Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File:                     QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier:          KjevoVQKKfzazn8WXvMG8OBJJK41xW8iwFYenLmbf8k=
Subject key identifier:   24:28:0E:49:B8:F1:5B:46:38:BE:73:73:98:98:09:5F:13:CF:5D:03
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer:       /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial:       0198D69829BB541765176EB0801BA5B6D105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number:          15A5
Signing time:             Sat 23 Aug 2025 11:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:33 +0000
Files and hashes:         1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=)
                          2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: dVLNoh770kWqSgrRYT+JwQryU3AQyIXdVWrmtDkAAP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:29:bb:54:17:65:17:6e:b0:80:1b:a5:b6:d1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
        Validity
            Not Before: Aug 23 11:02:33 2025 GMT
            Not After : Aug 24 11:02:33 2025 GMT
        Subject: CN=24280e49b8f15b4638be73739898095f13cf5d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:6e:8b:cd:6f:0b:08:ee:be:5f:2e:85:b7:
                    08:a6:2b:30:b0:c5:f6:cd:7d:24:14:46:eb:b9:70:
                    0e:f1:31:53:8f:b5:45:3d:b9:6a:f3:e0:45:3e:30:
                    a7:d1:8f:15:77:bd:99:e2:5a:97:45:76:bf:1e:fa:
                    44:7c:30:6b:d6:0e:83:63:a9:30:88:ab:01:c7:19:
                    15:9a:16:d5:ab:ec:b6:6b:2f:76:3d:f8:88:fd:5d:
                    20:62:8d:e7:44:65:ce:27:e6:1c:a1:08:34:b6:2f:
                    52:03:d2:d5:b6:47:30:7c:14:cc:fb:bc:5d:73:a5:
                    a3:a9:6e:78:17:82:5f:3b:b1:ed:1f:86:af:86:74:
                    66:dc:25:be:8e:c3:da:0c:cf:8c:4b:05:86:38:a8:
                    60:af:5c:4c:95:74:fe:ae:29:72:7f:ef:8d:9f:c4:
                    e9:20:7a:ce:c8:04:31:ab:11:41:8f:06:86:53:d0:
                    58:a1:0c:ab:e8:00:5d:8a:3d:70:79:95:10:06:61:
                    09:1a:4b:4c:79:64:d9:d4:ca:90:8a:a4:30:71:9f:
                    ba:56:bb:da:4f:90:b5:19:a2:16:d4:4a:43:93:b3:
                    c0:09:c6:24:e3:b9:4f:59:57:6e:14:df:81:32:3e:
                    5b:b0:b0:38:8c:99:71:82:18:b6:74:e8:4b:d7:80:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:28:0E:49:B8:F1:5B:46:38:BE:73:73:98:98:09:5F:13:CF:5D:03
            X509v3 Authority Key Identifier:
                keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e3:9c:9a:eb:3a:ab:d2:f9:6e:ed:18:de:60:26:25:a9:08:
         c6:2f:eb:c7:f4:4d:74:21:ef:76:9f:94:2a:f0:5d:84:09:b0:
         3c:76:dc:16:21:dd:86:a7:19:e2:55:92:67:61:76:c6:09:ee:
         2a:1f:a6:12:8c:cf:8b:e3:ea:3f:d5:ec:27:a4:11:c9:67:97:
         62:bf:54:6f:43:c4:17:2f:bf:51:e9:1b:ef:dd:ea:01:06:8f:
         af:c6:97:ca:4f:c9:db:bc:4f:b8:39:91:69:47:c5:f9:19:fa:
         26:63:92:99:a6:77:ec:45:14:1d:9d:06:78:92:fa:5b:e3:3e:
         8c:22:5d:a6:72:ef:e5:1d:4f:67:ef:19:de:71:19:44:23:74:
         43:89:8a:83:2e:d9:58:f7:be:79:41:17:a7:08:8a:2a:2d:f4:
         77:5c:da:a0:61:04:00:ec:3e:d2:72:19:57:de:b2:02:1a:ce:
         ec:c1:fa:09:02:2e:61:cd:89:65:8f:a8:04:ff:63:c6:d3:32:
         ba:5e:d1:07:5b:55:52:e6:76:62:e0:8c:f0:a7:86:67:4d:1f:
         c3:ca:2e:78:d7:b9:22:1d:18:1a:c1:2f:bf:8a:1b:21:cd:cc:
         f4:f2:4f:5f:e4:88:67:c7:17:00:78:98:22:fc:f5:29:87:f9:
         21:d0:3a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmCm7VBdlF26wgBulttEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYzNkMzdiZTQzNWE5YzMzZjFjNjNlNTBkMGQ2NDY0ZWQx
NjEwMDQwHhcNMjUwODIzMTEwMjMzWhcNMjUwODI0MTEwMjMzWjAzMTEwLwYDVQQD
EygyNDI4MGU0OWI4ZjE1YjQ2MzhiZTczNzM5ODk4MDk1ZjEzY2Y1ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEhui81vCwjuvl8uhbcIpiswsMX2
zX0kFEbruXAO8TFTj7VFPblq8+BFPjCn0Y8Vd72Z4lqXRXa/HvpEfDBr1g6DY6kw
iKsBxxkVmhbVq+y2ay92PfiI/V0gYo3nRGXOJ+YcoQg0ti9SA9LVtkcwfBTM+7xd
c6WjqW54F4JfO7HtH4avhnRm3CW+jsPaDM+MSwWGOKhgr1xMlXT+rilyf++Nn8Tp
IHrOyAQxqxFBjwaGU9BYoQyr6ABdij1weZUQBmEJGktMeWTZ1MqQiqQwcZ+6Vrva
T5C1GaIW1EpDk7PACcYk47lPWVduFN+BMj5bsLA4jJlxghi2dOhL14BdVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQoDkm48VtGOL5zc5iYCV8Tz10DMB8GA1UdIwQY
MBaAFEDD03vkNanDPxxj5Q0NZGTtFhAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZTNjN2YtMjE4NC00MDNkLTgwY2Yt
NmU0YjNjOTJhODI3LzEvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83ZTNjN2YtMjE4NC00MDNkLTgwY2YtNmU0YjNjOTJhODI3
LzEvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOOcmus6
q9L5bu0Y3mAmJakIxi/rx/RNdCHvdp+UKvBdhAmwPHbcFiHdhqcZ4lWSZ2F2xgnu
Kh+mEozPi+PqP9XsJ6QRyWeXYr9Ub0PEFy+/Uekb793qAQaPr8aXyk/J27xPuDmR
aUfF+Rn6JmOSmaZ37EUUHZ0GeJL6W+M+jCJdpnLv5R1PZ+8Z3nEZRCN0Q4mKgy7Z
WPe+eUEXpwiKKi30d1zaoGEEAOw+0nIZV96yAhrO7MH6CQIuYc2JZY+oBP9jxtMy
ul7RB1tVUuZ2YuCM8KeGZ00fw8oueNe5Ih0YGsEvv4obIc3M9PJPX+SIZ8cXAHiY
Ivz1KYf5IdA6Vw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:23 2025 by rpki-client