Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File:                     Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier:          vTsKk+hn9ZCp3brQZExrAny/1bBnulbgHJv3IFXcxtk=
Subject key identifier:   F3:77:E0:18:F1:50:32:4C:E0:B8:52:3F:08:70:33:56:C5:5A:05:9D
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer:       /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial:       01987F0A2E51735C373564C74D9304E70497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number:          111F
Signing time:             Wed 06 Aug 2025 11:00:29 +0000
Manifest this update:     Wed 06 Aug 2025 11:00:29 +0000
Manifest next update:     Thu 07 Aug 2025 11:00:29 +0000
Files and hashes:         1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: cIZlFcq0IihrTSrdhT8Ir8/nQ4FFFhZsqVybtmvitI0=)
                          2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:0a:2e:51:73:5c:37:35:64:c7:4d:93:04:e7:04:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
        Validity
            Not Before: Aug  6 11:00:29 2025 GMT
            Not After : Aug  7 11:00:29 2025 GMT
        Subject: CN=f377e018f150324ce0b8523f08703356c55a059d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:71:e6:ae:55:1a:14:2e:31:67:48:b3:0e:
                    30:50:48:b6:05:a2:8a:77:9f:5e:30:dd:a5:dc:c9:
                    b4:a0:82:24:0b:f6:4e:52:2e:5b:15:1d:f9:fb:52:
                    b5:b7:e4:af:3f:51:bd:4b:89:8f:0b:61:9e:08:52:
                    aa:87:a4:9d:58:a3:b0:b8:f8:8c:e8:9f:a9:da:2e:
                    f9:80:62:e1:1c:3e:6c:3e:0e:ae:e2:1f:72:a7:dc:
                    e2:56:38:21:f4:d0:ba:c4:60:8c:1f:a6:81:b4:f7:
                    82:07:4c:8d:e3:4d:d0:ae:b2:66:7d:7d:41:04:7e:
                    82:0f:b8:c1:82:29:f8:f4:cd:7a:ed:8d:fb:8a:69:
                    16:91:8e:87:d3:e4:e8:c9:d6:f2:93:e8:ce:5a:aa:
                    9d:2b:a2:dd:4d:2c:38:b3:d9:42:9e:26:3e:45:da:
                    b5:54:57:53:99:73:8c:90:b3:cc:7a:3b:a2:0a:1a:
                    a4:82:b5:29:7f:30:01:91:8e:0d:aa:67:d7:14:35:
                    b8:ab:61:d7:a9:96:4a:f2:71:c2:e8:48:56:dd:8a:
                    77:80:f1:fa:72:43:25:b3:40:72:60:1e:eb:29:0e:
                    ab:24:db:21:7f:49:2a:96:d9:60:cb:51:53:58:52:
                    c7:6e:3d:c7:18:bc:bf:97:ac:ee:5d:92:97:38:95:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:E0:18:F1:50:32:4C:E0:B8:52:3F:08:70:33:56:C5:5A:05:9D
            X509v3 Authority Key Identifier:
                keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:a0:e9:c8:4a:11:73:24:8d:cf:fe:c9:55:a2:c3:30:89:f5:
         45:f4:d2:00:87:71:5f:61:4b:d4:0a:59:6d:19:14:87:8b:18:
         5c:25:c2:3b:ed:73:06:42:09:6b:31:3c:63:50:34:29:59:35:
         89:b8:30:63:6b:88:2d:8b:99:e4:41:fd:64:3a:52:b8:97:23:
         f1:e3:f9:8d:c8:e0:c2:3e:54:21:c1:ca:59:81:b7:ea:d8:ad:
         01:0e:72:7f:d3:fb:d0:26:71:8b:63:fa:2d:47:3d:0b:83:2f:
         eb:14:78:99:05:62:ba:5c:a0:3c:b7:54:43:f7:7c:d6:c7:9b:
         c7:fe:4f:5b:03:f4:ef:cd:c4:d6:4e:5f:c7:f5:a6:0c:23:55:
         75:81:8f:35:82:3c:22:04:d6:8a:c4:5d:de:f8:96:af:0d:d3:
         61:06:e5:71:07:3f:2e:52:81:fb:c6:a4:ae:f7:06:0f:89:08:
         66:34:a5:b9:17:65:49:46:27:1d:cf:6e:33:5d:4b:a0:60:4e:
         0f:8a:68:f7:d2:cb:2c:f4:4c:54:68:60:86:00:a0:d1:f0:95:
         4d:95:22:8b:24:15:55:57:91:93:bd:9f:27:0f:b1:50:49:cd:
         5b:f1:e4:e8:05:a3:ea:bc:59:88:f1:d8:0d:45:01:24:2c:69:
         ab:fa:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:05:31 2025 by rpki-client