5a:76:
         07:27:8e:b8:cc:c2:1b:78:21:9b:6c:b6:6d:0a:5d:30:fb:4b:
         cc:1e:16:77:70:ed:0d:16:7c:ce:a5:a1:90:1d:c3:45:66:c5:
         07:07:89:30:53:29:fc:07:14:65:98:d4:5d:20:2f:f9:f4:74:
         82:84:42:8e:ae:39:b0:ca:e1:f5:c2:90:9c:31:40:ea:fa:78:
         40:c9:ec:a5:f1:cd:f5:07:b1:e3:41:a0:79:22:cf:3a:24:13:
         ab:da:ea:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:53:44 2025 by rpki-client