Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File:                     Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier:          voHHky7qWlrg8IzFFLPeiQzGhnQE94frX5ppCzBiFGM=
Subject key identifier:   CC:0D:7B:5D:01:3B:BD:A9:3E:70:A5:B1:5E:1D:37:90:5A:61:8E:BD
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer:       /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial:       01988BEAC2AE7BBD4120A8C0FFED4EF743EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number:          1629
Signing time:             Fri 08 Aug 2025 23:01:14 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:14 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:14 +0000
Files and hashes:         1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: 7FmznYSacPEv1ELyDTIxPWk13HShoFmU2n7qt29DhcU=)
                          2: ymSnyZ91fxVC39LRAlSHciRZ46Y.roa (hash: 9upse4LtnCnU7pMyWCgkPTtYXe3IQqerCyozn8qome0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:c2:ae:7b:bd:41:20:a8:c0:ff:ed:4e:f7:43:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
        Validity
            Not Before: Aug  8 23:01:14 2025 GMT
            Not After : Aug  9 23:01:14 2025 GMT
        Subject: CN=cc0d7b5d013bbda93e70a5b15e1d37905a618ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:00:4b:9f:b9:a1:f8:e6:3e:a5:68:04:b4:c1:
                    d2:a7:9a:00:60:62:a0:fc:b6:01:2a:6b:0b:8e:c9:
                    e7:e0:13:d2:9b:70:78:9b:e4:cc:01:3a:93:a1:5a:
                    21:9c:b7:24:20:01:37:41:b0:da:8d:b8:50:cd:4f:
                    98:92:b4:2b:2b:e6:34:d8:3e:fa:25:39:0d:80:77:
                    51:77:e6:0d:d1:ba:c3:03:02:bf:f7:fa:42:05:87:
                    c6:e2:9c:40:d3:99:0a:d0:7e:64:1d:26:87:43:43:
                    78:f7:f6:4b:91:4f:c3:bc:31:41:36:13:90:e7:1c:
                    79:8e:f6:21:31:18:e7:ce:73:33:74:fa:f9:7a:5a:
                    e8:23:f2:3d:6d:3b:4c:38:5c:6c:67:66:4e:10:37:
                    71:55:48:88:92:ca:4d:91:1b:47:3a:77:bb:6c:a6:
                    8d:91:61:88:5c:0f:bc:1d:45:4e:30:fc:45:f9:db:
                    52:11:12:36:9c:5f:b4:84:a3:e6:ad:2f:08:19:f3:
                    50:06:1f:c5:83:80:5e:c3:2f:3d:d8:9c:08:8f:b4:
                    77:55:fe:f4:d4:01:5e:b4:af:df:4b:5d:aa:14:6a:
                    a7:ad:82:10:4f:eb:c5:90:fe:50:08:69:73:ea:36:
                    d3:3d:b8:a2:c0:4d:b1:b3:84:94:4e:fe:9a:60:cb:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0D:7B:5D:01:3B:BD:A9:3E:70:A5:B1:5E:1D:37:90:5A:61:8E:BD
            X509v3 Authority Key Identifier:
                keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:45:16:e0:f1:3b:6e:91:7f:c8:ba:14:84:bb:0e:b7:31:c1:
         30:e5:dd:d3:14:c3:e0:a2:fe:75:98:04:a9:5e:46:91:a3:63:
         ad:c4:79:ac:ab:5f:95:f8:d6:e0:be:a6:b1:2b:86:bd:ec:54:
         ca:04:eb:ad:35:39:40:44:d1:47:4f:46:a6:fc:1a:a4:11:ab:
         7a:1e:86:b2:dd:c5:99:54:08:42:69:1c:95:70:dc:80:ae:c4:
         58:cc:87:e6:38:58:e1:36:f8:ae:b1:b1:6e:58:f6:6e:b4:68:
         05:3f:5d:fd:a2:48:67:b3:16:cf:9c:73:87:81:5b:b1:be:41:
         ea:08:a4:dd:b1:9b:bb:51:95:6b:d7:e8:7c:b8:ba:3b:3b:30:
         50:31:a7:48:a6:e8:1b:35:17:b5:f8:cc:83:ac:d0:55:93:99:
         a0:0a:8f:ad:4f:81:db:f9:0c:45:61:f2:1b:88:1f:48:84:22:
         d7:38:9a:28:e1:c7:c0:62:7e:f5:e7:16:c8:28:eb:ed:a8:61:
         a9:7d:52:1b:72:70:91:ba:76:92:13:dd:e7:53:09:2d:df:40:
         18:27:fe:da:60:1f:01:96:a9:36:7f:48:b6:32:ed:de:7b:aa:
         2e:d7:af:e4:ff:cd:0c:63:b0:f9:c3:fb:a7:f2:91:b1:43:7f:
         ff:29:ac:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:11 2025 by rpki-client