Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File:                     qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier:          qlWIS3VAplYiP0ldqZuhkPs2xAvxCqcrtauKLD0Xi7k=
Subject key identifier:   55:24:38:32:84:00:60:B8:AA:BC:47:16:87:87:02:6D:60:C7:72:8C
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer:       /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial:       0197B7B341F3FCCB9661C5D3AD3D454FC6EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number:          1108
Signing time:             Sat 28 Jun 2025 18:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:07 +0000
Files and hashes:         1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: jbj83umre1pQXFOKg0zlN8AqOnCljcpqYVVO1BmIEHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:41:f3:fc:cb:96:61:c5:d3:ad:3d:45:4f:c6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
        Validity
            Not Before: Jun 28 18:01:07 2025 GMT
            Not After : Jun 29 18:01:07 2025 GMT
        Subject: CN=55243832840060b8aabc47168787026d60c7728c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:ca:30:19:8d:6c:a5:7c:28:b3:32:b3:dc:
                    78:da:65:c4:a1:f0:6c:74:9a:d5:c2:e8:73:85:e9:
                    c7:48:a6:19:58:43:86:e3:4c:e1:1f:7b:48:91:86:
                    60:29:0a:09:02:e2:73:0e:28:cc:11:62:42:56:01:
                    b2:54:6b:e4:48:ae:63:d7:3d:bd:b9:b5:a8:cb:fc:
                    30:19:72:80:cb:cd:0a:49:11:bc:0f:7c:1a:bd:7e:
                    80:38:29:86:53:23:52:c8:7b:48:2f:13:dd:4d:d6:
                    1f:7e:eb:68:48:03:1a:17:85:07:c4:f6:e3:ee:e3:
                    4d:74:ed:07:3a:6d:e0:4c:37:9f:af:23:1a:2f:2a:
                    bb:ce:de:0b:e5:c3:e9:b5:ba:12:f4:b1:4c:32:07:
                    ae:cb:ae:7b:f1:b1:27:92:93:aa:43:a1:a9:d6:95:
                    a8:1e:b7:f0:d6:04:0f:69:bc:4b:65:41:a9:fe:cc:
                    e9:db:7e:bb:fb:82:69:78:2e:71:c3:51:66:6f:9e:
                    85:8c:c5:ef:26:c5:4c:74:a0:42:21:d1:ce:bc:f0:
                    d5:4a:49:f7:b1:39:7a:e1:a5:76:13:ad:ed:9c:0e:
                    b3:4c:4e:76:a8:ca:26:ab:fc:0f:31:f8:fa:fd:cb:
                    fa:7c:85:c7:29:30:04:e5:a0:b3:57:a3:b7:f8:79:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:24:38:32:84:00:60:B8:AA:BC:47:16:87:87:02:6D:60:C7:72:8C
            X509v3 Authority Key Identifier:
                keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:0f:c6:10:44:8b:0d:3e:bd:b0:38:30:01:d3:b4:4a:da:
         43:49:ab:27:fb:34:41:dc:44:90:8d:76:61:b0:6d:49:15:4e:
         86:d6:bb:75:1e:75:5a:60:85:b0:99:e9:4c:da:3b:54:25:46:
         c8:54:3d:21:61:d0:e0:4d:04:ff:9d:ad:9d:01:e0:78:dd:31:
         12:0e:1a:0e:4d:be:12:d3:98:aa:91:35:de:95:94:83:b2:d1:
         e4:47:cf:08:cf:16:d1:31:36:ea:8f:61:5f:11:69:1e:71:eb:
         d8:4a:f7:90:78:79:4e:69:88:e1:80:14:f4:40:db:90:3a:c9:
         d6:03:f2:69:88:1a:ff:b4:35:32:0f:ca:4e:0f:dd:1b:b0:1c:
         95:b1:a3:c5:4b:32:e3:5d:b9:d3:3a:23:69:a7:44:33:32:00:
         63:33:58:5b:fe:04:2b:a5:29:d5:0e:7c:d5:9b:38:24:1e:bb:
         f1:c8:cc:4c:e8:e6:27:a4:cb:d7:e5:c3:06:cd:5c:8f:e8:f9:
         79:93:9c:8e:3f:73:0c:aa:a7:7a:90:64:d7:8c:7c:4d:a2:4a:
         27:b9:08:c0:03:90:28:b4:37:c5:f3:6c:af:82:a4:c7:ea:79:
         b6:f0:57:48:2c:f9:14:72:a8:a0:c3:36:e9:49:4e:d1:a9:17:
         54:d3:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:05 2025 by rpki-client