Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File:                     QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier:          JXYpoSMGwKiWHnrinriav5WjG3e+uem0n+/zpO5/Ioo=
Subject key identifier:   A6:A7:83:30:4E:AF:BE:53:A8:EB:DB:5B:7F:5B:1E:42:32:3C:13:E8
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer:       /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial:       019872D00E84019AC59C4EB8C61C0EEDB4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number:          04B6
Signing time:             Mon 04 Aug 2025 02:01:34 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:34 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:34 +0000
Files and hashes:         1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: r4LJB3GZ/9F2FfSMaODEqZoJdA8u3BPljM+WguCyNws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:d0:0e:84:01:9a:c5:9c:4e:b8:c6:1c:0e:ed:b4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
        Validity
            Not Before: Aug  4 02:01:34 2025 GMT
            Not After : Aug  5 02:01:34 2025 GMT
        Subject: CN=a6a783304eafbe53a8ebdb5b7f5b1e42323c13e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:10:40:44:62:f3:b3:8c:45:a5:69:8b:d4:
                    82:a8:ff:d5:6a:18:03:f6:4e:1c:1c:c2:ef:a0:29:
                    e5:dc:92:bf:96:b7:bd:1a:11:85:41:56:db:14:ea:
                    e1:e4:3a:fe:c3:28:69:09:55:bf:dd:b9:e4:e7:55:
                    c6:be:64:17:ce:24:59:ae:55:59:70:f5:3c:65:a8:
                    68:7d:8e:10:e6:64:ca:a7:0a:4d:aa:6b:cf:c4:8d:
                    6d:a4:a4:80:26:45:c6:ce:b5:7b:90:5d:d0:2a:ad:
                    5b:9e:f7:03:ae:59:fc:76:ac:05:25:71:26:10:c7:
                    8b:57:d0:bd:7b:64:55:61:40:16:e7:43:c2:da:e6:
                    93:a1:7d:cf:9a:26:e2:ea:39:82:8c:29:cc:ac:51:
                    83:16:ae:98:54:03:90:0a:68:5c:db:9b:ca:24:b0:
                    d1:bc:c1:2c:ad:f7:93:28:57:88:e1:69:2d:e2:55:
                    fe:78:1e:03:14:95:93:e2:d7:51:ae:dd:0f:26:82:
                    cc:89:59:77:95:48:16:4c:42:82:cf:5e:a3:16:2d:
                    ce:81:ee:98:46:20:bb:86:3a:d9:0c:e0:64:b4:5b:
                    61:4d:1f:5b:75:66:79:56:42:1b:9b:c8:40:3a:3f:
                    20:b5:bb:8f:6e:e2:8a:e5:3d:db:bc:23:d3:99:3c:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A7:83:30:4E:AF:BE:53:A8:EB:DB:5B:7F:5B:1E:42:32:3C:13:E8
            X509v3 Authority Key Identifier:
                keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:19:bc:17:17:a3:18:e6:d1:df:e9:d8:60:a3:3e:7c:92:22:
         08:2c:ff:a5:c6:71:ea:a7:43:14:de:7e:03:ed:cf:3a:d6:47:
         00:3f:80:3c:5d:45:25:33:58:2c:b2:26:27:9f:a4:48:65:2a:
         cb:2e:ef:35:c1:a4:c3:cf:3a:03:52:08:c1:a3:a2:eb:83:6d:
         68:2a:bc:88:45:e6:7d:33:f2:9b:01:a9:f8:4a:a1:2a:80:e2:
         c5:f4:c7:3a:6c:1d:5d:37:57:ad:d4:54:6e:f1:1b:7a:08:7d:
         dc:e7:b0:e2:30:bd:01:fd:70:8c:27:91:2e:ed:b7:04:9e:fd:
         e9:ab:ff:6c:9d:a6:3c:76:05:2c:52:3e:c0:02:8c:28:8c:db:
         3d:2d:c3:8e:65:43:fa:4b:ab:fa:b7:ee:bb:79:23:af:43:ba:
         6d:5e:4e:dc:ad:ee:e8:23:b7:de:81:29:d1:3b:a5:c4:21:9e:
         4d:9f:01:aa:d6:1f:c0:e7:f7:96:04:25:92:81:1a:90:81:d8:
         49:e5:56:57:08:6b:c0:c1:a0:0c:f1:3c:c5:4c:36:b8:6c:24:
         ba:51:a2:83:c3:74:31:18:64:3d:fd:48:0d:7e:61:66:34:1b:
         c4:5f:93:c6:3e:91:e6:1d:15:48:52:97:b6:42:66:02:76:b7:
         db:17:c7:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhy0A6EAZrFnE64xhwO7bTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWJmY2IwNTU4Yzg2ZjgxM2QwMTEwNDVmZDE3ZDE2YWUy
ZWJlOGUwHhcNMjUwODA0MDIwMTM0WhcNMjUwODA1MDIwMTM0WjAzMTEwLwYDVQQD
EyhhNmE3ODMzMDRlYWZiZTUzYThlYmRiNWI3ZjViMWU0MjMyM2MxM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB0QQERi87OMRaVpi9SCqP/VahgD
9k4cHMLvoCnl3JK/lre9GhGFQVbbFOrh5Dr+wyhpCVW/3bnk51XGvmQXziRZrlVZ
cPU8ZahofY4Q5mTKpwpNqmvPxI1tpKSAJkXGzrV7kF3QKq1bnvcDrln8dqwFJXEm
EMeLV9C9e2RVYUAW50PC2uaToX3Pmibi6jmCjCnMrFGDFq6YVAOQCmhc25vKJLDR
vMEsrfeTKFeI4Wkt4lX+eB4DFJWT4tdRrt0PJoLMiVl3lUgWTEKCz16jFi3Oge6Y
RiC7hjrZDOBktFthTR9bdWZ5VkIbm8hAOj8gtbuPbuKK5T3bvCPTmTy1UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKangzBOr75TqOvbW39bHkIyPBPoMB8GA1UdIwQY
MBaAFEFb/LBVjIb4E9ARBF/RfRauLr6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEt
ODcxZWRlOTAxNGU0LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEtODcxZWRlOTAxNGU0
LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRm8Fxej
GObR3+nYYKM+fJIiCCz/pcZx6qdDFN5+A+3POtZHAD+APF1FJTNYLLImJ5+kSGUq
yy7vNcGkw886A1IIwaOi64NtaCq8iEXmfTPymwGp+EqhKoDixfTHOmwdXTdXrdRU
bvEbegh93Oew4jC9Af1wjCeRLu23BJ796av/bJ2mPHYFLFI+wAKMKIzbPS3DjmVD
+kur+rfuu3kjr0O6bV5O3K3u6CO33oEp0TulxCGeTZ8BqtYfwOf3lgQlkoEakIHY
SeVWVwhrwMGgDPE8xUw2uGwkulGig8N0MRhkPf1IDX5hZjQbxF+Txj6R5h0VSFKX
tkJmAna32xfHAA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:55 2025 by rpki-client