Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
File:                     qrHbDgCCCHbfogvsm3Gap5Wswd4.mft (raw, json)
Hash identifier:          bT04jliic9/TCaNSGwilQkaNMsTFoe4l9v702aDUml0=
Subject key identifier:   4C:5C:94:B9:D8:D9:D6:EA:61:11:94:73:0F:00:5E:28:F9:F6:28:32
Authority key identifier: AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
Certificate issuer:       /CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Certificate serial:       0198D404C96F71B895FEEBE57A094D04B255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
Manifest number:          164B
Signing time:             Fri 22 Aug 2025 23:02:20 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:20 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:20 +0000
Files and hashes:         1: qrHbDgCCCHbfogvsm3Gap5Wswd4.crl (hash: zjJpgWJsIQ5mpOBB0M2sH0R4aN2PdSzty3vhkf6WZyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:c9:6f:71:b8:95:fe:eb:e5:7a:09:4d:04:b2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab1db0e00820876dfa20bec9b719aa795acc1de
        Validity
            Not Before: Aug 22 23:02:20 2025 GMT
            Not After : Aug 23 23:02:20 2025 GMT
        Subject: CN=4c5c94b9d8d9d6ea611194730f005e28f9f62832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:34:7d:b4:a3:1c:ee:69:46:55:35:5d:7e:
                    c0:26:cb:2c:7c:09:d1:c9:3b:fa:88:9e:ad:2f:69:
                    94:ae:01:ad:fc:7f:d1:63:f9:cc:0d:eb:29:2b:56:
                    0b:e8:34:de:4f:b0:ae:4a:f8:27:d3:b7:6c:ea:90:
                    c1:c5:e0:f1:b2:d9:3e:a0:9f:36:53:7d:4f:fb:f8:
                    e8:fe:eb:e3:67:60:51:02:e3:ef:9f:ed:90:e2:a1:
                    75:de:4a:30:bf:dc:e9:47:a4:db:f7:7d:f5:b4:dd:
                    bd:32:55:f3:ab:f9:37:9a:30:27:40:d5:eb:95:bb:
                    04:4d:2d:c5:b4:1e:5e:3e:4e:d7:c9:53:29:91:c2:
                    d7:d0:c3:25:c3:ac:69:e3:58:75:4a:19:75:84:fb:
                    5b:df:1a:e4:54:c3:99:00:a3:de:d3:a6:07:c5:1a:
                    20:27:44:1d:41:a4:b7:77:f5:8c:b6:d3:42:98:22:
                    bf:5e:a1:0e:f5:fd:9f:f5:74:c7:91:4b:a7:ff:7e:
                    82:f0:e3:71:3e:23:d2:42:81:b1:83:4a:d9:67:49:
                    ef:59:be:50:cc:f2:58:02:bc:b2:b0:21:e5:09:79:
                    0f:56:52:d6:6e:0e:d0:22:c2:79:4d:00:60:d9:8b:
                    66:ff:61:a4:0a:f9:52:cd:71:80:76:40:ec:45:3e:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5C:94:B9:D8:D9:D6:EA:61:11:94:73:0F:00:5E:28:F9:F6:28:32
            X509v3 Authority Key Identifier:
                keyid:AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:e6:35:9e:9f:79:aa:29:e8:11:ee:bb:26:1e:d8:49:a7:
         95:5c:35:8c:a3:fd:50:65:cf:1a:74:e6:76:bc:2c:1b:a1:43:
         7c:19:d8:a1:63:f2:23:2d:f7:e6:85:1d:d1:2d:83:ac:0d:e6:
         df:87:ec:12:b5:30:fd:27:f0:b5:8f:9f:97:0f:6a:3c:cd:10:
         d8:cd:36:94:3d:1c:16:f5:7c:e2:03:c6:1f:e1:fd:42:2b:93:
         1c:8d:51:8a:02:73:41:57:57:7a:b3:ef:c2:0b:c5:34:8b:2a:
         5b:8e:cb:28:98:a1:02:0a:b7:3f:8d:24:3a:22:de:83:d0:93:
         44:26:be:9f:f2:98:62:38:56:1f:95:89:d3:e2:a6:d1:36:f1:
         df:52:5e:2a:7b:d4:2d:3b:38:0e:d4:36:41:b3:65:b0:85:f4:
         e0:2c:89:72:af:df:8b:6f:cc:7e:c0:56:3b:0e:86:ce:c6:0a:
         e7:a2:35:06:46:3d:24:51:b0:d4:de:a4:a5:03:22:ba:bf:ba:
         7e:aa:b5:a2:79:84:fd:bd:6c:47:13:fe:75:93:de:54:e7:7e:
         e2:cf:89:ea:e7:03:54:4b:78:95:09:58:0d:30:df:f5:ad:86:
         b8:3f:e2:82:0b:34:df:6f:2c:6a:87:7a:dd:99:99:b2:32:d1:
         6a:3e:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:50 2025 by rpki-client