Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
File:                     QZV-DXwo4yonWu2yD4AjYbRb_1E.mft (raw, json)
Hash identifier:          DnOj2eRvRRr+EHh0I3sAScc+Q036I3HRFyD8b/RguSM=
Subject key identifier:   E0:6A:F5:BE:73:CE:5E:2C:9E:B3:24:F1:E3:54:9D:0A:70:59:98:FD
Authority key identifier: 41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
Certificate issuer:       /CN=41957e0d7c28e32a275aedb20f802361b45bff51
Certificate serial:       0199FBEACC98FE294FC8C8ADAFDE6A41CA55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
Manifest number:          1374
Signing time:             Sun 19 Oct 2025 10:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:32 +0000
Files and hashes:         1: QZV-DXwo4yonWu2yD4AjYbRb_1E.crl (hash: zKosoRcOVZ+2ZOuEZ+pqtDCqYVcExJQc7ZSRA15AgqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:cc:98:fe:29:4f:c8:c8:ad:af:de:6a:41:ca:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41957e0d7c28e32a275aedb20f802361b45bff51
        Validity
            Not Before: Oct 19 10:01:32 2025 GMT
            Not After : Oct 20 10:01:32 2025 GMT
        Subject: CN=e06af5be73ce5e2c9eb324f1e3549d0a705998fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:a0:6d:a5:1a:b0:d4:57:bf:42:82:9a:00:
                    83:52:66:7f:63:2f:21:9a:a8:9a:0a:e9:32:fc:f6:
                    78:c8:43:6e:da:9a:1d:62:c8:52:c5:15:ef:37:f9:
                    f5:ec:ad:f0:0d:cc:9b:26:06:42:8b:5e:65:c3:7c:
                    34:90:c4:09:e7:70:a3:38:f4:47:ba:a6:8e:8b:e3:
                    12:11:c4:5c:1a:cc:6c:0e:39:a6:5c:47:bb:09:22:
                    7e:f3:0a:ce:cb:e7:ff:f7:0a:93:51:c8:3f:14:90:
                    73:38:51:45:c0:14:64:ca:d9:ab:5b:18:05:8e:27:
                    c6:2b:d4:d5:8a:7a:27:c1:35:58:3f:1d:de:ef:47:
                    71:c9:c3:43:79:c5:e8:56:62:ee:37:cd:4b:d5:ec:
                    0f:2d:20:d3:b3:c5:23:bc:a0:6e:6f:69:38:fc:87:
                    9e:ce:73:91:eb:53:13:b6:23:4a:24:7f:42:fd:e9:
                    2c:2f:ca:98:e8:93:aa:b8:0f:c1:2c:0f:77:5b:06:
                    2a:e9:52:97:f7:76:bf:60:9c:69:7e:0a:c0:c8:99:
                    15:54:fe:48:87:0e:86:31:f0:e6:4c:e1:ff:91:ab:
                    8a:8e:d1:b7:2d:ee:d8:1d:07:21:cd:b2:d2:e9:f0:
                    6e:14:ff:9d:ba:28:56:18:2b:fd:78:9a:69:38:1b:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:F5:BE:73:CE:5E:2C:9E:B3:24:F1:E3:54:9D:0A:70:59:98:FD
            X509v3 Authority Key Identifier:
                keyid:41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:af:18:d1:ea:37:ac:01:f5:d4:06:70:bd:f8:7e:9f:fc:8c:
         ba:f0:d0:37:a1:e4:40:17:c6:bf:39:74:7b:47:52:41:31:26:
         15:8d:24:94:df:64:37:cf:ef:3f:23:6f:19:31:2b:34:15:cc:
         49:4b:f8:ae:e2:59:22:e7:7a:49:63:ec:2b:65:a3:71:4b:98:
         e4:61:f4:2e:9d:5e:4d:4e:00:70:9a:8c:cd:c6:d3:54:9d:66:
         d7:07:fa:35:cc:68:b1:11:86:bc:e0:7e:8e:74:f6:02:db:0e:
         22:fb:85:37:cd:7b:59:c2:62:93:f1:58:27:e9:ad:52:08:09:
         c5:5c:12:45:aa:fe:41:49:0c:02:8b:08:5b:b6:f1:7b:1f:79:
         25:0c:dc:9c:a0:02:27:e0:96:03:0e:53:3b:56:7e:89:53:bd:
         84:2e:ee:40:36:31:d6:7e:96:ca:c4:eb:b6:94:4c:1f:11:cb:
         17:f8:a7:39:a4:ce:8c:03:1e:3e:a4:81:fb:31:1c:b1:75:b7:
         ed:20:36:7b:dc:d9:9f:02:83:e0:bf:88:88:fe:8e:2b:f1:ec:
         4e:5d:5e:52:95:e5:1b:60:e8:24:27:49:0b:d8:a1:62:3c:b7:
         6e:ef:d8:31:04:67:ac:39:f2:33:c2:8d:fb:92:cb:7d:b9:63:
         c2:42:e9:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76syY/ilPyMitr95qQcpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTU3ZTBkN2MyOGUzMmEyNzVhZWRiMjBmODAyMzYxYjQ1
YmZmNTEwHhcNMjUxMDE5MTAwMTMyWhcNMjUxMDIwMTAwMTMyWjAzMTEwLwYDVQQD
EyhlMDZhZjViZTczY2U1ZTJjOWViMzI0ZjFlMzU0OWQwYTcwNTk5OGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgugbaUasNRXv0KCmgCDUmZ/Yy8h
mqiaCuky/PZ4yENu2podYshSxRXvN/n17K3wDcybJgZCi15lw3w0kMQJ53CjOPRH
uqaOi+MSEcRcGsxsDjmmXEe7CSJ+8wrOy+f/9wqTUcg/FJBzOFFFwBRkytmrWxgF
jifGK9TVinonwTVYPx3e70dxycNDecXoVmLuN81L1ewPLSDTs8UjvKBub2k4/Iee
znOR61MTtiNKJH9C/eksL8qY6JOquA/BLA93WwYq6VKX93a/YJxpfgrAyJkVVP5I
hw6GMfDmTOH/kauKjtG3Le7YHQchzbLS6fBuFP+duihWGCv9eJppOBuIiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBq9b5zzl4snrMk8eNUnQpwWZj9MB8GA1UdIwQY
MBaAFEGVfg18KOMqJ1rtsg+AI2G0W/9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YTFkNDUtN2YzZS00ODRkLWI3OTYt
ZDUxNzUyYmZmMTU0LzEvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YTFkNDUtN2YzZS00ODRkLWI3OTYtZDUxNzUyYmZmMTU0
LzEvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq68Y0eo3
rAH11AZwvfh+n/yMuvDQN6HkQBfGvzl0e0dSQTEmFY0klN9kN8/vPyNvGTErNBXM
SUv4ruJZIud6SWPsK2WjcUuY5GH0Lp1eTU4AcJqMzcbTVJ1m1wf6NcxosRGGvOB+
jnT2AtsOIvuFN817WcJik/FYJ+mtUggJxVwSRar+QUkMAosIW7bxex95JQzcnKAC
J+CWAw5TO1Z+iVO9hC7uQDYx1n6WysTrtpRMHxHLF/inOaTOjAMePqSB+zEcsXW3
7SA2e9zZnwKD4L+IiP6OK/HsTl1eUpXlG2DoJCdJC9ihYjy3bu/YMQRnrDnyM8KN
+5LLfbljwkLpXw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:40 2025 by rpki-client