Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File:                     qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier:          fSDHiembLUwkZnZaZmJzuZNhzA4rdkitA+PLzZA/3R8=
Subject key identifier:   6A:3A:6B:47:DB:C0:E6:BB:0B:47:D2:A4:7D:44:E2:61:8B:E0:36:28
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer:       /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial:       01984AAF280075EE71EDE54B0FBB7531C39A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number:          1344
Signing time:             Sun 27 Jul 2025 07:00:49 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:49 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:49 +0000
Files and hashes:         1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: w1knviKjpOoAFjUoJ41L+zjDUxX9XsEYrZ8XexD3SGI=)
                          2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:28:00:75:ee:71:ed:e5:4b:0f:bb:75:31:c3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
        Validity
            Not Before: Jul 27 07:00:49 2025 GMT
            Not After : Jul 28 07:00:49 2025 GMT
        Subject: CN=6a3a6b47dbc0e6bb0b47d2a47d44e2618be03628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:26:0b:cd:0d:d8:bd:59:a0:aa:00:be:e5:
                    35:1f:f4:59:74:9d:a3:e0:a0:55:ba:eb:88:85:7e:
                    32:93:6c:21:1f:fd:c1:6e:3a:4a:3f:eb:c5:36:c0:
                    19:0b:bc:0a:43:5d:d6:af:82:d3:cd:9c:01:ea:38:
                    52:9b:9c:4c:22:66:c7:79:30:78:7d:52:7d:c4:76:
                    54:1b:3b:3a:6f:8f:09:17:92:18:d8:ec:cd:53:93:
                    bd:b5:cb:68:4c:51:5a:cf:49:9e:28:5f:61:ea:6d:
                    3b:15:0c:ad:14:f2:04:de:41:7f:58:1d:a4:bb:f9:
                    8a:a3:cf:39:b0:24:6b:74:c4:c5:b1:0e:93:be:0c:
                    87:fc:60:4b:aa:8a:a9:da:35:fa:6c:93:66:2c:59:
                    b7:5f:b5:10:9e:16:99:35:96:07:7b:41:89:30:21:
                    fc:8f:f5:64:bc:85:be:39:b1:48:c1:3b:e1:98:e6:
                    e5:d1:cb:9e:54:02:77:d4:a2:10:2e:c3:9f:2a:5b:
                    65:9e:70:14:99:96:07:e6:b9:fd:2f:15:c2:ba:5c:
                    8a:db:a1:37:a2:20:d2:2d:32:da:11:f4:59:b5:52:
                    eb:62:33:03:ef:a5:76:9f:7c:83:53:6f:06:ca:3a:
                    56:7c:a4:d1:2f:ba:6c:7a:22:f8:19:b9:46:cb:e7:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3A:6B:47:DB:C0:E6:BB:0B:47:D2:A4:7D:44:E2:61:8B:E0:36:28
            X509v3 Authority Key Identifier:
                keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:29:fe:3b:d6:f9:a6:30:69:69:38:58:9e:5d:35:e9:86:d3:
         ad:f8:d0:64:ee:02:e5:d4:2b:7b:68:cb:0d:87:ad:db:ab:d1:
         c5:09:cf:52:bd:96:f8:03:57:fc:58:98:9f:63:39:36:8a:9f:
         6e:dc:8b:cb:0f:d0:d5:7b:a9:50:07:02:25:90:20:47:cd:77:
         0a:43:36:9a:35:38:bf:b1:75:e3:0b:9e:bf:87:93:8c:31:4f:
         56:ba:66:b0:11:15:1f:39:5e:ef:05:5b:ce:af:6e:37:b4:06:
         01:ed:35:c6:0a:e0:dd:a7:ab:e7:6a:fc:e6:dc:f6:5f:46:11:
         52:08:52:df:3a:78:05:3b:50:f3:43:e0:c3:43:29:2b:39:a9:
         b6:ab:f8:1a:01:72:50:ca:de:b4:e8:87:5e:37:29:00:60:3d:
         e3:87:e7:67:1b:0b:fe:b0:dd:60:4d:a9:0f:52:b7:ac:47:d1:
         b3:78:10:a7:a6:3f:81:2c:d9:81:07:fa:34:34:e6:0a:e3:75:
         97:78:6d:c8:a6:f5:82:e7:24:29:2c:b7:a3:89:d9:c4:6b:e3:
         59:04:7b:93:68:29:b5:6c:9c:08:28:29:07:0e:03:eb:20:da:
         f3:d6:37:03:aa:b7:29:b1:ac:8b:6e:92:06:75:f6:82:ea:3c:
         ac:62:eb:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrygAde5x7eVLD7t1McOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODVjZGJkZGZkN2QxMzE2ODQ1YmViNGY3Mzk4ZjNjZTY0
ZmFjZDAwHhcNMjUwNzI3MDcwMDQ5WhcNMjUwNzI4MDcwMDQ5WjAzMTEwLwYDVQQD
Eyg2YTNhNmI0N2RiYzBlNmJiMGI0N2QyYTQ3ZDQ0ZTI2MThiZTAzNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg4mC80N2L1ZoKoAvuU1H/RZdJ2j
4KBVuuuIhX4yk2whH/3BbjpKP+vFNsAZC7wKQ13Wr4LTzZwB6jhSm5xMImbHeTB4
fVJ9xHZUGzs6b48JF5IY2OzNU5O9tctoTFFaz0meKF9h6m07FQytFPIE3kF/WB2k
u/mKo885sCRrdMTFsQ6TvgyH/GBLqoqp2jX6bJNmLFm3X7UQnhaZNZYHe0GJMCH8
j/VkvIW+ObFIwTvhmObl0cueVAJ31KIQLsOfKltlnnAUmZYH5rn9LxXCulyK26E3
oiDSLTLaEfRZtVLrYjMD76V2n3yDU28GyjpWfKTRL7pseiL4GblGy+ea6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo6a0fbwOa7C0fSpH1E4mGL4DYoMB8GA1UdIwQY
MBaAFKiFzb3f19ExaEW+tPc5jzzmT6zQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEt
ZjQ4Mjc4MDBiMGM4LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEtZjQ4Mjc4MDBiMGM4
LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyn+O9b5
pjBpaThYnl016YbTrfjQZO4C5dQre2jLDYet26vRxQnPUr2W+ANX/FiYn2M5Noqf
btyLyw/Q1XupUAcCJZAgR813CkM2mjU4v7F14wuev4eTjDFPVrpmsBEVHzle7wVb
zq9uN7QGAe01xgrg3aer52r85tz2X0YRUghS3zp4BTtQ80Pgw0MpKzmptqv4GgFy
UMretOiHXjcpAGA944fnZxsL/rDdYE2pD1K3rEfRs3gQp6Y/gSzZgQf6NDTmCuN1
l3htyKb1guckKSy3o4nZxGvjWQR7k2gptWycCCgpBw4D6yDa89Y3A6q3KbGsi26S
BnX2guo8rGLrVA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:47 2025 by rpki-client