Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File:                     pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier:          djZo91NKSCuAUOi82GZGK7V/HrYUfxP9ToqkJR60wtE=
Subject key identifier:   65:31:FD:5B:EF:26:21:D8:F4:3A:0C:FD:4E:DF:E7:CD:FD:06:63:C7
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer:       /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial:       0197B7B3458DED4F746D7049208EAF06A8BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number:          15B9
Signing time:             Sat 28 Jun 2025 18:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:08 +0000
Files and hashes:         1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
                          2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
                          3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
                          4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: k7GBEFc8Np7VsgfmIvxFFvkJpcuKbIzuuYD1E1g/948=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:45:8d:ed:4f:74:6d:70:49:20:8e:af:06:a8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
        Validity
            Not Before: Jun 28 18:01:08 2025 GMT
            Not After : Jun 29 18:01:08 2025 GMT
        Subject: CN=6531fd5bef2621d8f43a0cfd4edfe7cdfd0663c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:42:5e:46:c2:59:a7:0f:4e:30:08:12:66:
                    8a:b3:63:98:8c:89:b6:43:69:cb:92:fc:37:89:75:
                    a4:d6:da:6c:61:ba:35:e1:8c:df:c0:ca:13:1a:ff:
                    d5:31:92:ab:75:97:7f:6e:18:d4:03:11:de:d7:e5:
                    66:e5:9b:1e:78:04:81:d9:bc:e5:38:7c:df:31:3c:
                    48:67:b7:a1:35:f9:5d:3d:31:4c:d4:6d:a1:6b:df:
                    c4:91:64:85:70:ea:73:87:bb:71:ce:17:0c:2b:83:
                    93:7a:8c:79:a4:84:3c:11:83:7a:7c:a6:cf:e1:3a:
                    01:a4:a4:b2:fa:48:dd:b0:3c:9a:60:1e:6c:57:4c:
                    62:7b:23:09:28:33:34:b6:0e:02:d1:63:3c:10:6b:
                    09:67:73:92:8d:09:62:1c:2c:7c:53:00:75:f3:f5:
                    ce:1c:57:5b:a5:8b:8f:12:18:d8:8a:68:4a:74:75:
                    a3:5d:6b:4f:7a:30:e2:af:2f:ec:13:54:ec:06:b3:
                    73:97:03:f3:84:fe:d1:0f:c6:04:fa:73:a2:73:da:
                    e6:0d:cc:f6:8f:bd:5c:78:05:6e:78:b5:9f:1e:f1:
                    d9:9c:3f:17:85:96:f2:db:5d:1b:83:c2:5d:25:66:
                    aa:88:0a:52:bf:70:af:24:c9:a5:c8:76:29:b8:55:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:31:FD:5B:EF:26:21:D8:F4:3A:0C:FD:4E:DF:E7:CD:FD:06:63:C7
            X509v3 Authority Key Identifier:
                keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:27:ea:d6:92:5a:b9:07:1a:a6:71:22:cb:a6:89:9e:8d:f8:
         aa:48:06:ae:98:11:84:d3:c3:69:27:9c:1c:d6:ac:35:1c:6b:
         35:4b:d7:c7:33:02:de:fd:e7:4b:bc:75:b2:79:4e:19:6a:f3:
         4a:41:ea:d2:1f:97:5d:b4:46:84:10:25:c6:5f:c4:3a:29:69:
         47:be:b1:f7:6f:c3:78:17:e0:e4:42:d5:ab:f0:7f:85:20:48:
         54:70:ce:98:2f:93:ca:64:eb:41:a6:13:ae:9f:6f:94:06:6e:
         ca:fa:4e:9d:4c:83:e3:ad:90:b4:1e:77:ee:b2:ae:10:24:27:
         59:5b:e8:be:bd:90:8f:11:3a:e8:1f:ab:f0:d6:86:28:4a:40:
         9a:4a:94:1d:65:ee:8a:1a:d8:a4:af:cf:7b:49:71:63:3b:9c:
         4d:99:24:d3:bc:ab:44:03:59:b1:35:80:b7:e3:74:5f:70:72:
         b1:bb:ac:87:3b:1b:08:5b:5c:72:bc:3c:2a:c9:f4:b3:f3:bd:
         76:74:ae:5e:11:8c:01:1a:0d:e8:53:c5:ef:69:b3:54:dd:92:
         fd:c3:18:36:54:88:54:86:cf:b0:0e:58:c4:fe:c5:a3:75:4f:
         ef:57:f9:ba:83:6b:38:7e:dd:c6:da:a0:9a:0d:e2:f6:ba:ed:
         8b:80:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:38 2025 by rpki-client