Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File:                     QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier:          QhNmkNIuUJOHA/tUvMdb/SjlHN8OpgQgdt4h7R7gDik=
Subject key identifier:   B6:54:C6:4D:57:DB:D8:11:C4:3A:1E:36:F5:4A:09:3C:DE:13:A2:04
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer:       /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial:       0198898EEB8B2EAAF1C0B8BCDB1D41DD2D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number:          0630
Signing time:             Fri 08 Aug 2025 12:01:41 +0000
Manifest this update:     Fri 08 Aug 2025 12:01:41 +0000
Manifest next update:     Sat 09 Aug 2025 12:01:41 +0000
Files and hashes:         1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
                          2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: SML7h7NzsIJLjuuiVFT/wICOTSz4Qg7pQ+wRQkwZ54U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:8e:eb:8b:2e:aa:f1:c0:b8:bc:db:1d:41:dd:2d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
        Validity
            Not Before: Aug  8 12:01:41 2025 GMT
            Not After : Aug  9 12:01:41 2025 GMT
        Subject: CN=b654c64d57dbd811c43a1e36f54a093cde13a204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:55:bc:f2:42:08:28:bf:51:6c:ae:1a:7c:
                    03:57:de:fc:cc:df:95:3c:2f:f2:5c:67:b8:97:19:
                    75:88:e2:7c:96:19:82:36:0e:a2:bf:18:da:0c:1b:
                    19:bb:65:58:ed:3a:51:b6:80:be:03:ae:0c:7b:75:
                    d9:01:9c:15:9f:1b:d0:e7:23:45:a3:52:33:f5:82:
                    47:2a:cb:72:96:37:c1:1e:2a:21:23:22:f1:a0:7d:
                    2c:92:d3:40:18:e8:30:73:c8:7e:40:81:91:5e:38:
                    5b:24:aa:1d:55:1c:9a:61:53:79:d3:64:29:5a:cf:
                    df:b4:e7:14:69:a2:f0:f3:05:79:84:14:2f:54:39:
                    3e:c1:f9:d7:46:74:4f:4e:19:50:c0:9f:c3:51:fc:
                    d6:f0:79:09:a3:ab:9b:11:13:a4:92:41:5a:3a:19:
                    fa:93:b5:8a:c2:e2:6b:7f:f1:0e:c3:c1:3f:45:6b:
                    6b:76:c3:6e:f7:71:18:60:8f:f0:e7:4a:c2:7a:ad:
                    09:c0:b2:82:31:7a:fb:df:d9:94:04:54:f0:3e:ff:
                    4b:51:81:0b:4f:2b:49:ae:6c:3b:4b:b6:4d:77:0f:
                    14:13:c7:da:1e:80:1d:e9:a7:d4:92:f1:30:b6:30:
                    2c:22:b2:64:0c:4e:4b:89:09:45:34:e6:f9:06:10:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:54:C6:4D:57:DB:D8:11:C4:3A:1E:36:F5:4A:09:3C:DE:13:A2:04
            X509v3 Authority Key Identifier:
                keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:1a:a6:5a:96:4c:f6:23:6c:2a:c7:e5:57:86:d4:50:29:69:
         95:df:82:40:b9:d2:9b:9c:2e:d4:f8:2f:91:b4:3b:18:31:2f:
         8c:c5:40:8c:dd:8f:1b:85:25:8d:94:20:4e:f3:61:d7:73:85:
         af:f5:2b:c1:dd:f8:2f:43:c3:7c:2a:f2:55:04:88:2d:94:9b:
         51:b4:3c:a7:c1:bd:4e:78:c1:b0:46:d6:02:5b:45:ed:ac:29:
         53:6a:99:97:10:69:22:ed:12:be:de:44:48:7c:ba:a7:b8:74:
         ed:f7:42:af:e3:36:ec:ad:04:24:50:4c:0c:83:d6:08:b3:de:
         72:24:3a:d5:af:d5:c1:dc:a1:41:cb:6c:f6:af:73:83:02:f8:
         52:8c:c0:b0:0f:fc:24:30:04:e6:42:be:d6:9b:83:40:90:9c:
         9f:e4:83:58:9d:9c:df:b7:fa:61:68:61:0d:b7:ff:89:5f:34:
         b9:31:58:cb:e7:d0:94:74:4a:27:ea:33:3b:b8:3a:2d:20:9d:
         63:1f:98:08:f8:3e:5e:76:47:37:d1:70:a1:34:8d:53:8f:c8:
         9a:41:7f:16:44:d3:b2:b6:9b:48:91:56:76:4b:ae:a4:57:17:
         b4:e3:07:55:96:7a:f0:c8:b3:43:98:f1:4a:8f:0b:8c:42:52:
         14:30:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:33 2025 by rpki-client