Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File:                     QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier:          0z4LDKdLHv/RcRV4/uHQ7bMP+4/Q71ZFStj3FLyRH48=
Subject key identifier:   B4:ED:8D:5D:C1:12:28:CC:10:9F:D1:2D:8A:03:62:29:05:7E:1E:86
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer:       /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial:       0198481B77D924634FA7BDA1DB77CCEAE81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number:          115C
Signing time:             Sat 26 Jul 2025 19:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:16 +0000
Files and hashes:         1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: UM+LdGZosbK5+3h68rjjpVSnTy3gUEhRP6GbL/qAGBk=)
                          2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:77:d9:24:63:4f:a7:bd:a1:db:77:cc:ea:e8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
        Validity
            Not Before: Jul 26 19:00:16 2025 GMT
            Not After : Jul 27 19:00:16 2025 GMT
        Subject: CN=b4ed8d5dc11228cc109fd12d8a036229057e1e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:cf:30:5a:0b:8b:53:f7:ea:31:2c:0b:80:
                    05:e2:5e:33:6a:12:02:c5:f4:37:f2:63:df:0c:e0:
                    ee:3e:f1:1e:ff:6f:f3:40:87:9c:1c:c2:1d:02:0a:
                    97:f7:92:f8:52:ee:07:12:76:99:3b:72:d2:2d:21:
                    21:79:30:0f:ab:ee:e7:35:0e:7b:e0:8f:dc:96:25:
                    8a:ba:29:37:e8:a8:01:8f:b6:d7:59:c9:24:fc:89:
                    fe:18:ad:60:a9:30:78:6a:ef:36:7d:d9:9c:34:e4:
                    e6:77:7b:82:11:fa:8c:6d:f8:cc:8b:a5:d3:ed:96:
                    1d:14:f5:1f:a0:19:17:a1:fb:43:f8:6d:c0:de:10:
                    58:83:e9:24:bf:92:80:d5:ca:ee:f8:2f:46:bc:0a:
                    b0:53:e1:af:a1:36:b2:c9:e7:93:88:11:34:39:00:
                    3f:9c:1b:67:77:b7:13:2e:dd:05:b2:7d:a8:08:00:
                    99:24:e6:b5:80:45:6b:6d:ed:b8:6c:48:7c:c8:e7:
                    c0:51:2d:b1:a2:8e:0d:87:9d:04:0a:fd:92:a0:a6:
                    1c:66:c3:31:dd:b3:8a:9a:ca:98:85:ed:da:94:8b:
                    c7:56:da:c0:6e:a6:00:04:ee:ec:4e:21:fb:f5:1f:
                    5f:64:07:ac:ae:48:8c:e3:c3:d4:e8:28:c0:c5:79:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:ED:8D:5D:C1:12:28:CC:10:9F:D1:2D:8A:03:62:29:05:7E:1E:86
            X509v3 Authority Key Identifier:
                keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:41:03:1c:75:06:88:07:1d:56:36:52:7d:04:75:25:a5:f7:
         39:f2:19:5d:43:dc:b4:e7:10:8b:06:90:88:08:c8:f2:4f:03:
         db:9c:5e:95:2f:d3:fb:d7:2d:2f:fe:fd:6b:77:e6:36:f2:04:
         ac:8e:54:7e:26:66:31:27:22:6b:c3:5d:2e:9f:79:eb:f9:99:
         56:ab:b8:61:24:4e:1e:c5:ef:d7:09:99:19:7c:5f:b6:0c:d7:
         12:de:41:ea:1d:b6:55:4a:78:36:40:94:42:0a:5c:7b:53:a3:
         48:55:c4:5f:86:e1:2d:d2:46:dc:34:ce:bd:18:7a:39:c8:35:
         b6:00:eb:4b:f6:62:66:35:be:6e:0a:41:19:e6:1c:df:08:da:
         48:e1:ec:3e:d7:32:10:48:dc:9b:21:53:05:a5:1f:20:8a:72:
         f0:2c:49:a7:8f:a0:a2:e7:26:92:ef:00:fe:96:b9:a8:99:47:
         3c:40:cb:99:e3:92:3a:68:65:95:e1:ad:a5:5f:0e:26:6b:2f:
         67:3b:a4:0c:8f:a7:9f:07:84:6d:34:1e:cd:78:cd:c3:3e:26:
         69:cb:50:4e:bc:a9:30:0f:24:40:97:84:7f:60:4a:ac:4e:de:
         dd:a0:b5:92:8d:3b:9f:f4:5e:4d:82:a4:76:4f:87:cb:06:e7:
         cf:d4:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:55:52 2025 by rpki-client