Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
File:                     QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json)
Hash identifier:          9pJTydA9yz/KyyomLRvo9uZabrNW91s50MpkeocnWfI=
Subject key identifier:   BA:05:D2:9F:C4:9D:E6:73:45:C5:A5:A1:BF:4F:8F:F3:FA:64:F2:86
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Certificate issuer:       /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial:       01989524E3EAF2094CF51C2317304B7BC12E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
Manifest number:          09C0
Signing time:             Sun 10 Aug 2025 18:01:19 +0000
Manifest this update:     Sun 10 Aug 2025 18:01:19 +0000
Manifest next update:     Mon 11 Aug 2025 18:01:19 +0000
Files and hashes:         1: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: FTlEnyD54oUz6yhTlWm0x6urgWIRGgTZuoQsGHJgXps=)
                          2: bcsuWSTOEvrNi8Bj_pY3ZTkyjTo.roa (hash: gzGAlBuK5OENfmUWRjaIU+LruIs+AOY9SmxU1Rg2h3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:24:e3:ea:f2:09:4c:f5:1c:23:17:30:4b:7b:c1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
        Validity
            Not Before: Aug 10 18:01:19 2025 GMT
            Not After : Aug 11 18:01:19 2025 GMT
        Subject: CN=ba05d29fc49de67345c5a5a1bf4f8ff3fa64f286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:70:f4:50:a8:94:44:7d:5f:10:3e:72:55:
                    e7:e4:9e:bb:25:e8:68:02:32:5c:da:92:b6:b6:2f:
                    78:b9:85:24:03:2e:a1:7c:51:1b:83:a8:6c:da:9b:
                    ae:34:2a:1b:96:9e:ad:dc:62:81:43:94:13:3f:d6:
                    55:df:93:a9:b3:1d:64:1b:75:f0:44:ce:79:b5:01:
                    3b:b1:5e:c1:d5:e1:40:86:a7:37:9c:1b:53:fe:88:
                    ca:8b:d7:61:a9:67:6f:2a:ef:48:bb:5e:1d:f8:22:
                    87:d1:7a:1e:f4:bd:5e:53:45:03:b8:65:c6:e8:0e:
                    65:00:d0:54:a2:ab:83:3e:25:cb:88:b0:db:f6:aa:
                    c3:04:92:3b:a1:94:24:c4:67:81:b3:16:df:81:2e:
                    1e:77:8e:ea:3b:12:c4:ae:e6:8f:7e:75:ab:8c:c0:
                    37:4f:da:c9:90:73:6a:85:10:f9:82:a6:58:6e:28:
                    bc:df:cd:c6:b8:61:f0:cd:40:8c:84:0f:16:80:db:
                    aa:04:a8:d5:56:59:1f:95:62:b2:fa:18:1b:c3:a3:
                    bd:8b:64:1c:af:f6:e7:66:0a:21:1f:da:98:0b:96:
                    e8:69:e2:75:ef:ab:68:df:b3:43:d5:12:cd:bc:17:
                    7c:34:38:84:50:75:71:d9:ab:05:a4:30:85:1d:89:
                    c5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:D2:9F:C4:9D:E6:73:45:C5:A5:A1:BF:4F:8F:F3:FA:64:F2:86
            X509v3 Authority Key Identifier:
                keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:90:e1:d1:ec:ab:a9:b4:87:1d:27:06:a9:f6:9f:13:78:54:
         a8:16:52:4b:7c:30:d8:63:62:1b:64:9f:85:75:a1:d4:56:80:
         97:1f:33:f5:a1:c5:23:2e:fa:44:cf:c5:8c:f6:55:79:20:63:
         31:37:94:eb:84:7d:15:a5:c8:fb:ea:6c:79:ee:ad:c2:ff:27:
         f0:0d:ce:32:35:c1:82:e8:87:33:46:79:3f:8a:68:11:79:84:
         08:0a:41:3b:85:85:dc:60:0a:bc:30:38:95:2a:10:76:f4:25:
         4d:67:0b:95:09:ce:fc:8e:fb:ef:e4:3c:94:9d:84:ee:c6:2f:
         24:f4:73:4a:c1:a4:a6:8e:16:00:c7:17:1e:4e:41:cc:e4:bc:
         74:28:55:94:7e:da:8b:18:70:53:3e:17:28:8c:f8:c9:80:a4:
         7c:b8:b4:54:c7:18:e3:9f:63:6e:21:04:ea:a7:6d:7b:36:7c:
         63:9f:da:50:1c:81:27:bd:80:6c:90:92:ba:fe:5b:7d:af:72:
         13:a0:bc:69:6f:99:28:96:f4:a4:30:9a:86:3f:af:a4:1b:0d:
         fb:70:73:fb:a2:83:3d:38:31:57:87:d1:1c:ea:c9:5b:3c:88:
         93:72:70:d1:8b:c0:70:38:e4:ac:62:34:9b:66:d2:39:ce:fc:
         5e:5a:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:31 2025 by rpki-client