Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File:                     QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier:          PNAveuBF6ejiruV5dwQOeselpBCyeh2J160NiuZ4tpw=
Subject key identifier:   E0:0D:46:15:46:1D:C5:06:DA:BB:EB:F0:D8:03:7B:47:AB:BA:B1:5D
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer:       /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial:       01988BB338AE0A76C769B08C8F70E7B87916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number:          117F
Signing time:             Fri 08 Aug 2025 22:00:35 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:35 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:35 +0000
Files and hashes:         1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: I/P6aEvyLrcfAVJVgar/xcHWWGJsYxQxW9pWnVBlyKg=)
                          2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:38:ae:0a:76:c7:69:b0:8c:8f:70:e7:b8:79:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
        Validity
            Not Before: Aug  8 22:00:35 2025 GMT
            Not After : Aug  9 22:00:35 2025 GMT
        Subject: CN=e00d4615461dc506dabbebf0d8037b47abbab15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:d5:80:6d:02:2c:be:e3:cb:fd:80:a9:9d:
                    17:6c:57:d0:e7:90:08:37:ee:89:cb:c2:90:d3:22:
                    45:2c:5d:7f:65:16:66:55:66:2f:76:8f:54:63:c6:
                    63:15:85:6d:f5:d1:ab:af:46:d4:c7:c7:07:5a:65:
                    51:b9:5d:dd:b8:17:6c:eb:9f:d8:f1:c3:01:09:37:
                    0a:ea:a3:89:d6:92:ae:55:65:53:59:44:6f:66:c0:
                    99:c0:9b:cc:b6:df:50:7a:f5:a5:a2:86:84:49:42:
                    46:2d:f4:5a:6d:1f:fc:f1:f7:9d:fc:7b:4a:53:e1:
                    d9:24:a8:d0:80:97:4d:ff:39:15:14:00:a4:33:91:
                    24:34:54:81:94:14:81:1a:a5:bb:20:f7:c6:24:36:
                    b2:dc:b8:42:31:1c:99:b2:38:88:14:5c:9a:e4:e8:
                    84:7d:38:16:f8:fc:ab:7c:7b:36:21:f0:98:8f:94:
                    40:69:b2:6e:11:b6:1f:f6:e2:17:24:b4:2b:2f:fd:
                    e6:8f:48:75:99:52:10:be:78:3b:fb:e0:33:d0:10:
                    54:a0:44:22:11:69:6d:5f:e5:af:16:eb:c6:d8:63:
                    b3:25:8f:b8:8e:c3:9f:d3:ce:f7:82:f0:83:40:f1:
                    b1:c5:9e:c9:e8:c7:98:12:33:d1:38:12:79:6c:85:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0D:46:15:46:1D:C5:06:DA:BB:EB:F0:D8:03:7B:47:AB:BA:B1:5D
            X509v3 Authority Key Identifier:
                keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5b:a2:df:32:08:9e:59:59:25:91:00:30:51:ea:c2:f4:dd:
         a9:2d:50:42:13:22:bf:5b:9c:6c:57:f5:15:e9:a7:ee:20:65:
         7f:0f:1e:28:05:a4:70:b8:f7:ca:7f:5a:91:30:68:60:99:e8:
         34:a7:b3:08:11:cc:68:df:3f:cb:fe:4e:70:26:82:35:c7:c3:
         a9:ff:1d:ca:81:a1:b4:1b:6f:a8:14:d4:7f:68:69:3e:cb:c1:
         bc:30:fb:2c:2e:b7:83:fc:c9:36:c7:06:ee:3e:60:51:2a:37:
         72:05:7c:51:3c:0d:64:57:c4:27:1d:53:8a:e8:41:18:0d:c7:
         83:18:12:3d:ac:b0:dd:7e:27:f8:9e:e4:ac:56:b0:8e:d5:8d:
         2b:28:56:1f:f4:73:cd:52:53:a8:08:26:55:c6:3c:42:d1:22:
         7f:3f:2b:ef:67:b5:16:59:11:a1:c1:22:ff:80:4b:e1:9b:c8:
         37:a3:cc:2b:71:86:ec:c7:f4:f8:a5:c3:2a:82:36:ea:26:e8:
         a5:f5:e5:0d:d8:ea:0a:9f:3f:df:18:c7:ce:9e:c1:15:9a:ce:
         f9:3c:4e:79:e3:9a:ca:37:62:ff:bb:65:32:62:93:c0:8e:47:
         2e:19:6a:28:81:7e:80:d1:2e:0a:6d:32:76:5a:98:df:67:f5:
         3b:0a:93:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLsziuCnbHabCMj3DnuHkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk
NGU1OTIwHhcNMjUwODA4MjIwMDM1WhcNMjUwODA5MjIwMDM1WjAzMTEwLwYDVQQD
EyhlMDBkNDYxNTQ2MWRjNTA2ZGFiYmViZjBkODAzN2I0N2FiYmFiMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJLVgG0CLL7jy/2AqZ0XbFfQ55AI
N+6Jy8KQ0yJFLF1/ZRZmVWYvdo9UY8ZjFYVt9dGrr0bUx8cHWmVRuV3duBds65/Y
8cMBCTcK6qOJ1pKuVWVTWURvZsCZwJvMtt9QevWlooaESUJGLfRabR/88fed/HtK
U+HZJKjQgJdN/zkVFACkM5EkNFSBlBSBGqW7IPfGJDay3LhCMRyZsjiIFFya5OiE
fTgW+PyrfHs2IfCYj5RAabJuEbYf9uIXJLQrL/3mj0h1mVIQvng7++Az0BBUoEQi
EWltX+WvFuvG2GOzJY+4jsOf0873gvCDQPGxxZ7J6MeYEjPROBJ5bIXO2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOANRhVGHcUG2rvr8NgDe0erurFdMB8GA1UdIwQY
MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt
MmJmODc0YTY3MWU4LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4
LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1ui3zII
nllZJZEAMFHqwvTdqS1QQhMiv1ucbFf1Femn7iBlfw8eKAWkcLj3yn9akTBoYJno
NKezCBHMaN8/y/5OcCaCNcfDqf8dyoGhtBtvqBTUf2hpPsvBvDD7LC63g/zJNscG
7j5gUSo3cgV8UTwNZFfEJx1TiuhBGA3HgxgSPayw3X4n+J7krFawjtWNKyhWH/Rz
zVJTqAgmVcY8QtEifz8r72e1FlkRocEi/4BL4ZvIN6PMK3GG7Mf0+KXDKoI26ibo
pfXlDdjqCp8/3xjHzp7BFZrO+TxOeeOayjdi/7tlMmKTwI5HLhlqKIF+gNEuCm0y
dlqY32f1OwqTBw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:30 2025 by rpki-client