Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
File:                     QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft (raw, json)
Hash identifier:          Pczt/qh6FTTPhMD8lwFGDEQe3jP5imLwGhnffWNLCso=
Subject key identifier:   A2:EE:A6:45:B6:46:0C:6A:D0:FC:52:77:F5:0C:37:03:9E:DB:4B:42
Authority key identifier: 40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C
Certificate issuer:       /CN=40aa71157e20d98036bbd693b8ecbb2b99f0f03c
Certificate serial:       019882B0B28C83582F625FD2F34983B46334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
Manifest number:          161C
Signing time:             Thu 07 Aug 2025 04:01:14 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:14 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:14 +0000
Files and hashes:         1: QKpxFX4g2YA2u9aTuOy7K5nw8Dw.crl (hash: V2aQWTrycJbP0fCwh/WTfULYStyp8oY+amUaViltr9I=)
                          2: zxt5ioQXS4YKJLP4ilCQM5v8g2Y.roa (hash: RY5SWWwhf3VR6uGt8AADVTrl85kwmlR4e1dP9tOTtrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b0:b2:8c:83:58:2f:62:5f:d2:f3:49:83:b4:63:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40aa71157e20d98036bbd693b8ecbb2b99f0f03c
        Validity
            Not Before: Aug  7 04:01:14 2025 GMT
            Not After : Aug  8 04:01:14 2025 GMT
        Subject: CN=a2eea645b6460c6ad0fc5277f50c37039edb4b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:5d:84:65:d1:18:67:93:81:75:09:53:03:
                    19:df:9f:6e:26:ca:66:14:be:1c:32:3d:65:02:ad:
                    79:51:a0:40:d3:fa:44:5b:3f:10:63:cb:7f:38:15:
                    a5:ee:4c:bd:9b:56:54:66:42:74:20:55:27:d3:59:
                    12:a2:38:de:d6:2e:a2:4b:99:ee:6d:b9:b6:8a:9e:
                    be:e4:08:02:de:bf:fa:7a:44:2f:3d:60:ba:56:7c:
                    4c:72:cb:56:fd:9a:68:bd:8a:18:07:84:25:bc:86:
                    1d:53:4d:bf:ad:bc:b1:ae:00:f2:6b:9d:98:68:0e:
                    0b:2d:2c:aa:f8:53:47:7d:82:56:9b:4a:e3:f0:35:
                    2b:90:c6:92:4f:dc:59:50:6d:1c:7a:09:5c:1b:5c:
                    34:33:76:88:23:6c:91:43:27:22:89:1e:b1:bf:c8:
                    7e:e2:80:19:0f:d1:62:3c:c3:91:3a:b8:54:51:39:
                    cd:4e:ea:a3:de:f8:ac:01:54:e9:99:3c:c3:6a:c6:
                    5c:d8:44:19:f7:88:1e:2b:e4:1a:da:79:16:b0:6a:
                    86:06:14:a9:30:e2:64:a6:dd:2f:9b:a1:b0:ce:32:
                    a5:7f:57:03:54:12:bf:f0:6c:77:7e:ef:53:d6:b2:
                    e0:de:21:fb:e3:12:a4:13:ce:1c:9c:64:13:f5:e0:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EE:A6:45:B6:46:0C:6A:D0:FC:52:77:F5:0C:37:03:9E:DB:4B:42
            X509v3 Authority Key Identifier:
                keyid:40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:db:35:28:af:39:85:7d:82:0d:e5:9d:47:3b:8f:23:bd:
         7b:02:70:73:76:fc:b5:d2:65:1c:c3:2e:b6:68:f3:ff:72:39:
         11:b1:37:c3:85:ac:df:32:b4:8e:90:d7:77:00:ac:4b:86:7e:
         db:c0:61:67:38:75:7e:9e:98:10:3d:03:21:01:6a:28:40:7d:
         73:d7:75:ab:0a:54:46:65:b0:5f:68:16:49:8f:26:43:81:e1:
         c6:87:d3:bf:e6:44:af:d3:f1:b1:35:db:53:83:8e:e9:bb:7b:
         6f:24:c3:94:6f:cb:fd:91:98:ec:00:17:50:6e:81:4c:4b:5b:
         52:31:c8:89:80:ac:e7:26:02:93:0b:71:3f:08:18:24:f4:51:
         61:72:65:b4:f6:7f:39:f6:e7:72:3d:01:a9:01:69:f9:3b:3a:
         23:8a:f0:0b:ce:63:65:8b:9c:53:ce:8a:1a:e5:73:53:45:5d:
         67:02:d5:85:60:31:83:8a:8a:34:fe:1a:1f:25:ee:00:6f:eb:
         8a:ae:da:90:9e:d6:2c:c3:70:a5:4e:6e:22:8b:e9:90:b7:b0:
         1b:93:b2:c0:cc:15:97:24:ae:83:c9:f1:d0:2a:2c:07:6f:d0:
         ec:1e:01:a1:96:dd:21:73:49:61:b8:2e:5f:0b:4c:fe:15:d9:
         85:9c:7f:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCsLKMg1gvYl/S80mDtGM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYWE3MTE1N2UyMGQ5ODAzNmJiZDY5M2I4ZWNiYjJiOTlm
MGYwM2MwHhcNMjUwODA3MDQwMTE0WhcNMjUwODA4MDQwMTE0WjAzMTEwLwYDVQQD
EyhhMmVlYTY0NWI2NDYwYzZhZDBmYzUyNzdmNTBjMzcwMzllZGI0YjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf5dhGXRGGeTgXUJUwMZ359uJspm
FL4cMj1lAq15UaBA0/pEWz8QY8t/OBWl7ky9m1ZUZkJ0IFUn01kSojje1i6iS5nu
bbm2ip6+5AgC3r/6ekQvPWC6VnxMcstW/ZpovYoYB4QlvIYdU02/rbyxrgDya52Y
aA4LLSyq+FNHfYJWm0rj8DUrkMaST9xZUG0ceglcG1w0M3aII2yRQyciiR6xv8h+
4oAZD9FiPMOROrhUUTnNTuqj3visAVTpmTzDasZc2EQZ94geK+Qa2nkWsGqGBhSp
MOJkpt0vm6GwzjKlf1cDVBK/8Gx3fu9T1rLg3iH74xKkE84cnGQT9eDJ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLupkW2Rgxq0PxSd/UMNwOe20tCMB8GA1UdIwQY
MBaAFECqcRV+INmANrvWk7jsuyuZ8PA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtweEZYNGcyWUEydTlhVHVPeTdLNW53OER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yZTJjOGUtNGMyYi00OGU5LWFmZDUt
MjM1YWJhMTlkOWY5LzEvUUtweEZYNGcyWUEydTlhVHVPeTdLNW53OER3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yZTJjOGUtNGMyYi00OGU5LWFmZDUtMjM1YWJhMTlkOWY5
LzEvUUtweEZYNGcyWUEydTlhVHVPeTdLNW53OER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1zbNSiv
OYV9gg3lnUc7jyO9ewJwc3b8tdJlHMMutmjz/3I5EbE3w4Ws3zK0jpDXdwCsS4Z+
28BhZzh1fp6YED0DIQFqKEB9c9d1qwpURmWwX2gWSY8mQ4HhxofTv+ZEr9PxsTXb
U4OO6bt7byTDlG/L/ZGY7AAXUG6BTEtbUjHIiYCs5yYCkwtxPwgYJPRRYXJltPZ/
Ofbncj0BqQFp+Ts6I4rwC85jZYucU86KGuVzU0VdZwLVhWAxg4qKNP4aHyXuAG/r
iq7akJ7WLMNwpU5uIovpkLewG5OywMwVlySug8nx0CosB2/Q7B4BoZbdIXNJYbgu
XwtM/hXZhZx/Pw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:19:29 2025 by rpki-client