Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File:                     QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier:          mCVw5Ng7N7FHQebG7QnLgFrcmAjfsQOxtFXlvPUmq+Y=
Subject key identifier:   63:1E:7E:86:8B:38:4B:3B:27:36:BE:97:1C:C3:17:02:E0:1E:7A:18
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer:       /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial:       01989411F177CB1547AF8FA29E29D9CDE1E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number:          02B0
Signing time:             Sun 10 Aug 2025 13:01:00 +0000
Manifest this update:     Sun 10 Aug 2025 13:01:00 +0000
Manifest next update:     Mon 11 Aug 2025 13:01:00 +0000
Files and hashes:         1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: E/zEQT6tWpZRa7QPjnwVWowtp4xgNm0IaYpAaL6Nvgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:11:f1:77:cb:15:47:af:8f:a2:9e:29:d9:cd:e1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
        Validity
            Not Before: Aug 10 13:01:00 2025 GMT
            Not After : Aug 11 13:01:00 2025 GMT
        Subject: CN=631e7e868b384b3b2736be971cc31702e01e7a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:f7:1b:a4:9b:87:f5:1a:f9:3f:54:ed:cb:
                    30:b0:04:7a:f8:c6:11:83:07:b2:6f:7c:10:43:81:
                    2a:15:d2:2d:bb:45:65:31:ff:9d:31:67:78:6c:d4:
                    be:c1:c5:57:a9:86:e5:dd:01:85:ba:97:21:46:c3:
                    b7:d1:4f:1e:75:e0:c6:1d:b5:34:dc:73:9d:06:34:
                    69:7b:b7:12:e0:fc:bd:52:c1:12:c9:35:68:cb:30:
                    d9:e3:77:bd:90:12:f9:74:ea:f6:99:dd:8e:51:0a:
                    23:d7:22:86:d8:cf:66:b2:f7:be:0f:02:d7:75:e7:
                    d3:4d:06:99:6d:61:a3:90:70:72:0a:a0:73:ce:54:
                    7d:9d:40:9c:d8:e2:ca:94:db:e9:e1:af:60:1f:42:
                    3c:74:9f:5b:ea:85:bf:88:64:c8:dd:00:c0:23:dd:
                    b9:c2:f1:a2:7d:3c:79:37:ce:36:4d:b7:0d:70:65:
                    9d:20:e0:41:22:c0:bf:cf:2a:f1:e4:d9:3e:de:dc:
                    7e:de:f2:96:5f:2e:90:86:0d:58:11:4f:f4:fe:84:
                    d6:01:5f:87:08:8c:d6:0d:95:68:43:bc:bc:1e:a8:
                    1c:e2:0b:66:f0:b0:f0:89:f8:29:18:8b:5b:1a:ec:
                    31:9c:9a:6a:6d:df:48:67:30:e2:f4:d8:c8:3a:bf:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:7E:86:8B:38:4B:3B:27:36:BE:97:1C:C3:17:02:E0:1E:7A:18
            X509v3 Authority Key Identifier:
                keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:8d:d8:93:3d:99:34:a1:07:35:15:a8:3f:50:d6:e5:26:
         53:af:4c:2c:dd:a2:f1:ad:ff:e7:cc:ad:c1:e7:37:97:f7:b0:
         7a:97:8d:32:68:75:38:99:73:85:3b:21:c2:a1:f9:f2:fe:ef:
         fc:8f:04:b0:e6:08:c1:25:21:b7:3e:19:97:a1:04:79:73:c0:
         e5:cd:04:e2:5f:a7:82:c9:12:66:9b:70:c4:6e:70:43:67:86:
         05:6f:b6:ea:1b:10:96:3a:ee:19:d1:94:54:28:f1:8a:ad:72:
         70:59:35:07:b1:eb:2b:39:45:4f:03:ed:3b:e4:42:b3:fe:22:
         9c:5a:7b:32:16:5d:5f:94:74:45:c0:ec:d0:2d:f4:f0:6c:ab:
         89:9b:1e:5d:25:bb:39:32:f9:1b:a4:dd:3f:6b:0c:61:7a:0e:
         21:ff:7a:bc:43:0b:ae:71:e4:12:7d:b5:bf:0a:2c:53:f6:a3:
         9b:2a:7c:c6:f1:f5:61:19:9d:6c:dc:e8:b9:f0:bf:82:8a:8c:
         1f:dc:05:41:63:97:6a:93:16:18:73:7b:2a:43:0a:12:d8:e9:
         5c:d2:dd:5a:e6:82:95:99:f4:f8:bd:fa:bd:7d:ce:9a:69:02:
         13:68:2e:a2:61:08:39:1a:1c:a4:61:7f:34:25:76:8c:f6:0f:
         9d:e3:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:59 2025 by rpki-client