Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File:                     QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier:          Vjbdykgr+zIHRgnFME/wb4sxRe43fqxYyZesoqczn1s=
Subject key identifier:   9A:BD:12:27:0E:EA:37:2F:08:77:2B:D5:E7:27:B8:E1:AA:CB:5F:89
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer:       /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial:       0198733CF80F023B71494AD5D672E3B4B5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number:          0303
Signing time:             Mon 04 Aug 2025 04:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:32 +0000
Files and hashes:         1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: GNWEoZbxddIl8j9m8pys7BmKKemuj5eEUxgTDUJi0rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3c:f8:0f:02:3b:71:49:4a:d5:d6:72:e3:b4:b5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
        Validity
            Not Before: Aug  4 04:00:32 2025 GMT
            Not After : Aug  5 04:00:32 2025 GMT
        Subject: CN=9abd12270eea372f08772bd5e727b8e1aacb5f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:b3:0c:c0:10:fc:e2:dd:a6:1d:c4:ac:57:
                    ec:77:ab:45:f9:5d:78:1b:e8:7b:ae:b9:eb:15:99:
                    e6:79:6a:c8:2d:c6:46:28:4f:70:3c:d8:85:76:f7:
                    42:2a:33:db:66:b5:b9:42:62:4f:57:eb:f6:d8:e0:
                    68:e7:90:ae:0e:29:cb:f8:72:12:ea:f0:13:63:9e:
                    23:36:3c:99:40:2a:6e:8c:6b:cf:59:69:73:08:75:
                    84:9d:39:e0:62:f9:87:78:fa:4f:8b:ff:a0:92:ef:
                    96:85:86:7d:1a:11:99:92:ae:a8:b2:07:32:fd:d2:
                    c2:d6:e3:4d:99:c3:f6:d8:63:79:90:44:5c:91:29:
                    57:b0:54:3e:80:6b:0e:cc:ed:d8:3f:9b:3e:87:5f:
                    57:bd:ac:f9:fa:08:5d:98:3c:83:a8:62:31:68:cc:
                    58:b3:88:79:19:39:d9:48:3b:fc:07:f4:50:b7:b5:
                    bc:8a:97:8b:5d:b2:0a:3e:00:cc:f7:14:ad:ee:a1:
                    e6:bb:72:97:22:3b:26:fe:c2:0e:d3:44:73:96:22:
                    b6:70:08:96:09:8d:47:cf:4d:2c:78:8e:51:b1:ee:
                    73:39:c1:d7:bf:8a:bc:cc:41:40:db:2f:94:66:f3:
                    79:4f:17:00:ca:6a:29:86:f2:da:c9:b3:58:5d:66:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BD:12:27:0E:EA:37:2F:08:77:2B:D5:E7:27:B8:E1:AA:CB:5F:89
            X509v3 Authority Key Identifier:
                keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:19:05:b5:23:34:4b:5c:45:36:e9:d6:69:d5:4c:bf:4b:aa:
         55:dd:51:04:c8:fe:3f:c6:7e:bb:ce:5d:f3:93:f1:17:ef:97:
         46:ba:78:e2:34:34:a5:3a:c7:7b:a0:36:f8:c7:2a:5c:fc:40:
         f5:88:63:85:f3:36:d7:41:05:78:05:55:55:66:17:a4:1a:79:
         a7:8f:3a:d7:d0:cb:1e:53:33:7e:95:e2:4d:48:74:21:70:bd:
         fd:89:9e:08:28:4c:56:a8:e2:ba:5b:e4:3e:e9:62:55:21:9d:
         bd:42:36:76:b8:90:51:2d:95:f2:85:c4:11:36:92:97:08:51:
         88:62:08:8a:78:45:1c:ba:8e:06:d2:20:1e:32:8d:30:36:4e:
         6a:96:3b:10:1f:13:10:b3:41:30:f1:af:65:83:ed:06:6b:13:
         6e:a8:30:7f:92:d1:29:4b:15:d4:25:9a:c6:c9:8a:97:f2:c6:
         90:b8:f5:d3:68:1f:06:45:9f:c6:bd:30:7a:57:d6:95:94:ca:
         c6:48:6a:60:ce:a3:cb:38:cc:ba:30:48:28:92:0c:d9:04:6d:
         37:8e:a8:d6:cb:df:03:0c:d9:c6:62:73:44:c4:8b:b5:90:c2:
         a5:a2:47:80:1a:6a:a2:45:a1:d3:cf:bd:9c:2b:58:1d:0e:05:
         4c:0d:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:02 2025 by rpki-client