Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File:                     QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier:          5BCajwThq+rBT6YgikKUQlhWhMi7QeJ/Su9IKHFFavU=
Subject key identifier:   DE:24:D7:57:04:D3:2C:91:59:EF:38:10:B6:2B:F7:C4:0A:17:C6:83
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer:       /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial:       0198439B49E7EF6F9096D6412018D7FA6685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number:          0B93
Signing time:             Fri 25 Jul 2025 22:01:47 +0000
Manifest this update:     Fri 25 Jul 2025 22:01:47 +0000
Manifest next update:     Sat 26 Jul 2025 22:01:47 +0000
Files and hashes:         1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: OTpelFEi+Z0xj2yDmB4Xhi+Lfz4QM5LujSo7PEGQve0=)
                          2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:9b:49:e7:ef:6f:90:96:d6:41:20:18:d7:fa:66:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
        Validity
            Not Before: Jul 25 22:01:47 2025 GMT
            Not After : Jul 26 22:01:47 2025 GMT
        Subject: CN=de24d75704d32c9159ef3810b62bf7c40a17c683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b1:0b:98:b9:dc:88:32:0a:3c:26:0a:16:89:
                    60:48:53:92:68:9e:b5:9c:68:f5:a8:4a:2d:41:e2:
                    61:75:92:3d:f0:81:b1:22:d2:3a:d9:67:53:57:75:
                    40:06:fc:07:e3:09:42:1c:63:f5:b1:32:71:2c:1b:
                    bd:7a:fb:03:0b:73:e8:75:e0:87:03:82:76:77:20:
                    60:51:b8:3c:2e:eb:b5:d5:dd:d8:28:b4:0a:a1:2f:
                    7a:49:83:7c:83:87:0b:7a:ad:a2:fa:1f:7d:e6:f0:
                    6d:1e:c9:ee:59:e2:f5:bd:ae:cd:c0:6d:1e:a3:f8:
                    f0:d6:75:28:ff:1c:ea:10:29:bc:3a:48:e2:5e:dc:
                    fd:2f:86:a6:dd:84:a2:b0:dc:ae:e8:c4:23:b3:d0:
                    43:ad:48:a1:12:b4:56:d8:de:bb:5c:c4:04:7a:fc:
                    4b:22:3e:0e:eb:5e:ed:ba:4c:f1:96:49:f9:27:7e:
                    46:3c:e9:7e:91:1b:63:5f:62:4d:13:7d:d0:d5:82:
                    73:6c:ae:3f:66:7b:31:f1:48:8c:a1:69:75:72:1e:
                    69:fd:14:97:2e:46:b6:74:95:b0:e4:1a:08:91:7f:
                    df:58:f1:5c:59:66:a6:a2:1a:2f:30:67:b6:f4:99:
                    4d:e5:cf:f9:f0:49:d3:b9:ac:6a:93:a9:ca:bf:0c:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:24:D7:57:04:D3:2C:91:59:EF:38:10:B6:2B:F7:C4:0A:17:C6:83
            X509v3 Authority Key Identifier:
                keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:47:02:d0:23:01:7b:51:33:8b:77:b1:af:91:f7:31:2f:70:
         36:26:2b:15:bd:ce:c4:39:8b:e4:1f:3e:69:35:e5:57:fa:7a:
         80:2f:06:33:76:bc:2b:c9:7e:ad:5b:4e:36:82:a0:09:c2:63:
         0f:ca:37:5c:a2:2f:3c:3a:e1:23:aa:43:1b:d8:52:b3:95:d5:
         f7:77:55:70:42:c1:a6:af:c2:56:a5:7d:63:2e:c1:07:31:73:
         fa:a0:86:24:c3:52:32:92:55:98:91:7a:78:e7:20:e1:cb:fc:
         af:8d:85:97:8d:b8:2f:57:70:d3:d5:a4:c1:82:ae:86:dd:f1:
         35:32:6e:bd:21:06:d6:65:31:b8:60:53:ce:7a:a1:d3:79:ea:
         d1:2f:6b:1a:42:9b:78:a1:ee:1c:63:b5:ca:66:dc:a3:01:d5:
         86:0c:e7:18:0a:e6:7d:52:87:06:77:50:8d:db:a8:ce:3a:67:
         1b:d6:7c:1b:f8:28:ca:3f:22:54:33:70:2a:2c:94:98:b3:c1:
         3f:65:3e:c9:a3:87:7e:69:57:a0:24:93:81:1a:4c:46:92:53:
         8c:70:08:29:d2:c4:2b:23:b5:84:b1:dd:fa:8f:5e:eb:15:63:
         75:6f:78:74:a1:b8:c2:96:96:7f:ca:e9:d3:a9:56:fa:22:aa:
         d4:7c:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:44:52 2025 by rpki-client