Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File:                     qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier:          wg+MC3yETuiOfmIcKtA2oe4c8yDyKDqGfg/1EmSZW5I=
Subject key identifier:   55:2A:B5:FA:99:D1:04:27:0C:67:F3:F9:4A:D5:E9:CF:DD:98:88:E1
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer:       /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial:       01988921B7E2BC9E1ABE2ABBBF206FE6ECD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number:          04B7
Signing time:             Fri 08 Aug 2025 10:02:25 +0000
Manifest this update:     Fri 08 Aug 2025 10:02:25 +0000
Manifest next update:     Sat 09 Aug 2025 10:02:25 +0000
Files and hashes:         1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=)
                          2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: i8UBtNZLQBLOpbqlDfvZvJr4hvnOUsqdvFqPXkkhVYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:21:b7:e2:bc:9e:1a:be:2a:bb:bf:20:6f:e6:ec:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
        Validity
            Not Before: Aug  8 10:02:25 2025 GMT
            Not After : Aug  9 10:02:25 2025 GMT
        Subject: CN=552ab5fa99d104270c67f3f94ad5e9cfdd9888e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:f0:f0:9d:86:ba:e5:93:79:f8:12:00:97:
                    54:82:6f:b2:b9:d3:22:16:68:ce:3f:71:a3:0c:d1:
                    92:f6:91:42:8b:41:23:d9:86:81:19:2f:0a:74:a5:
                    e0:0b:d3:06:ef:d6:35:23:fe:c0:53:a7:88:8e:c7:
                    2b:80:c4:d9:b6:56:60:85:c7:66:02:30:0d:56:86:
                    78:b0:5b:cf:7d:ab:23:cb:7f:84:ad:ab:d9:d7:e3:
                    02:cf:8b:d1:a9:b0:e3:27:e4:2d:8b:6b:6a:12:ec:
                    23:a5:f8:81:58:a3:96:4a:05:86:56:a1:03:32:fc:
                    3a:9e:51:6a:5a:f4:3b:3d:67:4d:ab:38:c0:90:10:
                    c6:c7:1f:27:ad:27:2f:21:85:99:a4:e2:ef:d2:c5:
                    a6:97:b0:00:66:da:91:29:dd:5e:b0:41:ff:5d:93:
                    e1:42:14:56:7d:12:23:67:be:9a:0e:ba:ea:a7:1b:
                    a8:2d:97:1c:d2:7f:53:ec:13:6e:03:b2:3d:b9:7d:
                    ca:5a:0a:ee:1e:4f:9c:0a:8c:f9:f3:4b:53:86:56:
                    fc:a0:b4:cf:ba:82:d0:90:74:4e:05:86:20:b0:bc:
                    34:bb:77:98:d9:48:a3:08:f0:db:fe:82:6f:ac:c2:
                    a4:98:b1:d5:13:5d:fc:e5:3e:4e:58:53:68:b1:0e:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2A:B5:FA:99:D1:04:27:0C:67:F3:F9:4A:D5:E9:CF:DD:98:88:E1
            X509v3 Authority Key Identifier:
                keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:04:5c:c8:25:6c:94:8f:41:74:16:f1:1a:54:77:ac:71:25:
         3b:3c:d0:6e:7b:81:6c:52:6b:b4:fc:56:17:83:1f:63:5c:1a:
         02:b0:08:ac:80:4b:51:59:5e:2f:fa:9e:18:58:78:3e:0e:1b:
         ba:32:8a:d3:9f:f1:58:4c:3c:92:a0:1d:2b:24:71:7e:10:ad:
         70:8c:83:a1:a1:75:fd:a3:a8:ff:cc:9b:ea:65:43:7c:77:04:
         5e:7a:2d:6b:38:e7:0f:d6:5d:6e:f8:7f:cf:a3:e1:67:28:5a:
         4d:77:91:e2:0c:0d:80:09:51:69:63:9b:8c:06:82:97:5d:bf:
         f7:e4:82:d0:30:eb:c1:af:ff:5c:d5:be:92:72:31:a5:e9:0c:
         77:89:07:8b:e8:93:f8:9b:2e:be:72:08:43:46:ba:c8:9a:ab:
         4f:a7:b8:42:24:5d:de:ed:79:db:47:5a:5b:13:2a:41:a9:e5:
         8f:e4:54:ac:d0:ab:a6:28:b5:04:26:70:b9:4e:cb:06:fc:de:
         b1:6a:33:b8:ed:9a:83:3e:ac:9f:56:d0:e5:03:df:8f:2c:a8:
         b7:02:1b:ec:aa:7a:41:a5:4b:a9:2e:25:2e:cb:8a:07:3b:d9:
         89:a8:29:65:cc:94:6d:21:dc:7c:68:02:c4:7e:14:87:e4:62:
         a3:17:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:40:08 2025 by rpki-client