Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File:                     qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier:          oN58MUs0IbjYNQIJ0Nf8kYebsQyoNm1C10YTHIBwZNM=
Subject key identifier:   CC:92:F7:79:7E:C7:82:33:03:68:7D:F2:FC:E8:14:CD:92:34:48:71
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer:       /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial:       0196D32C69001B745E912E64AC968232F3F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number:          06F1
Signing time:             Thu 15 May 2025 09:00:25 +0000
Manifest this update:     Thu 15 May 2025 09:00:25 +0000
Manifest next update:     Fri 16 May 2025 09:00:25 +0000
Files and hashes:         1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
                          2: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: 4G8pS+cBDNWCzbHqObxb5a3Ja+UX806DCYxjn//DJlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d3:2c:69:00:1b:74:5e:91:2e:64:ac:96:82:32:f3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
        Validity
            Not Before: May 15 09:00:25 2025 GMT
            Not After : May 16 09:00:25 2025 GMT
        Subject: CN=cc92f7797ec7823303687df2fce814cd92344871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:b2:9b:b1:9a:62:52:fc:82:a5:38:b7:a7:
                    97:30:e6:be:58:2e:cf:70:d3:82:8e:dc:e6:24:0e:
                    47:10:bc:9c:c6:d4:85:58:0d:ec:de:74:f0:da:3e:
                    3d:df:56:47:73:66:8d:8b:aa:b0:6e:78:a5:33:d9:
                    24:a3:f6:c3:d6:13:57:ac:cf:d4:03:1f:c7:34:60:
                    e6:e8:ba:54:4e:40:d8:92:c8:cb:4f:ca:cc:c2:9a:
                    40:cd:a5:c8:db:2b:c3:ec:ef:22:6b:5b:b1:5a:bd:
                    bd:57:e3:cc:f5:2a:85:e5:80:3a:6b:1c:e3:9f:28:
                    5f:bd:02:97:ba:62:e3:9a:54:89:fb:12:14:6b:d0:
                    f4:3e:6f:d2:c0:a3:d9:ff:b3:19:55:f6:41:f7:de:
                    c4:80:ee:1b:3b:e7:79:6d:cf:7f:2c:07:e6:be:0d:
                    7b:e4:4c:e2:3c:77:a7:1f:43:3b:69:9a:5b:43:70:
                    bb:4d:7a:7f:f5:24:24:2c:bb:f1:96:00:8c:f6:8a:
                    57:fb:e9:21:e9:dc:fd:f8:28:63:b0:35:25:8d:1e:
                    f3:17:21:7a:cb:97:89:fa:ba:a9:34:43:aa:a9:10:
                    31:6a:08:78:9a:98:1c:75:d6:09:88:0a:2e:3a:49:
                    5d:48:8f:56:dc:d2:05:22:37:cc:5f:bd:e3:02:d5:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:92:F7:79:7E:C7:82:33:03:68:7D:F2:FC:E8:14:CD:92:34:48:71
            X509v3 Authority Key Identifier:
                keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:cc:9d:45:36:69:79:58:31:a8:35:bc:14:7a:5e:43:e7:
         e7:eb:9b:9f:f4:4b:d8:99:ac:5c:12:fd:37:95:da:16:d4:c6:
         e1:3e:26:f2:81:02:e4:3e:71:e9:a4:83:f2:e6:9e:4d:34:f7:
         79:dc:75:8b:5d:a2:6f:64:87:7d:87:1d:66:0c:18:c0:d0:fe:
         58:d8:35:f9:1f:38:11:3a:c6:d3:4a:ab:d8:f5:cc:0d:50:a5:
         31:c2:cb:d9:45:84:30:0d:26:e7:ed:cf:92:e2:8d:c0:8f:0b:
         56:7f:d2:15:e0:c3:d7:47:63:b5:bf:8b:96:92:d7:d3:4c:e0:
         7d:6b:5d:e7:cd:44:9a:ed:9a:2c:99:e6:ec:b7:88:d1:81:3d:
         6e:9c:b6:6d:e4:0f:b6:d4:f4:77:93:2b:a1:f6:a1:c6:ae:42:
         6e:b8:63:40:1e:29:36:b0:1c:f5:4c:db:c8:37:21:b7:02:a1:
         55:d7:b0:01:ca:ba:39:1e:aa:03:b8:b4:fc:97:6b:cf:de:73:
         28:c8:c9:5c:9b:f8:45:8c:77:29:3e:35:15:a7:bc:49:d6:fb:
         90:15:4a:a6:c7:1b:6c:c8:9d:f3:bb:76:89:6e:08:0d:3d:72:
         58:52:ca:46:04:c0:b7:98:32:db:c4:59:21:bf:d7:6c:c8:ae:
         81:5e:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:33:37 2025 by rpki-client