Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File:                     QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier:          IymDedagy1JzCJ2es4/pht9lYKiZQ2itiS7HKdQfiMc=
Subject key identifier:   07:3C:59:5C:39:20:9F:05:7B:7D:07:7C:32:96:6A:02:65:4B:C8:7F
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer:       /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial:       0198960094E79C3989B725C318E24529AB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number:          157D
Signing time:             Sun 10 Aug 2025 22:01:17 +0000
Manifest this update:     Sun 10 Aug 2025 22:01:17 +0000
Manifest next update:     Mon 11 Aug 2025 22:01:17 +0000
Files and hashes:         1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: 3CwFP9TnkfqlZnFbv+UhmTHuRq1NCeZtM3rmdOYNFJ4=)
                          2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:00:94:e7:9c:39:89:b7:25:c3:18:e2:45:29:ab:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
        Validity
            Not Before: Aug 10 22:01:17 2025 GMT
            Not After : Aug 11 22:01:17 2025 GMT
        Subject: CN=073c595c39209f057b7d077c32966a02654bc87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:a8:a6:d3:ca:89:17:09:1e:74:cf:08:ab:
                    10:76:21:55:0d:6d:fa:fa:7d:65:68:26:82:1e:6d:
                    7d:9d:14:c2:3d:bf:af:e3:09:6f:8b:b2:05:eb:e0:
                    e6:2a:36:02:eb:01:1a:87:9f:10:60:d1:62:b9:c4:
                    30:10:ef:5c:96:11:23:13:1a:d9:32:36:70:40:57:
                    58:dc:12:09:18:21:bc:ef:51:c7:0b:92:35:88:8c:
                    1a:36:56:2b:a9:e6:a8:b6:7c:25:22:97:69:11:f3:
                    1b:bc:2b:94:09:46:8d:dc:25:71:94:74:cf:86:9a:
                    2f:5c:32:7d:ef:0d:2c:ff:59:6d:14:51:c7:c4:b9:
                    62:e5:cc:fe:37:9b:58:ee:ce:a8:65:25:fb:bd:3f:
                    4e:96:c0:46:65:87:ef:75:b5:b7:36:0d:14:10:90:
                    44:03:05:90:ab:a1:5d:59:8a:61:04:18:d6:dc:f7:
                    d1:b4:f3:4e:23:1b:fa:27:9f:ce:9b:e0:8e:9b:7d:
                    22:2f:b9:df:ea:44:c4:0d:e8:c0:04:4f:cf:c4:d8:
                    03:2e:88:6a:07:28:29:b4:bb:a8:b3:67:af:30:66:
                    a8:bc:73:59:75:7b:a2:87:b1:96:e9:93:e7:64:a2:
                    7b:30:55:bb:9c:41:8a:1b:4f:5c:92:3d:44:71:14:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3C:59:5C:39:20:9F:05:7B:7D:07:7C:32:96:6A:02:65:4B:C8:7F
            X509v3 Authority Key Identifier:
                keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:13:de:18:dd:08:8c:6e:6f:02:f5:77:f8:ce:de:a2:5b:
         f5:68:6e:c5:fe:69:39:83:27:31:ee:11:40:1e:f4:0d:df:d3:
         fe:a5:4c:fe:a1:60:71:cf:9e:97:4f:47:a2:c2:ad:81:71:de:
         10:a3:86:10:44:97:d0:85:37:63:d3:1a:d5:34:5e:ba:20:01:
         04:97:d9:e6:44:84:de:41:67:84:07:20:0f:f2:f9:a3:42:b1:
         22:3b:7d:19:7c:d5:6f:96:66:e0:6b:68:f9:fb:c7:bc:ff:34:
         92:00:38:1a:2d:48:d0:a2:66:02:96:79:75:d2:38:f6:2f:31:
         76:2c:30:d5:00:30:71:0a:d2:16:bb:41:fe:e9:30:45:ab:30:
         50:96:01:12:5b:8a:a4:39:d1:bb:98:5f:53:de:ec:ff:c5:df:
         ce:7d:55:68:a9:8b:33:c1:83:88:e8:56:ea:65:aa:de:d2:97:
         3d:06:3d:72:f4:c0:1c:c1:86:0c:c4:70:25:48:16:59:bf:97:
         5b:68:11:ed:82:4c:b0:5c:48:2c:96:bb:17:d1:d8:42:ae:3f:
         16:14:b5:a3:02:d5:63:21:92:83:14:2c:b9:bc:ab:50:9b:ee:
         5a:98:0b:27:cb:47:86:d4:29:1c:0a:78:31:e7:d9:58:38:76:
         ca:cd:75:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:06 2025 by rpki-client