Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File:                     qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier:          pdtadw6clvBTNWi+H26uSPV6pD+C8Ym9bVAnWpHgQDc=
Subject key identifier:   19:43:EE:F1:5B:3C:AC:02:D3:CB:24:0F:B0:79:9F:63:5B:A4:CE:CF
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer:       /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial:       019895923115A06817E94E9EC0A6946DB4A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number:          032E
Signing time:             Sun 10 Aug 2025 20:00:42 +0000
Manifest this update:     Sun 10 Aug 2025 20:00:42 +0000
Manifest next update:     Mon 11 Aug 2025 20:00:42 +0000
Files and hashes:         1: 9AnxnImjEc49reXZMK2FTMayLmk.roa (hash: 8tldiaw0Efa5JT0iNf3f5fRMFBv7jO6PfNRsCAPI7BY=)
                          2: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: /rXfsZ39xavlEr/PpcxzgU8XSH2eEZwBayW9dzGrScY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:31:15:a0:68:17:e9:4e:9e:c0:a6:94:6d:b4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
        Validity
            Not Before: Aug 10 20:00:42 2025 GMT
            Not After : Aug 11 20:00:42 2025 GMT
        Subject: CN=1943eef15b3cac02d3cb240fb0799f635ba4cecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:18:63:a6:85:51:ce:66:ad:08:ec:59:c1:80:
                    9f:e9:7f:67:b2:bd:e3:51:14:f1:6a:11:d6:9a:b8:
                    3e:0b:2a:ba:59:e0:b0:79:33:70:22:e1:cf:d2:f9:
                    fb:76:d1:10:79:10:9a:81:74:4a:bc:48:ce:67:02:
                    7d:d3:f6:ef:65:6b:68:6f:99:eb:ae:94:f5:f4:73:
                    c3:bc:18:4d:03:4e:71:3d:f1:11:12:4b:9e:c9:7f:
                    c5:82:75:e6:99:a9:97:34:ba:de:1a:6a:59:b2:89:
                    f6:3d:a8:62:be:3b:35:f6:af:f1:a7:6e:12:4c:32:
                    fc:5b:b8:20:19:64:9e:98:03:85:d9:ee:94:c3:38:
                    a3:9e:1f:32:33:64:98:d5:2d:7f:69:14:cb:b7:26:
                    a3:f9:e7:1c:90:3b:11:13:57:2c:d0:18:c3:80:9a:
                    cc:ef:fa:8b:b6:3a:77:21:df:14:ee:48:eb:5f:f4:
                    2b:66:1f:7c:0e:03:fd:98:04:5f:95:6f:54:49:4e:
                    df:cf:87:e5:45:11:c1:17:01:cf:3a:78:63:cc:f7:
                    40:23:1c:4a:9f:41:3d:63:f8:10:6c:d8:42:7d:52:
                    23:61:24:82:aa:29:7b:bf:da:7f:68:60:93:3f:13:
                    f9:9e:22:d6:ac:23:c1:b7:8d:12:53:e5:83:00:5b:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:43:EE:F1:5B:3C:AC:02:D3:CB:24:0F:B0:79:9F:63:5B:A4:CE:CF
            X509v3 Authority Key Identifier:
                keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b2:2b:e3:14:d4:6b:28:02:27:86:88:e9:0a:79:09:e5:5d:
         57:a3:17:1f:73:23:1f:86:39:cd:c0:10:ab:ad:88:94:4e:0f:
         1e:88:77:b4:d4:ef:a5:6b:78:ea:44:da:5c:a0:b2:ad:dd:01:
         a1:40:e8:e3:b8:0e:4a:d7:72:97:97:54:30:d3:e8:2b:20:d4:
         90:55:1a:36:e7:fb:7f:91:9e:77:4b:57:72:b2:29:97:eb:55:
         49:d6:67:42:bc:dc:bf:e6:87:1a:50:4b:4a:57:db:7d:9f:2a:
         e1:dc:e2:7f:b4:87:3f:e1:96:40:75:36:b8:32:e7:de:75:38:
         d1:db:4d:47:1b:64:d8:2e:2f:b3:95:20:fb:aa:a1:14:37:fc:
         08:72:77:7a:4c:c2:b9:62:55:5b:65:a1:30:4c:c6:fc:6c:ad:
         c5:7c:d0:25:67:aa:33:97:3b:f8:da:b5:e2:a6:51:ff:df:e1:
         b1:64:33:30:04:cc:f2:d9:b7:37:24:52:45:68:d8:82:07:01:
         61:1f:71:c2:fc:24:e7:cc:70:4b:42:b3:1f:66:90:98:b0:aa:
         45:65:b4:14:da:80:c8:e5:07:ae:9f:2f:cd:c5:37:10:16:7b:
         e6:0e:74:44:bb:06:38:99:2d:a0:47:eb:3d:04:c8:c0:0f:9f:
         b3:3e:62:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVkjEVoGgX6U6ewKaUbbSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMGY5N2U2MzUwODIxOWI5NmNiYjIxMDYzNDNmNWUxYjZk
YzVhNGYwHhcNMjUwODEwMjAwMDQyWhcNMjUwODExMjAwMDQyWjAzMTEwLwYDVQQD
EygxOTQzZWVmMTViM2NhYzAyZDNjYjI0MGZiMDc5OWY2MzViYTRjZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RhjpoVRzmatCOxZwYCf6X9nsr3j
URTxahHWmrg+Cyq6WeCweTNwIuHP0vn7dtEQeRCagXRKvEjOZwJ90/bvZWtob5nr
rpT19HPDvBhNA05xPfEREkueyX/FgnXmmamXNLreGmpZson2Pahivjs19q/xp24S
TDL8W7ggGWSemAOF2e6Uwzijnh8yM2SY1S1/aRTLtyaj+ecckDsRE1cs0BjDgJrM
7/qLtjp3Id8U7kjrX/QrZh98DgP9mARflW9USU7fz4flRRHBFwHPOnhjzPdAIxxK
n0E9Y/gQbNhCfVIjYSSCqil7v9p/aGCTPxP5niLWrCPBt40SU+WDAFtzzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlD7vFbPKwC08skD7B5n2NbpM7PMB8GA1UdIwQY
MBaAFKoPl+Y1CCGblsuyEGND9eG23FpPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYjY2ZmUtNjk5YS00MTNiLWEyZmMt
ZjUxMWZkNjg4ZWRhLzEvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYjY2ZmUtNjk5YS00MTNiLWEyZmMtZjUxMWZkNjg4ZWRh
LzEvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbIr4xTU
aygCJ4aI6Qp5CeVdV6MXH3MjH4Y5zcAQq62IlE4PHoh3tNTvpWt46kTaXKCyrd0B
oUDo47gOStdyl5dUMNPoKyDUkFUaNuf7f5Ged0tXcrIpl+tVSdZnQrzcv+aHGlBL
SlfbfZ8q4dzif7SHP+GWQHU2uDLn3nU40dtNRxtk2C4vs5Ug+6qhFDf8CHJ3ekzC
uWJVW2WhMEzG/GytxXzQJWeqM5c7+Nq14qZR/9/hsWQzMATM8tm3NyRSRWjYggcB
YR9xwvwk58xwS0KzH2aQmLCqRWW0FNqAyOUHrp8vzcU3EBZ75g50RLsGOJktoEfr
PQTIwA+fsz5iuw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:06 2025 by rpki-client