Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File:                     qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier:          DVsDaljsBXXPKZ3cmb/MPAxXvVRYagJxZQoxOPg4T1A=
Subject key identifier:   D6:B9:C2:76:0B:78:1F:13:53:26:E5:9E:88:5B:53:58:A8:D4:1D:79
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer:       /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial:       01987DF7862770BE9CA83C7CF1E2027DC673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number:          147C
Signing time:             Wed 06 Aug 2025 06:00:30 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:30 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:30 +0000
Files and hashes:         1: bqwyrPoxmVXRueWqADmdY3mrGG0.roa (hash: DoTBiSo5d9SpNBc99v9ttgOOUKnC5aTKUP1YPPWUSbU=)
                          2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: 8rm+imHH5nOsRYLrV3rrPANfUZBzDHxVcv4gtAD36TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:86:27:70:be:9c:a8:3c:7c:f1:e2:02:7d:c6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
        Validity
            Not Before: Aug  6 06:00:30 2025 GMT
            Not After : Aug  7 06:00:30 2025 GMT
        Subject: CN=d6b9c2760b781f135326e59e885b5358a8d41d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:44:e6:9e:b9:55:9c:d3:43:41:93:1b:c3:
                    a9:da:a9:0e:e6:13:5f:dc:15:d6:b3:49:4b:04:44:
                    e8:41:4b:32:44:11:a6:b7:05:aa:67:ea:a3:26:c5:
                    d2:9f:fe:23:54:47:92:9f:21:4a:d1:9e:29:15:15:
                    88:91:e2:3f:50:8f:de:f3:5a:ff:3a:d6:93:e1:83:
                    75:e0:6b:a5:b9:69:e3:25:85:19:57:8b:96:aa:55:
                    05:10:7f:2f:ec:84:d0:a0:1b:5c:45:3e:e9:53:dc:
                    a0:03:01:50:f3:9d:20:ab:5f:ae:2f:2b:d5:d6:00:
                    93:05:dd:5f:84:1a:98:9d:78:5c:b9:9a:39:7e:6d:
                    ed:40:b1:ac:aa:43:2c:98:98:af:94:c5:e7:d8:7b:
                    bf:5e:6f:ed:52:2f:90:8b:20:52:11:6d:54:b1:7c:
                    3e:d0:dd:e2:1f:64:6c:53:68:41:08:8e:8e:74:1c:
                    34:04:f4:0a:57:ca:9f:bb:1f:3e:42:c9:0f:d1:cd:
                    6c:11:40:e9:83:64:72:dc:2b:ed:24:23:57:91:2b:
                    d7:76:ad:f6:e4:74:4a:27:81:98:df:ec:f3:4a:36:
                    0c:c2:6d:28:41:34:1c:e2:9f:9d:e6:00:48:2a:cf:
                    df:11:1e:5c:a8:c2:9d:79:a9:36:f5:bd:b8:d7:27:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B9:C2:76:0B:78:1F:13:53:26:E5:9E:88:5B:53:58:A8:D4:1D:79
            X509v3 Authority Key Identifier:
                keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f6:fe:cd:98:1f:40:3c:49:44:4c:79:86:29:3a:ec:e2:b9:
         32:bc:66:fd:38:a6:01:8f:62:af:87:37:52:f0:eb:9b:d3:2b:
         ec:69:66:6f:fb:88:59:1a:27:cf:48:69:3c:b6:b0:09:a8:b2:
         f9:27:93:a5:14:3a:7d:80:75:7d:44:bd:58:5d:88:ee:6e:30:
         c3:16:68:26:30:a4:1a:47:ee:08:0d:40:85:87:11:75:b7:56:
         fa:84:9e:dd:4d:e5:af:31:c3:12:f2:28:4a:1f:b3:22:15:24:
         c5:3b:e0:29:4f:b7:d5:a6:ea:3b:a4:4d:e5:58:7d:3b:cc:58:
         8d:5d:3a:48:59:be:66:c1:24:a8:30:12:f3:9e:8e:8e:10:73:
         fe:c5:bd:23:51:29:bc:35:79:c3:51:a6:aa:cb:f4:ff:8a:a7:
         86:c8:bd:c6:46:de:c1:fc:f2:86:4a:13:7c:e5:3e:1e:9e:d5:
         68:d4:48:fe:15:fb:47:3a:90:88:ef:20:f2:94:51:b5:a5:59:
         7f:88:fc:c2:f6:f1:5e:6b:90:4a:ab:39:eb:49:14:64:0c:16:
         6d:ac:b4:07:99:fb:7a:7b:44:7f:18:0a:f7:9a:84:dd:3d:47:
         57:df:51:5c:6e:2c:a5:12:78:b0:92:15:5f:6c:87:0b:0a:83:
         e6:b4:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:11:53 2025 by rpki-client