Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
File:                     Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft (raw, json)
Hash identifier:          qEt4ovqsk85Hwp0Yogv0wXXiwh82bJqfe2xxOgjwWLU=
Subject key identifier:   46:DB:F0:62:3A:CD:56:9E:9E:C5:E6:BF:0E:66:5B:4B:7D:3C:19:D8
Authority key identifier: 42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14
Certificate issuer:       /CN=42afd560d513077e339fabfe0ccda90940bdd814
Certificate serial:       0199228D28EA5C9B4F1DD817A93B37079F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
Manifest number:          1670
Signing time:             Sun 07 Sep 2025 05:01:40 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:40 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:40 +0000
Files and hashes:         1: Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl (hash: 2azUlbEveMptYEF17ddyin0jlAwFPUe6u7n5KRiCuAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:28:ea:5c:9b:4f:1d:d8:17:a9:3b:37:07:9f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42afd560d513077e339fabfe0ccda90940bdd814
        Validity
            Not Before: Sep  7 05:01:40 2025 GMT
            Not After : Sep  8 05:01:40 2025 GMT
        Subject: CN=46dbf0623acd569e9ec5e6bf0e665b4b7d3c19d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:89:d8:6f:47:f3:b9:ab:02:01:0d:5a:88:
                    b1:4b:6a:22:e7:46:2b:8c:37:da:ac:48:11:02:5d:
                    68:77:96:dc:8a:5f:e5:ad:2b:94:87:8d:95:be:74:
                    c8:7d:28:73:09:f6:07:47:27:ac:a2:79:8b:f9:0c:
                    7f:44:95:ca:1f:92:70:5e:ad:18:c7:20:4d:9c:a4:
                    0d:5d:28:0d:0e:80:6c:41:6d:5c:64:bf:b0:ec:cf:
                    f3:72:27:f4:25:49:c2:78:f1:7d:88:8c:ba:a3:63:
                    90:cb:5f:6a:56:23:8d:33:35:70:2e:3c:0f:05:70:
                    40:3d:d6:d0:96:24:f4:85:04:e3:1c:93:1b:78:48:
                    3f:bf:30:0a:e8:72:a6:a0:7e:11:93:6b:c9:6e:2b:
                    b5:2a:81:ec:89:a5:f0:ba:67:9f:19:b5:38:6d:fd:
                    e3:c6:99:ae:cb:ba:0c:70:2a:6e:0e:a0:4e:0c:7b:
                    dc:2c:3a:7d:c6:23:38:4f:4a:78:89:4c:bf:67:07:
                    4b:a4:87:10:d6:51:02:21:9d:f3:7f:9d:c5:9e:e6:
                    8d:a7:a5:d5:3a:e4:5e:b1:d7:a8:b8:e0:de:4d:43:
                    82:53:29:c7:b8:7c:23:82:33:ae:ff:34:06:2f:2a:
                    31:63:2b:90:f9:c6:5c:3a:01:e0:d3:3a:2d:f8:42:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DB:F0:62:3A:CD:56:9E:9E:C5:E6:BF:0E:66:5B:4B:7D:3C:19:D8
            X509v3 Authority Key Identifier:
                keyid:42:AF:D5:60:D5:13:07:7E:33:9F:AB:FE:0C:CD:A9:09:40:BD:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq_VYNUTB34zn6v-DM2pCUC92BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/549b8b-6494-4a92-a94e-cf8ce22c3af7/1/Qq_VYNUTB34zn6v-DM2pCUC92BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:68:61:eb:cd:d6:7b:14:15:f5:a9:9d:3f:3d:05:c4:ad:85:
         da:56:8a:0d:9a:73:ca:d1:d1:4a:b6:df:fe:22:79:e4:75:c5:
         bb:fd:21:d4:7f:8b:d0:be:be:ac:6c:eb:0f:c5:63:91:b3:54:
         f2:15:85:e1:c6:46:a2:5a:52:bf:1d:2e:08:2c:a5:83:77:77:
         c7:f6:0c:8f:2a:ed:ad:e0:f2:c3:8a:df:28:ad:f0:8e:11:d0:
         ad:24:11:b3:d6:f6:0b:cd:37:68:df:1a:59:08:0f:d3:06:fb:
         41:a8:c4:d6:6a:d9:16:ab:97:45:e4:9a:a4:44:65:13:9f:67:
         e8:0a:38:57:a2:e2:56:14:b1:76:58:49:01:42:f8:13:22:74:
         f6:51:47:eb:fe:da:3b:13:51:b0:64:6e:14:67:8c:3d:f8:4a:
         88:54:eb:7e:48:4c:f3:d1:24:fb:27:5a:2e:df:a0:e0:a4:56:
         1e:53:44:8f:75:6a:79:fe:b2:c1:85:91:d8:58:12:31:5c:a9:
         d2:7e:e5:f3:8c:72:5a:50:d7:9f:d5:15:54:ea:70:f8:01:0c:
         bf:58:6d:15:e4:55:0b:c7:62:33:eb:5e:6c:53:5c:39:f9:2e:
         ac:04:66:16:25:41:f1:7c:16:51:eb:66:b3:6d:6d:07:1c:57:
         18:e2:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:21 2025 by rpki-client