Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File:                     QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier:          L+S3zR8m8CEj//vuxBB8rid72LJ4hrTqx7AHd7KUW+Y=
Subject key identifier:   3C:D4:92:66:39:9C:42:7D:9B:88:64:AA:91:1B:39:4B:6E:DE:67:79
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer:       /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial:       0198793F1977E1ED231B54E6503880534AE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number:          0E76
Signing time:             Tue 05 Aug 2025 08:00:34 +0000
Manifest this update:     Tue 05 Aug 2025 08:00:34 +0000
Manifest next update:     Wed 06 Aug 2025 08:00:34 +0000
Files and hashes:         1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: Wj/28BRwcL5jpmdgYoLr78LkrhNMJWSmj6KCPRoSjpU=)
                          2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:3f:19:77:e1:ed:23:1b:54:e6:50:38:80:53:4a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
        Validity
            Not Before: Aug  5 08:00:34 2025 GMT
            Not After : Aug  6 08:00:34 2025 GMT
        Subject: CN=3cd49266399c427d9b8864aa911b394b6ede6779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:6d:ba:28:ec:f1:80:ce:b4:c9:8d:b3:ab:
                    78:87:69:e4:70:cc:31:b8:ee:21:60:f7:39:6f:3e:
                    74:30:6a:b7:05:cd:0f:4c:ff:6c:74:d2:fd:71:10:
                    34:5f:68:6d:18:c8:d2:77:14:8a:72:84:0f:34:47:
                    da:18:89:25:9c:31:ca:ef:8d:1f:9c:73:c8:b2:ee:
                    69:fb:18:19:fa:5b:86:44:5e:54:dc:a3:15:f8:a8:
                    28:de:f4:87:9f:f8:81:4f:7f:88:1e:02:d3:90:03:
                    0d:d2:13:ad:ed:4b:4f:e8:b1:3b:7c:5f:5a:6d:ea:
                    d5:7b:52:d6:ad:4d:a0:f1:4a:34:20:cf:f8:ad:9b:
                    43:1f:cd:76:88:37:13:b3:b9:67:c7:ff:5f:7f:bb:
                    82:c5:e9:e1:e6:0d:a9:11:2e:38:22:e8:d9:84:f7:
                    88:c4:ba:cc:63:3e:40:64:17:3a:81:0c:98:b4:88:
                    a9:ef:c1:e8:32:d8:e6:90:0c:df:2c:e5:c8:cb:13:
                    c7:b2:f9:90:10:68:03:df:c1:b0:79:3a:0a:ac:0e:
                    10:21:40:58:62:96:5e:71:dc:08:75:00:92:11:ff:
                    e1:bc:31:4b:8e:e2:30:3a:3c:0b:90:cc:fe:37:52:
                    f5:d7:51:10:f8:4e:dc:04:5f:ca:f4:b4:ac:1e:03:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D4:92:66:39:9C:42:7D:9B:88:64:AA:91:1B:39:4B:6E:DE:67:79
            X509v3 Authority Key Identifier:
                keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:64:51:50:2f:b6:6d:99:0f:3c:0b:32:a5:06:b8:34:11:a2:
         2e:f3:4e:9d:69:57:df:ee:b1:e0:da:9b:7a:fe:dd:d3:6b:1f:
         e5:2c:42:2d:52:c1:3f:d7:23:bc:96:0a:22:f1:49:33:d0:a4:
         26:80:bc:1d:72:0c:1c:08:ef:64:45:c0:6e:d9:cd:db:67:62:
         f0:83:80:ed:6b:eb:73:70:74:04:aa:2f:18:fe:fc:84:8b:de:
         62:f2:e3:92:55:70:3c:a2:47:94:0f:c3:c9:6f:b6:6a:e6:61:
         2e:af:a3:b5:75:3f:7c:8c:a5:ad:e3:6a:37:a5:79:9a:ca:96:
         a0:a2:42:93:a0:ea:e3:b4:44:5a:42:b8:6d:15:b6:4a:ad:d1:
         47:5e:9c:d3:03:c7:58:f9:31:6a:43:2e:52:f1:59:0e:0d:05:
         6e:51:a3:d0:45:6b:1f:7a:17:66:90:f0:c1:94:74:90:e8:96:
         da:e6:c7:d1:86:55:b7:50:41:76:66:33:e3:6a:ec:02:aa:b4:
         dd:f1:2a:5b:60:2c:2e:c7:a4:5f:13:48:ec:02:c0:1c:3e:5b:
         80:5b:21:e4:5f:83:84:45:51:f0:08:75:28:ea:a7:9d:33:1a:
         cb:63:7c:23:75:94:ca:c5:21:15:47:ec:2d:25:96:c8:84:ce:
         d3:36:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:47 2025 by rpki-client