Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File:                     QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier:          WHgVcGsznDreDpkT+CoYczMAnHokpvQ4u2p/wDG6MuA=
Subject key identifier:   50:77:AC:FB:59:F0:4E:D7:A6:84:71:40:1E:B8:A7:7F:ED:DD:F3:63
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       0197B632A11D7239827EB3765B6E93B35E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 11:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:00 +0000
Files and hashes:         1: 0regBIVfBXFVABfEELXSK9SQr9w.roa (hash: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=)
                          2: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (hash: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=)
                          3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: CGkN4cT7hSV4ok+66zWuSR8z8dbOWsHxIPaB/awhqb0=)
                          4: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (hash: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=)
                          5: uECfOQT7vP0-Onmmtd55wsXs37g.roa (hash: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=)
                          6: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (hash: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:a1:1d:72:39:82:7e:b3:76:5b:6e:93:b3:5e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: Jun 28 11:01:00 2025 GMT
            Not After : Jun 29 11:01:00 2025 GMT
        Subject: CN=5077acfb59f04ed7a68471401eb8a77fedddf363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:36:46:70:3a:72:40:8e:fa:d8:6e:b8:27:d2:
                    b5:48:85:07:42:a7:d1:83:64:02:74:fe:e6:d0:fb:
                    65:d0:8e:5b:17:33:57:fe:9b:f0:11:ac:eb:92:b3:
                    1f:3b:ab:9e:6d:8e:e6:5c:71:54:95:84:48:5d:39:
                    7f:5c:f7:7b:46:bb:f4:1b:2a:9b:89:76:02:aa:53:
                    30:92:57:66:38:fc:2a:9a:23:e4:4d:ee:9a:50:ae:
                    62:9b:7b:59:04:01:3a:5b:c6:34:96:05:b1:e7:6d:
                    ca:57:e2:2f:b3:ac:49:d1:de:b9:85:b6:39:8b:a2:
                    7e:7c:9f:b0:4c:57:9e:e9:66:ef:24:58:00:27:a9:
                    b6:16:e3:d0:0d:28:63:d4:c6:58:60:fa:61:c7:87:
                    e9:04:28:fe:2e:c3:6f:28:c1:e1:a5:0c:eb:f0:c0:
                    09:55:93:b8:26:fa:cb:5f:3b:c3:2d:58:f4:9f:bf:
                    31:ca:9c:2a:44:cb:09:8f:9b:c3:85:6e:47:d7:c1:
                    99:98:58:d5:2a:b8:17:5f:35:4b:59:a8:ba:c8:03:
                    cf:3e:bd:bb:c0:a8:d3:12:b3:bc:0f:bc:ed:c0:9a:
                    4c:30:fc:49:72:95:f1:46:4b:f1:20:43:fd:4d:a4:
                    a1:b6:8e:66:82:68:8a:9c:22:d3:f1:91:92:5a:8f:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:77:AC:FB:59:F0:4E:D7:A6:84:71:40:1E:B8:A7:7F:ED:DD:F3:63
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6a:20:ec:89:b2:df:0e:4f:e4:3f:44:69:af:d2:1e:f6:52:
         75:06:5f:00:19:6c:35:61:43:70:5a:f9:fd:96:0b:1a:c3:6c:
         5b:50:93:7c:d6:da:ca:51:eb:13:a0:d0:62:5f:16:45:89:e9:
         b9:ce:83:dd:1f:d2:7e:59:25:64:67:0d:63:18:2f:82:c8:d7:
         bb:85:c5:39:f8:67:22:76:ad:b0:28:25:6b:44:0b:f9:2e:1d:
         51:cd:ff:86:59:66:2d:d3:36:62:b7:5c:01:70:28:09:a7:c5:
         b2:cd:55:af:fd:09:f1:5a:f7:26:2a:aa:1d:0f:7f:05:f5:1b:
         1c:ba:05:51:0f:fb:a1:1b:64:df:83:fc:89:d6:07:61:5f:e8:
         d9:d2:f7:f4:98:eb:45:70:85:8a:a5:3f:9f:14:e3:59:76:f7:
         c9:96:60:d9:65:7d:5a:6f:3f:78:e9:93:52:af:72:81:bb:29:
         d7:85:76:76:eb:4d:86:05:bf:2f:5c:af:01:1c:4c:28:53:2a:
         dd:04:9f:b4:d5:e0:d1:d3:8c:61:d8:92:fe:45:ef:c1:3a:bf:
         51:e0:0e:3d:22:31:86:47:3c:5c:2e:c4:84:ff:fe:eb:0c:cc:
         ef:23:7e:d4:ba:ab:88:ed:0c:bb:96:31:64:41:93:42:96:16:
         cc:9f:8a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:47 2025 by rpki-client