Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File:                     QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier:          Xv9Mz8jZ61pvWxGmmhUfgZxN3tCtovGH2oHnlV/D6Bs=
Subject key identifier:   46:62:F9:02:11:1E:11:16:E7:FA:5D:0B:55:81:B4:4F:7E:96:4F:6B
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer:       /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial:       01984AAF013F21BC76A331C8222EFDF40A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number:          11B8
Signing time:             Sun 27 Jul 2025 07:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:39 +0000
Files and hashes:         1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
                          2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: /qPCrT4pNoUs+riR3sFpGqLDIQ/YUOnCDXuABpJvwno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:01:3f:21:bc:76:a3:31:c8:22:2e:fd:f4:0a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
        Validity
            Not Before: Jul 27 07:00:39 2025 GMT
            Not After : Jul 28 07:00:39 2025 GMT
        Subject: CN=4662f902111e1116e7fa5d0b5581b44f7e964f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:a3:be:67:06:f7:fb:41:95:76:20:18:0d:
                    3b:ae:e3:d4:d1:e7:80:f5:14:81:49:b7:35:da:98:
                    c5:ba:84:f6:a7:58:32:c7:ed:1c:3d:ca:04:d4:20:
                    10:4b:74:72:ac:1b:47:64:49:03:75:88:8b:b4:a7:
                    94:55:3e:5a:e7:04:97:d5:94:1e:c9:e1:45:ac:b7:
                    6e:7f:8a:08:a4:c1:be:2b:1a:d5:48:f6:9a:cc:03:
                    d0:ca:ed:ad:5c:65:21:cd:3f:98:35:d1:56:f1:e0:
                    6a:da:63:ae:b7:92:dc:5e:f3:d6:90:a2:e6:e7:e0:
                    a7:1c:5e:4a:8d:58:ac:0d:11:e1:40:db:b5:06:1b:
                    0f:74:dc:b7:c0:1c:87:e7:20:63:29:45:13:5e:2b:
                    ff:02:c0:8e:07:f7:a0:35:ef:0a:d0:38:a6:f3:48:
                    c6:7f:85:89:33:b6:3f:4b:98:25:0a:3d:8a:ac:c3:
                    9a:40:63:46:d1:a8:da:fe:b9:be:ac:92:f9:6d:93:
                    dc:70:9c:04:99:0f:01:32:7a:29:cc:6d:17:d9:ce:
                    1d:c5:07:23:d7:81:39:eb:7e:57:10:dd:48:74:64:
                    6c:e3:3c:a2:18:ec:f9:72:5c:33:a2:86:21:14:28:
                    c8:1f:07:86:aa:67:65:4e:08:5f:b0:1e:35:3c:66:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:62:F9:02:11:1E:11:16:E7:FA:5D:0B:55:81:B4:4F:7E:96:4F:6B
            X509v3 Authority Key Identifier:
                keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:f8:44:99:cc:94:32:c7:75:c2:f7:55:4b:5d:e0:6e:b4:
         5b:13:f9:e7:fe:2f:53:f2:30:85:ae:8c:1d:37:31:6b:59:d2:
         56:0d:79:b0:2a:09:3d:a9:ec:21:ac:4f:69:aa:d3:a8:9a:48:
         5a:6d:16:9b:c8:1b:fb:be:02:2c:40:3c:41:03:fc:74:eb:b1:
         e2:80:9e:ba:f5:72:bb:1f:7b:e4:67:e2:f1:3b:e2:66:94:a2:
         a5:38:f5:e1:17:1b:a8:60:86:97:4d:27:33:5b:79:ee:f9:94:
         11:94:0f:ef:1d:c6:b2:24:e7:92:66:88:b5:b8:dd:d1:e4:f6:
         e0:c1:c1:2a:bf:9d:72:a8:3a:19:f2:88:f2:c4:90:b5:8d:b1:
         0c:2d:a2:97:52:23:58:c9:e8:e2:30:fa:92:fb:07:d9:1c:c6:
         ed:44:a7:a8:a9:5a:67:50:31:51:43:a5:d6:84:81:86:92:6d:
         20:53:84:80:c4:21:52:ea:df:7a:d0:36:84:54:ac:44:cd:f4:
         e3:0e:f1:cf:64:12:95:27:8d:8d:8a:f5:80:79:2d:57:08:3d:
         5b:80:45:96:74:c6:c2:2d:18:eb:5a:ef:21:c1:53:3f:9b:d4:
         27:15:0e:23:03:c2:01:35:41:7b:ff:75:f9:89:5c:71:6f:10:
         53:8e:ec:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:49 2025 by rpki-client