Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File:                     qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier:          GtL/Q0jrukEhRLVZQc3+Z2La2phV5tiuVojC0opRV0k=
Subject key identifier:   A9:73:FC:83:94:2A:89:AF:F6:D4:B8:E3:F9:2A:84:90:2F:81:04:F2
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer:       /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial:       01995DFCD81AD534E2263310B9AF3499FF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number:          0B12
Signing time:             Thu 18 Sep 2025 18:01:15 +0000
Manifest this update:     Thu 18 Sep 2025 18:01:15 +0000
Manifest next update:     Fri 19 Sep 2025 18:01:15 +0000
Files and hashes:         1: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: 73D2vuGU3iSnz7UDwThu7OqGCgJ99vwROZxPLjbKJHY=)
                          2: svg34J6rFMVB3i_8SEjkmyJCwjg.roa (hash: sxr7df0i+WFpR1Zcb5aW78WjZKAtxDkC7tuYAw5Z5pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5d:fc:d8:1a:d5:34:e2:26:33:10:b9:af:34:99:ff:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
        Validity
            Not Before: Sep 18 18:01:15 2025 GMT
            Not After : Sep 19 18:01:15 2025 GMT
        Subject: CN=a973fc83942a89aff6d4b8e3f92a84902f8104f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:e2:6f:f5:a2:48:88:01:47:98:de:63:55:
                    ab:8a:fb:91:89:13:59:ed:4b:1f:6e:46:e3:3d:20:
                    c0:02:a0:a0:5b:96:df:2b:13:b2:cd:57:79:04:ea:
                    04:ea:d2:fe:41:e7:be:b5:a0:df:9c:5f:5c:de:4e:
                    5d:38:1c:20:2f:61:99:29:e9:ad:36:33:88:8c:d4:
                    dc:ba:10:f6:07:d8:81:03:2d:97:c0:fa:0d:2b:ca:
                    aa:9d:3f:46:8e:70:6d:0d:cc:e2:a1:57:fa:5a:c1:
                    2e:2d:c8:c4:09:b4:0e:70:66:d4:21:f2:80:b7:a1:
                    79:26:f7:c2:2c:d5:38:1c:06:a5:82:7e:49:d7:e9:
                    fd:e7:0f:4b:02:f4:5d:aa:21:bf:f8:78:6f:ad:da:
                    5b:26:eb:a4:f9:b5:c9:3d:bb:8f:9f:38:85:26:87:
                    fa:81:8c:2f:1e:8f:ed:50:ae:4f:55:f1:71:95:c3:
                    89:00:f2:4b:52:da:fb:87:60:09:98:94:79:2a:b6:
                    1b:19:ce:91:98:a1:77:28:02:d4:01:ad:f0:4e:80:
                    ed:c6:24:40:b4:c5:60:2e:60:65:9b:d1:6c:32:ac:
                    ae:5d:5a:d0:67:65:67:2c:b3:90:3c:03:6b:83:dc:
                    b1:18:9d:cd:96:e3:af:50:be:38:a6:24:03:c4:f6:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:73:FC:83:94:2A:89:AF:F6:D4:B8:E3:F9:2A:84:90:2F:81:04:F2
            X509v3 Authority Key Identifier:
                keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:24:62:9e:b1:6f:1a:d1:d0:b5:5f:06:2d:0f:a3:c7:56:28:
         51:8a:b0:18:f5:81:ef:7b:46:d3:4a:85:09:79:b6:10:2c:63:
         49:b4:f7:9a:78:24:45:a3:de:20:22:1f:10:0b:05:75:6c:ba:
         b2:f3:ef:25:0d:0c:21:e3:71:97:23:21:46:95:56:ce:21:52:
         5a:78:cc:72:e4:0f:35:0c:20:e7:83:6b:40:b5:14:23:d8:b3:
         be:70:ff:f0:7e:05:65:6d:6c:b0:94:d9:98:e1:9f:cc:7d:90:
         0c:f9:8f:2f:f4:95:f9:4c:d3:4b:76:c9:34:09:0d:89:86:58:
         31:b8:9a:d3:f7:b2:cf:cc:02:d9:b4:5d:67:05:b3:6a:4c:b3:
         62:b6:0a:d7:43:12:57:a7:03:76:e1:72:f8:91:2f:50:e2:13:
         f2:7a:ad:b2:d5:ab:74:f8:27:78:b3:65:fe:b4:50:d3:4e:bb:
         2f:4f:2e:99:8f:f9:4c:38:68:81:35:e3:e2:94:fb:87:28:e8:
         0b:a0:1e:ab:d1:21:80:82:5e:2f:38:82:63:df:a5:80:33:83:
         f7:67:fd:0d:e3:88:54:39:45:e3:a7:8a:48:81:d1:b8:b4:eb:
         6b:53:62:58:e4:10:6b:df:00:06:be:3b:6f:79:2f:74:19:39:
         d3:28:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:57:53 2025 by rpki-client