Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File:                     QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier:          vImDqABtUb/jhVVclnoCNV7lergb0Zxjo0ZbXgtm0Rs=
Subject key identifier:   E1:01:15:AE:4A:AE:AA:58:57:0A:62:84:87:7F:5E:74:1B:58:E8:58
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer:       /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial:       01984966583539F39C2FBC491B7F188435CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number:          04F5
Signing time:             Sun 27 Jul 2025 01:01:40 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:40 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:40 +0000
Files and hashes:         1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: ZC0ouXAOUVAQSd4TPJKIDLYA4NeN6qnoZDNBBBYt/Dw=)
                          2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:58:35:39:f3:9c:2f:bc:49:1b:7f:18:84:35:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
        Validity
            Not Before: Jul 27 01:01:40 2025 GMT
            Not After : Jul 28 01:01:40 2025 GMT
        Subject: CN=e10115ae4aaeaa58570a6284877f5e741b58e858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5a:17:10:76:9a:6c:4b:ff:12:ef:54:e2:9f:
                    02:db:df:b6:e0:4d:51:fd:5c:95:94:2d:80:ea:f7:
                    9c:aa:52:4b:6d:a9:37:0d:10:fe:00:52:73:3f:0f:
                    de:0d:44:54:05:fd:c8:43:58:17:72:3f:34:c2:5e:
                    c1:4e:54:07:b4:6c:70:57:cd:8a:79:ff:81:71:60:
                    35:31:5f:cc:7d:54:61:f6:04:9e:be:6b:00:f6:09:
                    3f:2d:5c:fd:5a:a1:b6:9a:ee:c4:97:c9:45:e0:d6:
                    66:4c:52:ab:44:26:61:6d:4c:3c:a5:76:0e:72:60:
                    d8:55:50:e2:18:db:e2:11:d8:58:91:76:fb:4d:0c:
                    02:37:04:f6:7a:59:52:11:d3:e1:77:8c:c4:7f:0e:
                    c2:5f:36:25:f6:f2:76:59:7d:7d:f6:c8:28:35:75:
                    75:78:65:f1:df:eb:8d:3f:47:f4:98:23:51:de:1f:
                    74:9e:46:2d:39:4e:dc:71:12:01:4f:ba:95:42:c7:
                    8b:99:48:1f:0f:3f:f0:63:99:35:56:03:91:db:90:
                    86:c8:e9:2e:76:82:fa:2f:a4:d4:8f:50:dc:49:79:
                    79:6c:11:ae:68:f7:d1:9f:5e:73:aa:d0:07:6b:f0:
                    85:61:1f:56:46:a1:c6:02:43:f8:7d:a4:1c:5a:01:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:01:15:AE:4A:AE:AA:58:57:0A:62:84:87:7F:5E:74:1B:58:E8:58
            X509v3 Authority Key Identifier:
                keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d7:02:6c:20:01:51:af:ec:e8:f5:28:b4:56:e9:09:da:c9:
         b7:66:8b:6f:87:9b:03:8f:0c:33:a9:40:32:e0:c2:c9:28:8d:
         82:32:c4:94:dc:01:e6:71:75:3c:f4:a2:07:0a:28:61:fe:02:
         e1:ac:74:a4:7e:ac:a8:b3:01:c2:e3:f3:5a:18:38:09:48:c2:
         40:1b:c0:ce:55:38:18:2b:a4:a8:ca:3a:24:ff:cd:4e:10:e6:
         83:e8:57:bf:1d:47:8a:16:95:72:72:6b:3e:90:4d:7d:a2:d0:
         5b:ae:6f:3e:87:e7:f4:90:20:af:d8:3a:e7:50:92:a0:1a:da:
         d8:f4:da:4d:d9:dc:c3:78:bf:ca:1c:59:04:af:d2:d0:20:2e:
         b2:a9:a4:91:93:92:6d:c2:06:0d:be:01:fa:aa:e8:9d:63:3d:
         3c:54:7c:a4:2c:3f:f8:43:1c:73:5a:2a:e5:8c:8b:0c:bf:2d:
         82:8f:7d:f2:e3:dc:c0:92:74:c5:07:5f:da:8a:2c:46:bc:e8:
         e8:01:b2:8d:b9:77:3e:d1:eb:a2:8a:77:47:53:a3:38:bc:94:
         ee:f4:9e:d6:ee:46:81:19:3d:8d:8e:a6:ff:32:5d:3e:5f:aa:
         01:99:3d:b6:6d:2e:c5:43:1b:34:8c:4c:77:5d:94:c0:09:8d:
         b3:a0:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:54:14 2025 by rpki-client