Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
File:                     QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json)
Hash identifier:          oxLYnucw0xP3h6rqUxlttiZonkUB0FJir/+17FPgfz4=
Subject key identifier:   50:EC:59:C8:3C:A7:2B:04:25:F4:A4:41:53:1F:02:B4:EE:15:D1:44
Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
Certificate issuer:       /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Certificate serial:       0198D6CDCAEC2AADED967DB78E3EE951D128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
Manifest number:          1645
Signing time:             Sat 23 Aug 2025 12:01:07 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:07 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:07 +0000
Files and hashes:         1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: Mcaywb+UMzLEG89MU4f77eTtKwJJVN4Q/8aYWwPogqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:ca:ec:2a:ad:ed:96:7d:b7:8e:3e:e9:51:d1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
        Validity
            Not Before: Aug 23 12:01:07 2025 GMT
            Not After : Aug 24 12:01:07 2025 GMT
        Subject: CN=50ec59c83ca72b0425f4a441531f02b4ee15d144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:65:db:4c:8a:49:99:c9:00:4f:22:37:0e:
                    89:27:7b:c5:b6:e5:93:f1:e7:17:ee:c5:30:7c:27:
                    fa:c6:0c:8a:be:1b:d4:ae:a6:c5:44:6c:e6:2f:4d:
                    5f:d0:2a:c2:c5:28:4d:a1:fe:b2:13:42:13:d4:a4:
                    98:b1:87:90:6f:48:59:70:8c:fe:69:8c:e1:89:cc:
                    8b:e2:0e:c1:75:f4:fb:b7:53:c7:0d:53:4a:fb:76:
                    08:d1:66:97:e2:38:24:5e:a9:6a:00:3c:7e:c5:d1:
                    fd:86:f7:49:d0:c9:3a:19:01:f8:55:92:21:25:d1:
                    e2:ba:b1:01:e2:2e:40:8d:cb:fb:53:c2:ce:0e:37:
                    ca:7d:91:70:03:d3:9d:d0:3a:aa:03:ba:50:3f:87:
                    72:aa:f7:59:4b:00:29:ea:b6:de:2b:20:af:10:5c:
                    69:95:aa:9b:bd:e1:cd:69:7e:fb:a5:44:49:33:32:
                    e8:34:70:a6:cd:a5:c7:8b:9c:86:7a:38:54:07:70:
                    e5:5d:87:c3:b6:5b:b1:fe:13:d4:55:6f:86:07:e7:
                    e0:ab:3d:35:8d:8b:8d:ef:c8:a4:4f:31:5d:64:4d:
                    ff:ca:51:ac:f9:14:1d:95:67:cc:2d:b2:2c:3b:ae:
                    a6:9d:1a:4d:72:26:78:de:64:2b:4e:e2:48:a0:c0:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:59:C8:3C:A7:2B:04:25:F4:A4:41:53:1F:02:B4:EE:15:D1:44
            X509v3 Authority Key Identifier:
                keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:36:d0:88:d0:d0:5b:b1:c7:df:64:c5:25:ff:78:fe:ae:7e:
         74:f1:fd:17:a9:8c:8b:d2:d6:b9:3f:5b:fd:bf:df:78:75:0f:
         b1:d8:e0:8f:6f:de:59:9f:88:fa:ec:c4:8e:fe:73:04:db:23:
         e8:b5:a2:7f:28:18:b8:ce:ff:a6:4b:ad:27:2a:a6:22:52:1c:
         c7:5d:68:e6:3a:bd:be:c0:9b:c5:20:ff:ca:1d:c2:d3:51:71:
         74:f8:28:16:d0:9b:fb:88:a8:79:58:d1:e5:38:74:49:8f:ce:
         1a:b4:34:91:6e:ba:77:3f:d8:d3:51:bb:ee:16:c0:c2:39:a5:
         49:02:22:73:29:b9:d8:b1:1d:82:f3:c4:1f:9e:c5:3b:c0:df:
         d1:25:d7:fc:f3:5f:e1:11:60:49:aa:3d:29:fe:54:e2:9f:5a:
         7b:c1:57:a5:69:44:7d:58:18:a9:d1:69:62:e2:53:8f:f2:de:
         17:6b:f1:73:fa:9f:09:bb:af:42:94:c0:f2:c9:2f:ae:83:92:
         c9:6e:d0:e8:f8:e8:63:47:de:d5:25:62:ca:c1:78:d1:bb:42:
         8d:fa:61:16:99:ce:6c:0e:66:86:04:d6:9d:0f:41:bd:47:b7:
         4d:4b:2b:ef:b8:0b:12:86:16:47:0e:3c:9a:27:70:ee:c1:f5:
         fc:35:1c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----