Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File:                     qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier:          O4ha/VF3s2K5BjFOxf0pQB9BTyXotGTJMD8CMvPO1EM=
Subject key identifier:   05:E2:FA:53:40:8F:15:8A:FF:E0:DC:71:C0:CA:4F:1C:46:39:AF:77
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer:       /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial:       0198D73B5ECE4C2378BC66CC092E1188E7AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number:          12DB
Signing time:             Sat 23 Aug 2025 14:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:48 +0000
Files and hashes:         1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: uUq2W13/x2N2S1l5eW649/whVkBSIsDTidrQf1jl9R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:5e:ce:4c:23:78:bc:66:cc:09:2e:11:88:e7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
        Validity
            Not Before: Aug 23 14:00:48 2025 GMT
            Not After : Aug 24 14:00:48 2025 GMT
        Subject: CN=05e2fa53408f158affe0dc71c0ca4f1c4639af77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:0d:ec:62:a9:87:3b:3f:24:cd:c9:de:c3:
                    9f:d2:cf:4f:8f:a4:36:fe:3e:22:1f:22:6e:02:10:
                    f0:22:df:9c:ce:bf:88:df:f2:ad:e7:26:0f:ef:b3:
                    dc:2a:0b:ca:46:54:a2:a9:33:64:7c:9d:06:ae:10:
                    d3:b6:b4:bd:8d:70:d9:b6:bf:be:99:04:f4:20:44:
                    c8:de:20:82:43:9a:9b:09:bf:8d:13:06:15:9a:17:
                    ae:39:cd:50:e7:41:d6:56:5e:a0:ae:19:94:03:f3:
                    95:2b:20:d1:75:89:03:e9:85:31:3c:4f:f2:37:af:
                    4c:30:38:6d:7e:80:fd:82:bb:aa:bd:dc:a9:a0:57:
                    41:b7:05:69:6b:05:88:80:46:8b:dc:0c:ad:64:4a:
                    5d:df:cf:b2:ec:46:4e:51:92:93:0a:92:d4:78:7a:
                    53:e7:96:b8:61:63:14:cb:af:a4:db:f9:9b:57:50:
                    a8:a2:53:1a:c2:ec:eb:29:a1:8a:24:d5:55:6d:dc:
                    9a:7c:1b:ba:08:f7:5f:d7:b8:5a:a1:92:c3:a1:7b:
                    9d:11:ce:0f:d1:f6:93:92:bb:bc:a7:16:79:e7:0b:
                    94:ef:7f:6f:47:a3:14:71:6f:f6:80:b5:c1:ce:b8:
                    5e:c9:4d:39:28:d4:8e:e5:cb:eb:ba:9d:7c:cd:19:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E2:FA:53:40:8F:15:8A:FF:E0:DC:71:C0:CA:4F:1C:46:39:AF:77
            X509v3 Authority Key Identifier:
                keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:75:46:45:2f:54:70:12:8c:ce:46:b8:cc:d2:80:a1:20:77:
         d1:c5:47:d4:ce:ce:2e:72:94:0f:71:3b:c1:ff:13:93:c9:54:
         4f:bc:c6:e4:5b:3e:98:2e:23:11:7e:4c:91:a3:c7:98:2b:3a:
         55:8f:a4:40:76:5f:94:93:75:c8:ed:49:b7:3b:7f:77:c1:e5:
         3a:fd:35:76:db:1e:d1:f4:22:bb:7b:c3:32:dd:cd:b3:97:cf:
         d1:4f:79:02:4e:05:a0:3e:d3:33:77:41:71:05:b6:36:68:29:
         4a:14:6b:07:57:d2:46:f4:5e:76:3b:fc:47:6d:2e:b0:a3:b3:
         97:bb:6f:fa:49:d8:63:67:ed:e5:5e:f1:2f:96:b7:fb:b2:e4:
         e9:b8:12:27:bd:e5:38:4c:95:ec:2d:82:d7:39:e3:ec:52:c2:
         74:f6:47:e1:ef:81:60:f4:aa:f1:cb:8d:45:0c:a6:f5:77:50:
         9f:2f:f6:b6:71:04:3d:4e:19:93:b6:82:a9:72:24:77:d2:98:
         f7:64:d7:c8:2e:c9:05:9b:66:cf:e4:b2:20:76:02:75:63:6b:
         2e:a0:eb:4e:ff:13:43:ea:59:c4:62:6c:6e:67:e9:56:37:2c:
         61:a4:3b:62:48:c5:4a:d7:94:27:97:fe:c7:c8:a7:ed:ad:b1:
         a4:5f:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:57 2025 by rpki-client