Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
File:                     QAlHG9muvWlFaoNaP7CjUbBSZgI.mft (raw, json)
Hash identifier:          8K7DzQ+gJDRbbjZQYARvalH1Eibiw0iUj/V3i2ZkwZM=
Subject key identifier:   85:38:EC:C8:E9:C8:45:A7:99:32:2A:DB:B6:A2:B8:FD:FD:F0:38:FF
Authority key identifier: 40:09:47:1B:D9:AE:BD:69:45:6A:83:5A:3F:B0:A3:51:B0:52:66:02
Certificate issuer:       /CN=4009471bd9aebd69456a835a3fb0a351b0526602
Certificate serial:       01988B45E09C174599BF92810855A3DD60AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QAlHG9muvWlFaoNaP7CjUbBSZgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
Manifest number:          3F
Signing time:             Fri 08 Aug 2025 20:01:09 +0000
Manifest this update:     Fri 08 Aug 2025 20:01:09 +0000
Manifest next update:     Sat 09 Aug 2025 20:01:09 +0000
Files and hashes:         1: QAlHG9muvWlFaoNaP7CjUbBSZgI.crl (hash: E+cEsV67VKLTCcy3LasmCxCbEz96QM8OcEookINEKLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QAlHG9muvWlFaoNaP7CjUbBSZgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:e0:9c:17:45:99:bf:92:81:08:55:a3:dd:60:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4009471bd9aebd69456a835a3fb0a351b0526602
        Validity
            Not Before: Aug  8 20:01:09 2025 GMT
            Not After : Aug  9 20:01:09 2025 GMT
        Subject: CN=8538ecc8e9c845a799322adbb6a2b8fdfdf038ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:3b:d0:98:c4:19:4c:c2:22:dc:39:78:84:
                    8e:37:99:cd:bb:be:a7:5c:b1:eb:51:c0:e7:76:b5:
                    30:78:4b:25:02:c0:f5:37:e9:b1:69:0e:53:56:4f:
                    d4:56:ed:20:95:6a:29:d8:53:2a:03:d1:71:65:00:
                    11:f8:a8:af:b2:ef:b4:fd:79:82:65:88:5a:9f:a2:
                    e7:49:91:28:aa:30:43:29:4b:28:60:4e:4e:a0:3d:
                    78:90:2d:da:df:ef:14:96:84:3f:8c:f0:2f:0c:27:
                    32:01:b9:7e:d1:3d:f4:e6:49:69:b5:af:7d:f6:2e:
                    91:8d:7c:d9:c8:cb:c7:ec:6d:fd:30:d8:77:68:c6:
                    35:16:cc:9b:a1:ea:7f:49:9c:d1:29:27:3d:ea:e6:
                    65:47:b9:4a:77:a4:8b:0d:c3:19:bf:17:80:c8:48:
                    92:9f:7f:7c:3a:88:e3:ff:9b:41:d5:76:a4:9c:4b:
                    7f:e4:af:4a:c3:b9:39:bc:d6:f3:8c:0a:eb:2c:ca:
                    9e:e2:79:cf:c1:fc:d7:f4:e1:a9:d1:f8:41:74:64:
                    41:93:4c:8a:c8:c3:2f:fd:5b:ec:5e:0c:d0:cd:49:
                    9b:5b:62:32:e8:4d:ee:db:5f:32:b9:e9:8d:b6:21:
                    06:c2:c9:e3:b9:ca:a3:88:db:01:38:3f:91:9c:06:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:38:EC:C8:E9:C8:45:A7:99:32:2A:DB:B6:A2:B8:FD:FD:F0:38:FF
            X509v3 Authority Key Identifier:
                keyid:40:09:47:1B:D9:AE:BD:69:45:6A:83:5A:3F:B0:A3:51:B0:52:66:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAlHG9muvWlFaoNaP7CjUbBSZgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:cb:dd:f9:65:1a:43:9a:4c:41:1c:d9:f9:2d:a6:5d:5d:6b:
         c3:c4:ca:a5:bd:2f:c2:dd:e6:03:35:ca:e0:7e:03:47:a4:8c:
         f8:42:47:98:e7:8b:cc:cb:66:b5:b0:81:6c:e5:fd:55:1a:68:
         a9:08:df:c2:d7:e5:d4:1b:1f:1c:8e:d7:3e:b4:c6:d7:3d:c4:
         3f:07:a9:bb:53:fb:ec:19:f9:fd:6f:d7:51:00:7a:c1:59:75:
         6b:46:a3:4a:d7:4c:43:d7:af:ed:29:2a:26:6c:fe:de:ae:63:
         55:8c:8c:a4:42:0e:90:39:ef:07:03:7d:bd:e9:96:90:1b:61:
         22:ac:c5:cb:6b:64:db:dd:21:3a:b8:61:c9:15:7d:b9:f6:bc:
         27:82:6d:ee:20:f5:c3:f2:2a:7e:82:64:37:ab:8f:df:1b:8d:
         d7:b9:a3:ec:55:5f:ce:fa:d8:7d:b3:ba:f3:d0:5f:e8:eb:6b:
         ac:d3:f3:a4:6f:1c:f2:57:95:26:30:8d:e5:0c:9d:36:a3:fc:
         a8:2d:16:60:96:4f:77:3c:22:c6:1f:de:fd:ae:f3:b4:ad:62:
         04:ba:b2:0e:a2:f0:49:2e:6f:66:aa:f6:f5:01:94:71:25:82:
         eb:34:c5:96:3d:d7:88:9d:e5:b9:19:2f:19:1a:00:1b:9a:3c:
         6d:14:61:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:50 2025 by rpki-client