Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File:                     qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier:          DvRjvrzUA4GVyOwHHmLO5li0vf45jrMKUHNcmrU1k3E=
Subject key identifier:   05:6C:2E:66:65:57:56:FD:A2:42:D7:62:DB:A0:E7:15:2A:DC:4A:04
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer:       /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial:       019849D36DB76F76295D77F7EADDBC317EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number:          1594
Signing time:             Sun 27 Jul 2025 03:00:49 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:49 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:49 +0000
Files and hashes:         1: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: rRq73Thb0TJNo1k4MHi9/IdS0J9nh44Hz/v8MIUT9OI=)
                          2: wn31uqf50k5LZthlgOfugKfLtQQ.roa (hash: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:6d:b7:6f:76:29:5d:77:f7:ea:dd:bc:31:7e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
        Validity
            Not Before: Jul 27 03:00:49 2025 GMT
            Not After : Jul 28 03:00:49 2025 GMT
        Subject: CN=056c2e66655756fda242d762dba0e7152adc4a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:79:a1:24:68:11:3d:1a:44:3b:df:65:76:
                    7c:54:43:47:a9:e0:18:e0:d4:f7:5a:bb:60:f3:0c:
                    d7:31:65:6a:43:6e:85:74:e5:21:f1:54:f4:3b:5b:
                    4e:c3:79:c1:71:12:ba:7a:09:27:4b:00:c8:61:7c:
                    54:8b:19:ff:09:d8:9d:59:c2:d7:2e:b1:30:2b:a1:
                    1a:7b:fa:95:fb:5d:50:c4:e3:b9:04:7d:3e:4e:86:
                    89:fb:fb:ba:a8:2c:5a:b2:e2:a8:2b:4a:4d:31:84:
                    f3:43:9b:47:9b:b4:4d:7b:11:32:12:ad:4e:07:35:
                    f1:d7:9c:09:f8:79:ed:6d:08:7b:d7:c7:18:2a:12:
                    d2:20:84:bd:d7:96:7e:bc:dc:d9:6a:fd:65:77:87:
                    b8:af:bd:b0:53:37:d9:fb:22:a2:bf:1a:d1:d5:35:
                    2e:93:4a:a0:91:95:62:86:df:c4:b5:fc:7b:66:6d:
                    b8:1b:30:8f:ea:b7:cb:e6:a7:21:ec:02:f8:80:54:
                    29:59:80:fe:07:77:95:b2:e6:bf:77:d7:ef:26:7c:
                    50:a4:1a:98:f2:9f:a5:b3:97:24:57:c9:21:d4:4e:
                    55:c8:84:f4:49:79:09:b9:a1:ad:58:cd:a1:a4:37:
                    ce:66:15:14:1c:29:43:a7:d0:b3:98:f9:d3:3d:f9:
                    e9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6C:2E:66:65:57:56:FD:A2:42:D7:62:DB:A0:E7:15:2A:DC:4A:04
            X509v3 Authority Key Identifier:
                keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:be:e3:84:5a:9f:67:1f:44:28:97:e8:ca:c8:bc:4d:2c:9b:
         fd:10:90:5b:20:41:9d:56:67:da:36:fe:c5:50:f9:4f:dd:6a:
         2e:9b:43:e4:df:99:a8:c6:1a:dc:4d:be:fb:d1:8e:8c:cb:65:
         bf:6e:a6:bd:e8:ad:a6:20:e0:b6:52:3c:f2:a2:f5:4d:34:6f:
         99:0d:10:91:41:db:76:22:f7:32:a4:8a:bf:f0:ef:10:4b:7a:
         36:fe:0a:07:16:b1:68:3a:ec:03:94:63:b7:e0:c5:6d:ef:d3:
         ba:48:7e:25:8d:88:8b:cc:62:ba:b5:90:c7:ca:31:2d:3e:9b:
         37:93:7f:8b:09:b5:0e:20:a7:9c:97:14:b8:59:d8:37:64:8a:
         71:f0:c0:75:a4:a7:3d:de:2c:ab:e6:2e:96:33:00:ba:08:22:
         68:a5:33:49:9e:a0:51:7c:62:95:f3:ef:44:a5:75:c1:13:00:
         e9:16:96:ba:02:3e:52:4f:b7:2f:3a:e7:f0:79:ad:5b:51:57:
         9e:26:a0:50:23:2e:61:71:4a:6d:19:b7:a2:92:ba:3c:b6:f6:
         02:64:8e:f7:55:90:a3:60:65:31:26:c9:ac:d8:07:fd:0c:cc:
         27:d9:69:89:be:41:34:0f:fe:8f:7b:ad:11:d3:56:f7:c3:ed:
         f8:ce:60:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0223b3YpXXf36t28MX7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZGZjODk4MTIzNDA1MDdhMmEyZTFlNzRkMTE4MjRkZWY4
MTNmMzkwHhcNMjUwNzI3MDMwMDQ5WhcNMjUwNzI4MDMwMDQ5WjAzMTEwLwYDVQQD
EygwNTZjMmU2NjY1NTc1NmZkYTI0MmQ3NjJkYmEwZTcxNTJhZGM0YTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZV5oSRoET0aRDvfZXZ8VENHqeAY
4NT3Wrtg8wzXMWVqQ26FdOUh8VT0O1tOw3nBcRK6egknSwDIYXxUixn/CdidWcLX
LrEwK6Eae/qV+11QxOO5BH0+ToaJ+/u6qCxasuKoK0pNMYTzQ5tHm7RNexEyEq1O
BzXx15wJ+HntbQh718cYKhLSIIS915Z+vNzZav1ld4e4r72wUzfZ+yKivxrR1TUu
k0qgkZViht/Etfx7Zm24GzCP6rfL5qch7AL4gFQpWYD+B3eVsua/d9fvJnxQpBqY
8p+ls5ckV8kh1E5VyIT0SXkJuaGtWM2hpDfOZhUUHClDp9CzmPnTPfnpQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVsLmZlV1b9okLXYtug5xUq3EoEMB8GA1UdIwQY
MBaAFKnfyJgSNAUHoqLh500Rgk3vgT85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGIt
NzA0NDAzZmZmODJlLzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGItNzA0NDAzZmZmODJl
LzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc77jhFqf
Zx9EKJfoysi8TSyb/RCQWyBBnVZn2jb+xVD5T91qLptD5N+ZqMYa3E2++9GOjMtl
v26mveitpiDgtlI88qL1TTRvmQ0QkUHbdiL3MqSKv/DvEEt6Nv4KBxaxaDrsA5Rj
t+DFbe/Tukh+JY2Ii8xiurWQx8oxLT6bN5N/iwm1DiCnnJcUuFnYN2SKcfDAdaSn
Pd4sq+YuljMAuggiaKUzSZ6gUXxilfPvRKV1wRMA6RaWugI+Uk+3Lzrn8HmtW1FX
niagUCMuYXFKbRm3opK6PLb2AmSO91WQo2BlMSbJrNgH/QzMJ9lpib5BNA/+j3ut
EdNW98Pt+M5ggw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:35:55 2025 by rpki-client