Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
File:                     qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json)
Hash identifier:          weahrhJrB6MkekuFj4tdKNg1/plBKppboLGl+IXjblQ=
Subject key identifier:   DE:DD:87:26:E8:96:DC:83:1C:06:0C:93:BD:DA:3A:D4:C7:9B:D4:02
Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
Certificate issuer:       /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Certificate serial:       01988BB37A0D43286572767DECCC1A1A3555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
Manifest number:          04B2
Signing time:             Fri 08 Aug 2025 22:00:51 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:51 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:51 +0000
Files and hashes:         1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: Guqi+WwzUcASx1+3teTu1EqBy1Xz5lmm1dF5jvTrERw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:7a:0d:43:28:65:72:76:7d:ec:cc:1a:1a:35:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
        Validity
            Not Before: Aug  8 22:00:51 2025 GMT
            Not After : Aug  9 22:00:51 2025 GMT
        Subject: CN=dedd8726e896dc831c060c93bdda3ad4c79bd402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:66:d1:b6:54:4b:c6:cf:5e:1d:68:2a:16:
                    ab:22:cf:41:eb:c5:42:95:29:e6:ca:4f:fc:df:ff:
                    e5:86:af:a9:80:15:e5:91:63:39:08:9c:1e:9f:5a:
                    55:70:9e:9b:ba:a8:ac:db:10:f6:ab:fd:e6:0c:52:
                    6a:e1:d6:d5:1d:ab:9c:c5:bc:63:75:57:e0:87:77:
                    21:f1:e3:cc:4f:c6:4e:0d:0e:32:a3:07:b0:65:1c:
                    d7:e2:f7:87:97:62:0f:78:10:84:fc:b1:b0:6e:07:
                    ea:7d:a1:58:1d:c7:22:f6:f4:ef:63:35:19:ee:4c:
                    82:09:5c:b3:f3:ea:bd:47:af:55:0a:fc:45:8e:1a:
                    ce:58:95:c2:97:fb:6d:7f:ce:2c:3e:b6:8e:71:b6:
                    9c:c5:0a:a5:c4:7b:e5:13:9f:38:f7:33:33:fe:f2:
                    40:7e:09:98:3e:f6:f4:19:3b:be:15:60:66:04:e1:
                    33:dd:37:08:65:4b:be:c3:50:90:b7:b5:b5:f6:18:
                    4d:25:05:a2:4e:b9:1b:a6:d7:5a:f3:a7:fe:78:88:
                    ad:9a:a8:4a:07:2a:3f:42:86:c3:84:31:ff:b0:82:
                    2e:3b:dd:85:a0:36:7b:3d:a8:1c:cf:3d:a0:e2:e2:
                    d6:13:49:fe:00:d6:ad:90:19:6b:e7:95:b4:d3:a9:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DD:87:26:E8:96:DC:83:1C:06:0C:93:BD:DA:3A:D4:C7:9B:D4:02
            X509v3 Authority Key Identifier:
                keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:64:34:1f:ff:7f:4f:a6:b7:b0:d4:06:e5:f3:86:32:7b:a4:
         7a:84:ac:98:ca:58:87:ad:0d:e7:f4:67:f0:05:68:21:22:b2:
         3a:ba:fb:2b:83:44:b8:91:5d:e3:57:75:d3:67:c9:94:1a:20:
         a4:25:a0:ff:7c:ef:57:a0:49:c8:0e:19:5d:a4:5e:11:88:ae:
         20:ab:84:ac:b0:c6:82:15:a3:3b:2f:a9:f1:fa:83:78:78:39:
         1e:11:95:8c:8f:8e:ca:c9:16:b4:82:52:56:02:a4:c8:3d:f8:
         46:a2:3f:ad:99:f3:c1:6d:4b:cf:14:84:fc:59:e1:11:4b:c4:
         43:7a:c4:89:a5:b7:5e:32:ff:b3:29:3e:39:0c:6e:08:f1:2d:
         f4:02:ec:a9:c2:e3:8b:0f:7f:b7:07:7d:d5:92:2e:a2:5d:53:
         89:9e:84:0b:c7:0f:55:c1:fc:04:11:ac:77:5d:96:59:90:30:
         9d:81:28:15:5d:cb:34:c8:b1:33:ed:81:c0:2a:08:3a:d7:c9:
         02:2c:7f:c5:ed:f7:0e:20:5c:1f:fd:83:51:e1:41:fa:bf:7c:
         89:14:26:58:a0:31:34:e4:d7:e9:33:64:d1:94:f9:37:fe:21:
         c8:eb:88:e7:86:22:a1:fe:aa:d6:0b:b9:b0:b9:51:a3:95:67:
         a2:ce:2c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:11 2025 by rpki-client