Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File:                     QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier:          WLBvRos76VpU2Nq/XzzSqK4Ml0wpKyFMZQq2ulmYXLo=
Subject key identifier:   8E:E8:C4:D2:22:38:43:9A:B4:32:21:6E:A0:30:95:30:6B:4B:9B:EF
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer:       /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial:       019845F6D499787E41F0643BC3C14AE0DF9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 09:01:00 +0000
Manifest this update:     Sat 26 Jul 2025 09:01:00 +0000
Manifest next update:     Sun 27 Jul 2025 09:01:00 +0000
Files and hashes:         1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: /AH8XKB9/MhnHqj4r//NizyqY1ZbbSf6A5MGAlZa2bs=)
                          2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:d4:99:78:7e:41:f0:64:3b:c3:c1:4a:e0:df:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
        Validity
            Not Before: Jul 26 09:01:00 2025 GMT
            Not After : Jul 27 09:01:00 2025 GMT
        Subject: CN=8ee8c4d22238439ab432216ea03095306b4b9bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:c3:46:a2:6a:62:9f:b9:9f:95:d6:c2:6e:
                    9f:fd:9e:c3:cd:fb:a0:11:60:47:05:2b:51:ac:cb:
                    84:12:36:de:19:65:4b:6b:9e:12:60:2e:3a:c1:30:
                    a1:83:d9:50:d6:d0:98:1d:36:9e:ff:99:43:f0:09:
                    b0:3a:17:76:e5:e0:90:df:04:6a:7c:4a:de:e3:1a:
                    1e:0b:44:7e:04:80:6a:71:8b:24:1d:5c:d2:40:a0:
                    d3:4d:b8:f0:04:15:41:db:4b:bc:f0:0e:f7:03:36:
                    9a:54:30:a7:e6:81:56:06:98:6f:98:dd:e9:90:c3:
                    0c:2c:19:24:95:4b:59:1e:5b:16:76:2f:8b:b3:16:
                    1f:93:f4:42:06:5f:0b:d4:dd:f6:6e:3c:e9:e5:d7:
                    e7:ee:83:10:49:74:f8:30:1d:90:5e:f3:74:dd:6d:
                    e0:91:e1:a5:f6:8c:aa:3f:aa:cd:f2:de:56:a0:22:
                    7b:58:44:2d:f9:fd:28:f4:35:b9:a8:b6:77:f9:bc:
                    66:5b:66:64:69:4e:d6:5a:ec:5b:8a:e5:09:d0:5d:
                    0c:9d:e8:51:cc:8e:5c:8e:87:31:95:f7:78:2e:76:
                    9e:ae:0b:a9:1d:0b:c5:a4:71:ce:18:f6:39:0f:f6:
                    82:61:86:8d:d2:fb:0f:11:f7:d4:7d:12:44:50:02:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E8:C4:D2:22:38:43:9A:B4:32:21:6E:A0:30:95:30:6B:4B:9B:EF
            X509v3 Authority Key Identifier:
                keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:cc:5b:bb:e5:ca:b4:f1:07:9d:2a:ef:8e:28:ce:94:4a:
         49:ee:16:3e:19:6f:bc:bb:f8:36:f1:37:ae:c6:8e:a7:87:aa:
         51:df:c6:25:3a:37:0f:29:d2:ed:81:2b:a1:be:71:3e:83:bc:
         dd:30:f8:de:52:7f:5a:52:73:cc:2d:ed:78:44:5c:64:d5:92:
         22:89:50:b5:5f:88:50:9c:40:0f:95:d6:96:2d:2d:a8:df:13:
         bf:58:12:16:31:9a:19:60:90:38:25:e9:2f:ee:3c:89:d9:e6:
         a5:74:b7:f6:53:9e:3d:d6:b9:bb:0d:f3:ac:7e:23:6e:a8:eb:
         e1:1f:36:f2:4d:50:96:86:56:3a:ed:5b:3b:60:bd:dd:91:a2:
         f5:6a:72:36:72:96:4d:e5:9b:3d:f7:80:0b:9d:15:c0:3f:bc:
         dd:ce:56:0a:ba:50:4a:07:15:09:36:f5:65:77:77:62:a4:b1:
         7e:2d:3d:76:1b:80:11:50:da:ed:f9:67:a6:70:0b:97:a5:f7:
         c4:ee:00:4d:eb:d8:af:83:a2:24:73:d9:ef:5a:c2:79:b2:be:
         54:c7:f7:0a:fa:f3:79:0b:43:ad:cd:9a:b2:80:ea:06:23:66:
         19:49:04:5b:31:ea:4e:f4:6c:25:a4:c2:2b:a3:b9:ce:2e:b7:
         d7:1d:ea:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:34 2025 by rpki-client