Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File:                     QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier:          I96jCacc3UYkz3exDRAOcjjmPP1RYEdmiYN8qGSzjfg=
Subject key identifier:   C8:88:74:3F:5C:18:CB:66:C1:D6:40:31:AE:60:4D:DA:F1:6D:A5:2D
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer:       /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial:       0197B6D74C0D5A65AB6781D1478A767AF7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number:          137B
Signing time:             Sat 28 Jun 2025 14:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:52 +0000
Files and hashes:         1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: 2XOs5d1qB4T7HBhvoSuisdKpiW+255xYVsp3sYjji40=)
                          2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:4c:0d:5a:65:ab:67:81:d1:47:8a:76:7a:f7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
        Validity
            Not Before: Jun 28 14:00:52 2025 GMT
            Not After : Jun 29 14:00:52 2025 GMT
        Subject: CN=c888743f5c18cb66c1d64031ae604ddaf16da52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:c9:4d:bb:ac:e1:72:73:8a:3c:30:41:aa:
                    3f:9f:6b:3c:25:c5:40:6d:7b:af:3f:25:26:57:12:
                    6e:bd:3b:26:4a:48:9c:c0:f3:25:2f:f1:04:c8:9b:
                    b6:04:2f:76:76:4d:8c:07:7a:8b:b9:a1:37:6d:be:
                    f7:0e:24:ca:d0:39:f2:f5:ab:b0:16:b5:ba:71:cd:
                    43:11:4b:94:3b:29:fb:88:f7:c6:55:61:a8:ba:78:
                    6a:2f:c6:fc:c0:f8:1e:c6:4e:9c:f5:32:29:0f:d5:
                    bd:3f:42:f4:40:6d:25:82:78:62:b5:50:93:e6:c2:
                    91:20:1b:2a:fc:61:c1:32:d9:c4:54:78:7c:8d:8a:
                    6e:c3:e9:c4:65:c3:59:9a:d7:e1:1b:31:e6:e7:c6:
                    56:eb:fc:fd:84:f4:74:ce:7b:c1:57:65:b5:08:9f:
                    81:09:63:f7:20:b8:4b:3a:3b:99:08:71:65:20:23:
                    b9:90:eb:ac:4c:e1:e8:f5:06:d3:ca:6b:3f:5d:89:
                    8a:f4:35:2f:d5:a4:6a:88:ef:09:a7:e1:5a:45:03:
                    57:aa:5b:2b:c9:b1:d3:9c:2e:69:6e:57:1d:7a:ba:
                    c3:d9:b9:dd:6a:5b:78:68:e4:46:03:5e:68:2d:29:
                    50:7c:53:b9:cd:01:e4:aa:a8:98:1f:b8:56:35:2d:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:88:74:3F:5C:18:CB:66:C1:D6:40:31:AE:60:4D:DA:F1:6D:A5:2D
            X509v3 Authority Key Identifier:
                keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:27:e6:2f:9e:0b:72:56:96:60:d7:06:0b:90:d8:1e:2d:36:
         10:19:32:ce:fb:4c:b0:8e:33:8d:b2:a1:c9:70:92:9f:3e:ab:
         85:90:1a:ff:b3:78:00:2c:61:dc:9e:2c:fc:f7:ff:e9:4d:15:
         2e:5a:c1:b6:1a:f8:4b:0a:84:ed:45:ef:c5:42:91:c4:31:0e:
         4a:c2:68:0b:e8:e0:19:99:31:cf:af:c9:6d:62:1c:31:5b:65:
         6f:52:05:1a:2d:6b:e3:98:23:53:a7:1e:ae:7d:aa:94:d1:ae:
         27:b0:57:5f:f1:fe:67:33:87:8c:21:f2:b6:9a:f6:69:9a:36:
         3f:6e:05:a6:00:7e:ad:7b:e6:07:4c:dd:08:4e:79:e8:45:4c:
         f8:b7:6b:de:b4:3b:a1:19:20:98:3f:f5:28:4f:ee:a4:83:30:
         1a:8a:51:10:69:a1:dc:ef:d7:3f:33:7b:d2:d9:e6:e9:81:8e:
         3f:14:2d:49:9a:28:07:5e:ba:4c:43:0f:81:1d:fb:81:86:2c:
         85:7b:56:6d:67:44:80:50:30:c8:41:ba:78:dd:b7:e8:36:f1:
         87:0b:ce:e5:bf:74:ae:82:e8:51:5e:e2:cc:dc:79:08:87:b0:
         ac:67:49:9a:c5:fd:b3:e2:75:be:d9:0b:bd:d9:d0:f9:d7:1f:
         d9:7e:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:07 2025 by rpki-client