Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File:                     Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier:          jbwlv0E6SKY0x2gtSMF8IMjDF4VhNjRn19HxBxFqGfU=
Subject key identifier:   69:9C:21:D6:DC:F1:DE:3B:C0:B2:08:D6:65:40:40:8D:22:4D:1F:5D
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer:       /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial:       0198D5F16C6B5DA37B681AF59F9BE9549B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number:          114C
Signing time:             Sat 23 Aug 2025 08:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:25 +0000
Files and hashes:         1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: 2/w/pShGYWbB6kTgpwDirOGakgyfHVn6hSxmBs7XE48=)
                          2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:6c:6b:5d:a3:7b:68:1a:f5:9f:9b:e9:54:9b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
        Validity
            Not Before: Aug 23 08:00:25 2025 GMT
            Not After : Aug 24 08:00:25 2025 GMT
        Subject: CN=699c21d6dcf1de3bc0b208d66540408d224d1f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:bc:c3:e6:f8:2b:11:3f:8e:a1:5e:85:15:
                    c8:ab:66:d1:fb:05:d1:0a:e7:67:35:00:64:38:4a:
                    de:e2:db:06:2c:56:25:07:79:9e:97:44:05:89:29:
                    1e:d1:e2:08:a3:1c:bd:49:20:2e:4b:41:2f:4c:eb:
                    13:94:8a:18:8a:97:e2:fc:50:d1:b5:a7:75:9c:04:
                    a4:02:76:4d:52:fc:cd:12:fe:fd:fb:6d:bb:27:cc:
                    c0:8a:3b:32:35:76:56:07:c5:21:24:cd:5d:c3:58:
                    8d:f9:01:db:28:90:5b:2a:63:d8:9b:b3:90:88:56:
                    04:98:ea:87:fc:e7:05:ef:f2:ca:a3:4b:03:9b:45:
                    e1:da:2c:a6:b5:09:83:97:dd:df:a6:46:47:73:fb:
                    13:ad:d1:d1:26:0e:04:79:1e:ae:28:74:79:28:66:
                    90:ed:14:38:b6:b4:35:4e:2a:dc:5a:8c:4a:41:fb:
                    4a:d1:49:43:de:f4:95:31:df:ca:44:e2:5d:3e:88:
                    35:78:03:5a:ec:d3:17:9c:72:98:40:53:07:ef:90:
                    06:b4:dd:94:94:2f:ab:52:d0:9e:60:93:45:42:84:
                    9b:76:d6:4f:54:15:25:c0:1c:33:e8:4c:7e:d9:19:
                    88:28:2d:6e:22:6b:6e:71:7e:c3:3d:8b:77:85:b4:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9C:21:D6:DC:F1:DE:3B:C0:B2:08:D6:65:40:40:8D:22:4D:1F:5D
            X509v3 Authority Key Identifier:
                keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3d:ed:56:15:da:20:b7:41:d7:16:5e:f2:94:0b:c1:94:3d:
         a3:b5:ae:80:b3:a6:0f:90:6e:4a:a9:d6:a7:3e:19:a0:1d:c5:
         b6:85:41:00:84:8d:f7:9e:31:40:ee:6a:1d:4b:1f:61:60:11:
         9b:2f:db:88:14:0b:3f:d5:46:bb:97:19:ec:9b:a7:0f:37:27:
         65:28:c6:3f:cf:18:59:17:9c:8e:1e:a8:c1:a0:1c:fa:f0:7c:
         aa:c5:76:94:e8:97:e2:19:83:d6:44:5d:47:c5:b4:f2:8e:f2:
         ad:08:40:e4:b1:a9:b3:9a:89:2e:4a:9d:46:7a:b4:06:29:17:
         46:db:bf:91:f5:ee:dd:92:b0:ee:c0:f0:2c:94:45:75:b2:4c:
         66:78:eb:06:5f:a0:b6:45:ba:27:67:c7:29:5f:73:33:fc:c7:
         3c:4a:17:0b:c9:f5:ce:0a:ab:82:99:6b:39:52:78:f1:78:00:
         de:fe:b8:da:3a:c8:0e:cf:a2:ce:fa:c5:89:00:9a:61:64:9f:
         88:ce:3e:9e:4d:aa:2b:01:47:fd:68:d8:e2:54:f5:d0:a5:86:
         98:de:75:13:05:fe:70:af:d1:8d:75:80:07:e6:d5:41:52:3a:
         2e:9d:e9:51:ce:b1:08:72:2e:58:24:5a:54:4a:a2:e6:b9:35:
         51:26:85:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:33 2025 by rpki-client