Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File:                     QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier:          UwLmsClcUpU19+YiRsQLiz+KsmLvhlgetp+DZGeQjgA=
Subject key identifier:   0E:46:E1:6B:AF:6F:7A:CA:DC:38:B1:AE:07:8B:55:0E:DA:85:52:98
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer:       /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial:       0198D583AE2AAD99CA9DC8C2A9EB29FAAF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number:          034F
Signing time:             Sat 23 Aug 2025 06:00:33 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:33 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:33 +0000
Files and hashes:         1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: OnfMq6N9ZQw10mQvprdoagmxTUXPspOpdff843gw4lc=)
                          2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ae:2a:ad:99:ca:9d:c8:c2:a9:eb:29:fa:af:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
        Validity
            Not Before: Aug 23 06:00:33 2025 GMT
            Not After : Aug 24 06:00:33 2025 GMT
        Subject: CN=0e46e16baf6f7acadc38b1ae078b550eda855298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:83:e0:2e:39:dd:27:45:cd:86:f9:27:f3:91:
                    41:8c:7f:77:8c:f4:c4:6e:1d:0a:57:d2:51:82:a9:
                    d6:49:ef:12:bd:8a:91:de:b3:9c:e6:57:54:46:53:
                    fe:55:7c:e4:2d:b9:f5:b4:8d:b1:9d:01:c6:55:90:
                    42:e8:cb:d5:03:c1:9b:71:c7:d4:0a:bd:6c:1b:1d:
                    64:96:24:e0:00:9a:87:d0:1f:d0:58:a8:bf:dc:0e:
                    32:66:dd:db:e6:09:29:3c:78:bc:cd:66:b1:54:57:
                    25:a4:1f:f6:95:60:6c:9f:c3:6d:18:c1:1b:7b:f1:
                    4c:06:bd:9b:9a:2d:1a:9d:76:b2:44:22:39:65:b0:
                    ae:cc:2e:73:be:ef:3a:f2:8f:ca:8d:87:74:07:b5:
                    10:84:71:b3:d8:df:02:6d:d1:a0:a2:b9:4f:94:4f:
                    24:7c:44:52:02:35:d8:ed:81:4d:0a:c1:91:32:ca:
                    f2:eb:64:be:8e:6d:0c:4b:16:61:b9:68:6b:2e:b0:
                    6a:cb:b0:6f:9f:49:50:37:01:7d:b0:53:52:50:89:
                    6a:b0:6f:98:66:1d:ab:1d:e3:9a:3d:8f:bf:ac:27:
                    8e:c5:79:73:af:66:43:4e:b0:b8:d9:64:9e:0e:72:
                    c2:a5:62:4c:92:ba:07:8e:56:c6:f2:e3:ae:25:cb:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:46:E1:6B:AF:6F:7A:CA:DC:38:B1:AE:07:8B:55:0E:DA:85:52:98
            X509v3 Authority Key Identifier:
                keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:6d:a4:49:ee:b7:d8:f3:67:94:47:f0:0c:91:c8:4e:3e:
         bc:1d:6e:24:66:d7:35:26:b7:23:4c:98:59:37:0b:13:b7:48:
         8f:fa:c6:be:9a:dc:46:d6:ac:0b:fc:2d:fd:80:34:e9:7c:71:
         40:19:51:7b:aa:52:17:d9:1a:d4:7e:3a:74:2a:5b:b1:4b:5e:
         5d:8c:30:d1:84:49:f5:9b:60:42:88:76:b8:05:65:3e:d0:9a:
         5f:48:37:0f:73:88:d8:69:34:b7:6b:97:d2:e3:0a:eb:a7:bd:
         20:75:48:ec:c3:15:67:17:02:f5:28:9e:3f:48:30:5c:0e:84:
         75:c8:11:18:05:20:5e:4b:f7:91:7c:25:74:e9:dc:81:76:28:
         72:47:fc:10:43:8d:cb:6a:18:b5:b8:3d:b4:07:43:7e:94:b1:
         b4:4c:f2:91:41:ee:dc:53:2d:53:c7:07:28:6e:47:80:e5:58:
         dd:31:26:2f:ec:3d:35:99:49:57:a4:6b:8e:da:b0:1d:54:76:
         f6:c5:d2:e0:fb:2b:54:f4:ba:78:60:c6:18:41:2a:aa:5c:35:
         0c:40:81:28:88:9c:d4:4b:c8:14:44:3e:b1:a5:e8:40:d7:d4:
         0e:2e:30:95:5b:44:0b:64:fc:be:65:52:40:d9:f4:2f:4c:d3:
         ce:a4:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:45 2025 by rpki-client