Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          ht1mMaEXSmCWsvKLImbjvHUamz5Wy967DLE76Eg/mMg=
Subject key identifier:   8D:61:39:89:FD:8A:59:80:11:30:0B:2D:45:BB:44:02:86:7D:14:5F
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       0197B6A209F3BF192EFAF482EFE0CA2F0801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          01B0
Signing time:             Sat 28 Jun 2025 13:02:42 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:42 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:42 +0000
Files and hashes:         1: 9GDBOU9_J7es0wo35klUOn0T51U.roa (hash: cMQbqhsLcUBPEgQ9vc2CK4bGp5osIlpssNdk9BGiNMw=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: FjSMR8TPGQzELmfLo0p7YEa6vor9yEuU+ovgC8oPWXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:09:f3:bf:19:2e:fa:f4:82:ef:e0:ca:2f:08:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Jun 28 13:02:42 2025 GMT
            Not After : Jun 29 13:02:42 2025 GMT
        Subject: CN=8d613989fd8a598011300b2d45bb4402867d145f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:35:8f:93:78:c6:78:69:21:cb:db:28:cf:
                    30:7f:98:55:62:bc:f0:14:24:4b:68:97:7f:bf:18:
                    f8:9d:b0:9d:55:39:4c:8f:ec:a1:3b:94:11:66:e7:
                    d4:17:cc:2d:a2:92:87:cc:42:9b:3e:5e:62:9f:74:
                    74:d4:d0:76:15:4a:a3:a5:40:2c:70:75:76:ad:e9:
                    7a:55:a4:d2:e0:b6:fb:5e:79:37:5d:ca:a4:a7:fe:
                    b3:c0:99:89:de:8c:06:8c:f5:f7:f7:ee:fe:03:a5:
                    db:01:52:b9:e9:55:01:3b:4c:ca:63:fc:0b:79:82:
                    d9:9e:b7:ed:b4:2d:8a:71:e2:9f:e4:0d:ce:cc:3b:
                    28:83:b3:f5:3f:fe:d4:00:81:ef:60:4b:03:65:63:
                    88:ba:99:8b:b8:56:6a:09:79:fa:bc:75:13:5a:d9:
                    58:a3:b5:8b:10:e4:7b:b5:5f:90:93:7b:97:8d:30:
                    50:6f:3f:77:e7:44:15:5c:f1:9f:12:da:96:98:9c:
                    8e:ac:ec:dd:8c:d4:da:f6:6b:13:74:d8:ae:86:b4:
                    56:06:51:19:d3:8a:6d:bd:37:4d:60:40:29:d2:9b:
                    e5:50:1a:09:0b:ce:ae:8c:47:e7:74:28:26:9c:5a:
                    fa:d3:68:e0:ad:1c:ce:02:f6:6e:88:fb:62:58:1a:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:61:39:89:FD:8A:59:80:11:30:0B:2D:45:BB:44:02:86:7D:14:5F
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:df:f0:c2:2d:76:21:07:64:fd:b3:fa:53:43:ef:ef:33:30:
         a6:c8:7c:3a:85:24:4b:e1:1a:51:48:c1:0f:d1:74:5a:9d:02:
         5d:ce:27:9a:cf:fb:81:8a:66:a5:07:e7:a6:ee:60:5e:55:f2:
         80:b9:4b:66:60:60:44:88:e6:3f:4b:89:00:2a:5a:77:d3:3f:
         f4:11:8c:03:b7:a2:de:b1:b6:13:cf:f0:4d:21:a2:0c:43:bf:
         0c:2d:9c:70:c6:25:2d:17:5c:70:ab:d3:88:ef:03:6b:57:5f:
         c4:a9:fa:6e:10:71:cb:f6:2c:38:9a:71:6e:01:ea:c8:fd:04:
         f2:66:33:52:f6:bb:43:02:df:30:67:51:04:e2:7e:f6:86:fc:
         eb:fd:39:ab:42:aa:90:77:70:08:a1:79:d5:b1:f1:67:0c:43:
         40:58:d7:12:51:2b:f0:64:3f:f8:79:88:ba:76:dc:3e:1e:76:
         76:db:86:68:a6:33:1a:15:61:99:b1:50:b6:7f:b8:d9:d7:85:
         08:fb:f5:8d:aa:26:03:30:42:30:be:2e:14:a6:a6:fb:50:75:
         34:15:62:aa:2a:da:1d:8c:ae:1e:ab:ca:63:74:26:5c:e8:5d:
         e1:e0:f1:de:66:61:26:15:34:43:ba:49:bd:25:5f:f9:7f:3d:
         1c:ce:9f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:09 2025 by rpki-client