Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File:                     QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier:          t/Q7SrVbx//egfTZuzjkR/GQTgnpfx4ghYYUwGZBcts=
Subject key identifier:   1F:06:F1:A1:1F:D3:F2:63:68:78:C1:0F:42:30:F5:C1:43:1A:E7:CA
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer:       /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial:       01988B459A296BE0F10CBE56F42BC1E8ABC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number:          0CE2
Signing time:             Fri 08 Aug 2025 20:00:51 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:51 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:51 +0000
Files and hashes:         1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: 5Ys3GwETMwBocrw/BdPhl5IwUvJHMGHY+B13+mV55iE=)
                          2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
                          3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:9a:29:6b:e0:f1:0c:be:56:f4:2b:c1:e8:ab:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
        Validity
            Not Before: Aug  8 20:00:51 2025 GMT
            Not After : Aug  9 20:00:51 2025 GMT
        Subject: CN=1f06f1a11fd3f2636878c10f4230f5c1431ae7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:b2:07:00:de:7b:85:38:ac:e3:80:09:d0:
                    72:1a:cc:d2:5d:e2:4c:1e:be:0b:16:6c:60:12:64:
                    b7:5c:96:7b:89:ff:a6:c1:62:76:a3:7d:78:60:11:
                    a7:2b:e5:da:29:99:e2:f5:f1:26:34:16:60:4a:29:
                    93:3f:e3:30:e1:61:d8:71:79:49:c2:d9:bb:af:7c:
                    f9:23:e1:7f:54:cd:fe:d3:10:20:4c:46:85:d2:0a:
                    a0:84:fd:53:e8:9d:4f:18:d5:f4:2b:a8:5f:51:6f:
                    df:47:be:23:d1:4b:8a:55:0c:37:25:ae:4a:06:ce:
                    7e:f6:11:03:bd:4a:51:e1:95:30:10:ff:16:58:07:
                    4d:5b:c1:8b:a5:6f:10:5a:70:dc:ab:b4:9f:cb:aa:
                    b9:d6:9d:4b:7d:4d:a2:f9:73:15:ef:3c:06:f6:5d:
                    8d:58:4c:28:8d:10:dd:02:04:87:46:b6:a1:a2:5e:
                    43:91:44:32:88:b1:96:c6:6c:1b:fe:7a:5f:09:06:
                    4b:92:6a:69:8e:cc:21:08:5a:c6:5d:17:3e:33:44:
                    79:b6:9e:80:98:6e:a0:dc:9e:5b:74:b1:e7:b5:7d:
                    5b:fa:11:01:6c:c0:2e:f3:e7:70:30:fb:b2:8c:34:
                    8d:bf:06:16:a3:b5:d6:cd:d5:db:c2:29:98:ed:c9:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:06:F1:A1:1F:D3:F2:63:68:78:C1:0F:42:30:F5:C1:43:1A:E7:CA
            X509v3 Authority Key Identifier:
                keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d0:20:cf:2b:f0:b3:7a:8c:2f:80:8f:f5:54:8b:35:1c:ff:
         5d:b9:2f:5b:28:bb:e5:44:37:a7:67:b6:2f:57:d8:a8:29:19:
         21:9e:ee:28:b7:91:52:ec:a3:0e:b7:7e:7e:e8:7a:d9:a5:64:
         b9:35:ec:70:97:3f:fe:9c:bd:15:56:c6:59:2c:29:03:e1:ef:
         83:c5:60:44:5f:f4:9c:a9:dd:75:0c:d0:6b:4f:bf:08:73:ee:
         4d:30:7d:be:35:ab:56:49:37:f4:ee:fb:05:cd:81:29:4a:cd:
         52:bd:56:ae:ed:0c:59:22:45:72:97:63:f2:9c:39:f5:19:a7:
         80:6e:10:63:80:f0:21:ce:6f:8e:50:62:e9:ed:11:19:c0:a5:
         26:bf:44:cc:eb:61:96:73:47:7f:97:a9:5d:13:56:69:3e:f2:
         dc:c7:f5:a6:86:3e:84:6a:be:22:49:a9:8b:6e:4c:21:cc:1e:
         94:db:b2:f1:dd:81:07:92:8e:a8:0b:df:66:95:97:80:f3:5e:
         3d:5f:94:1b:86:a4:f7:54:49:e0:14:92:e0:a0:45:7a:8a:bf:
         99:b7:9c:bb:80:68:ea:cb:8e:e1:64:2f:5b:c2:f0:5b:45:0c:
         54:a1:0a:87:55:82:af:a3:e7:07:95:43:13:59:b7:f0:53:3a:
         f4:3c:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:07 2025 by rpki-client