Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File:                     QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier:          Y6I8fJK219R8NSo4uVQFI+DI3DJhjpfXOSkqQmUx8BE=
Subject key identifier:   7F:D3:38:AC:BB:48:34:58:52:C6:80:94:C3:EC:B4:34:0A:C5:A9:28
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer:       /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial:       0198D6606CC2574B102047E8BDB97E482F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number:          0E8F
Signing time:             Sat 23 Aug 2025 10:01:39 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:39 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:39 +0000
Files and hashes:         1: 4hn1wVatZQI4O44VQ9afg3_3YCE.roa (hash: Wip87SKY/zyuxOVUXFbAARGlH7AAphh/zZD7B0INIf4=)
                          2: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: Ga+lpuA2MIdd1MWtXIJdiiinqm/TqdiXLl4PgsgHYeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:6c:c2:57:4b:10:20:47:e8:bd:b9:7e:48:2f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
        Validity
            Not Before: Aug 23 10:01:39 2025 GMT
            Not After : Aug 24 10:01:39 2025 GMT
        Subject: CN=7fd338acbb48345852c68094c3ecb4340ac5a928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:7a:ff:76:17:89:3a:b4:9e:1d:06:0f:d0:
                    81:2d:53:e8:42:e7:44:cd:9b:a3:c8:61:ab:01:10:
                    33:3e:39:37:93:d6:16:3c:af:33:e9:09:ae:e8:c7:
                    45:59:7a:db:89:bb:be:5f:4e:57:48:76:a9:48:61:
                    86:e9:c1:4a:71:ad:f6:fc:cc:fb:88:2b:a7:67:05:
                    3f:f3:18:1a:e8:d9:56:8b:e4:27:c6:cb:de:7c:c6:
                    b0:81:ef:c0:71:38:ed:df:6f:28:2e:39:bb:e7:41:
                    21:16:ed:ac:41:22:14:91:86:1f:94:59:1c:26:56:
                    0a:97:d0:58:6f:d1:cf:ea:6c:c4:29:a3:9f:fc:ec:
                    87:d9:8e:2c:4e:bd:b5:df:d9:50:ec:ff:be:d1:89:
                    c7:cc:8f:49:1d:df:8b:f2:ae:d4:7f:e5:f4:c7:e3:
                    ad:76:8c:a9:f3:54:26:a8:46:fc:5d:9b:74:07:dc:
                    64:b4:a9:fb:30:b3:22:f8:2a:1e:f0:58:32:8f:68:
                    fc:bd:ca:fb:e9:9f:d0:3f:b1:4c:fb:9b:63:aa:36:
                    a6:dc:6a:7b:13:f2:ac:f5:8c:86:00:3d:5b:13:16:
                    68:24:a2:e5:d1:75:d5:03:e5:09:4f:5e:96:ab:41:
                    99:a2:99:23:68:aa:85:8b:ef:88:8c:eb:d7:a3:36:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:38:AC:BB:48:34:58:52:C6:80:94:C3:EC:B4:34:0A:C5:A9:28
            X509v3 Authority Key Identifier:
                keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:51:81:ae:38:9f:a9:a6:5a:5e:10:ca:f6:d6:70:89:7b:cd:
         e2:f7:19:c4:be:72:ff:81:97:2d:f1:76:e5:ec:4c:77:42:75:
         38:1c:2b:66:4f:51:02:25:3c:0c:35:f3:1c:3a:fc:fc:90:4c:
         07:7d:32:9b:74:ee:c8:38:5d:48:1e:66:0c:b6:b9:da:42:e4:
         94:39:be:89:22:4f:46:db:9d:97:a2:28:d0:c2:e0:75:b9:28:
         81:72:97:72:04:34:9e:01:9c:0e:43:c8:3a:d4:05:28:28:8a:
         18:cb:7e:aa:25:38:e8:28:f3:7e:5a:a9:ac:f2:5a:25:41:fc:
         1d:36:69:40:96:55:36:2f:14:66:a3:7c:ca:32:18:2c:82:16:
         b8:34:a9:8f:d6:52:b5:18:67:76:20:28:37:95:50:3f:1f:b5:
         50:0e:d5:07:de:8b:2b:42:58:c1:bf:b2:40:cd:2b:ca:0c:ad:
         af:bc:55:d0:62:bb:30:41:ed:38:e0:ee:86:d0:8b:c0:0d:f9:
         24:e1:da:20:1d:c7:ed:29:7a:ae:7a:cf:50:b0:10:3d:95:00:
         c1:c5:62:af:63:1b:0c:78:15:1b:d7:f2:1e:81:ca:db:60:0e:
         d6:1a:52:bd:ca:fc:6e:83:20:53:9b:7b:c1:6d:ea:fd:97:65:
         0e:eb:01:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYGzCV0sQIEfovbl+SC8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZmFjNmEzMmZlNGJhYTdkODliOTFlYzUxNjVhM2Q5NjY4
OGUxNDQwHhcNMjUwODIzMTAwMTM5WhcNMjUwODI0MTAwMTM5WjAzMTEwLwYDVQQD
Eyg3ZmQzMzhhY2JiNDgzNDU4NTJjNjgwOTRjM2VjYjQzNDBhYzVhOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndV6/3YXiTq0nh0GD9CBLVPoQudE
zZujyGGrARAzPjk3k9YWPK8z6Qmu6MdFWXrbibu+X05XSHapSGGG6cFKca32/Mz7
iCunZwU/8xga6NlWi+QnxsvefMawge/AcTjt328oLjm750EhFu2sQSIUkYYflFkc
JlYKl9BYb9HP6mzEKaOf/OyH2Y4sTr2139lQ7P++0YnHzI9JHd+L8q7Uf+X0x+Ot
doyp81QmqEb8XZt0B9xktKn7MLMi+Coe8Fgyj2j8vcr76Z/QP7FM+5tjqjam3Gp7
E/Ks9YyGAD1bExZoJKLl0XXVA+UJT16Wq0GZopkjaKqFi++IjOvXozYSiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/TOKy7SDRYUsaAlMPstDQKxakoMB8GA1UdIwQY
MBaAFED6xqMv5Lqn2JuR7FFlo9lmiOFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEt
YzlmZTBiYTI4NjQ3LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82MjljYjItMmI0ZC00NzQ4LWJiMTEtYzlmZTBiYTI4NjQ3
LzEvUVByR295X2t1cWZZbTVIc1VXV2oyV2FJNFVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFGBrjif
qaZaXhDK9tZwiXvN4vcZxL5y/4GXLfF25exMd0J1OBwrZk9RAiU8DDXzHDr8/JBM
B30ym3TuyDhdSB5mDLa52kLklDm+iSJPRtudl6Io0MLgdbkogXKXcgQ0ngGcDkPI
OtQFKCiKGMt+qiU46CjzflqprPJaJUH8HTZpQJZVNi8UZqN8yjIYLIIWuDSpj9ZS
tRhndiAoN5VQPx+1UA7VB96LK0JYwb+yQM0rygytr7xV0GK7MEHtOODuhtCLwA35
JOHaIB3H7Sl6rnrPULAQPZUAwcVir2MbDHgVG9fyHoHK22AO1hpSvcr8boMgU5t7
wW3q/ZdlDusBww==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:39 2025 by rpki-client