Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File:                     q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier:          +qsH/Z5518QCTf0wY3X61UTJxpg3KnWlMhFcZQJ+wcI=
Subject key identifier:   9C:3A:7A:5A:2D:49:EF:4C:24:E3:50:6F:46:0B:F9:FC:AF:5C:2C:EB
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer:       /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial:       0197B82126913E5ABAA9B3589A4B2D72C160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 20:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:09 +0000
Files and hashes:         1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=)
                          2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=)
                          3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=)
                          4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: 4+MOVJKsb3sA5no9jxyGdu6brWYOB7YK551KIsbAfGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:26:91:3e:5a:ba:a9:b3:58:9a:4b:2d:72:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
        Validity
            Not Before: Jun 28 20:01:09 2025 GMT
            Not After : Jun 29 20:01:09 2025 GMT
        Subject: CN=9c3a7a5a2d49ef4c24e3506f460bf9fcaf5c2ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:6a:56:15:d7:f2:c2:e7:49:ac:6c:fe:13:
                    d5:31:05:c1:af:03:c3:b5:6b:29:f8:a1:29:9f:d2:
                    95:b2:6a:c8:52:9b:d1:f4:40:f6:1b:27:7d:b1:07:
                    99:8e:45:b7:c4:e5:dd:9f:85:a9:3c:9c:20:09:e5:
                    2e:54:f0:07:f0:24:fb:f7:c9:3b:94:18:72:07:dc:
                    7e:6f:73:c9:8b:c6:2a:64:e7:65:13:bc:d8:e4:af:
                    33:82:63:b0:12:62:1e:d7:cc:7f:61:a8:80:a0:e5:
                    b2:1a:d0:55:db:89:86:63:2e:87:67:cb:a1:44:6b:
                    f9:04:94:91:cc:35:80:2a:c2:a5:d5:dd:c1:4f:ab:
                    d9:b0:be:d8:f1:52:f3:b3:ca:d9:54:20:f1:6c:e7:
                    3f:1f:86:eb:5b:14:17:43:8f:3a:9b:c7:c9:2f:6b:
                    27:f9:05:3d:51:4e:98:3b:40:62:ef:55:54:61:82:
                    70:45:24:d2:84:7a:02:e0:72:12:54:c3:81:85:66:
                    df:0d:31:1a:94:fb:d7:95:b7:c7:3a:66:ca:02:7f:
                    fc:a1:10:55:f3:51:f9:7a:f0:be:73:a3:28:bc:22:
                    48:a5:cb:f1:04:f8:29:c5:ed:d8:53:db:e6:07:c6:
                    0e:77:fa:e3:36:bc:8c:88:aa:51:02:58:97:fb:c8:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3A:7A:5A:2D:49:EF:4C:24:E3:50:6F:46:0B:F9:FC:AF:5C:2C:EB
            X509v3 Authority Key Identifier:
                keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:94:85:64:c7:54:ae:95:73:70:5d:a5:80:c2:02:90:22:
         2c:fb:07:15:70:6c:57:bb:e3:31:7c:24:ea:7f:28:1d:c8:ab:
         81:cd:31:74:a7:62:d3:af:3d:ae:2c:ca:9c:dc:bb:8d:02:9c:
         b2:21:77:f3:9c:2b:41:07:1e:2b:6e:a6:18:c5:73:f1:9c:19:
         58:77:85:8d:73:c0:81:78:e7:30:33:87:51:99:63:58:6f:71:
         1a:11:2d:63:4b:55:e4:8c:a3:8e:30:a2:2f:40:47:1e:f7:89:
         54:c9:24:3f:3b:ad:37:d9:df:02:e2:bd:83:9c:d1:d4:99:40:
         16:c5:19:9a:32:f5:2d:52:d5:0f:4d:a5:c9:15:59:1e:53:e6:
         84:f4:d4:36:34:cf:80:d0:04:83:0c:36:6e:56:03:28:7d:84:
         61:94:57:ea:eb:16:fa:05:86:9d:0d:5d:1f:44:d8:f5:5c:95:
         34:35:cc:0f:1d:39:db:5c:fc:44:96:ca:bd:26:07:6b:7c:e3:
         16:e0:ff:6e:5a:b3:25:a8:14:bf:50:ec:ee:d6:d3:ba:c6:4f:
         3f:46:ac:68:55:9f:4b:9c:d2:c5:79:1b:14:91:38:2f:fa:d5:
         e4:99:12:bc:98:1b:5a:c7:5b:9f:0b:92:68:39:2b:82:e4:7f:
         24:13:54:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:37 2025 by rpki-client