Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
File:                     QeODxYB-mzL1dtCluO53RMrPtxc.mft (raw, json)
Hash identifier:          +ZfZXPswcTDDvaZcblEUWGg2bQGUubr8TDdxbQbZQKw=
Subject key identifier:   0B:FF:BD:8A:29:BA:09:FF:30:EE:46:84:7E:DB:01:F9:1C:43:69:39
Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
Certificate issuer:       /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Certificate serial:       01987C09816AC5E6E51B635F9707CC98E098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
Manifest number:          04EA
Signing time:             Tue 05 Aug 2025 21:00:54 +0000
Manifest this update:     Tue 05 Aug 2025 21:00:54 +0000
Manifest next update:     Wed 06 Aug 2025 21:00:54 +0000
Files and hashes:         1: 03enaQCGw_eqXqIAwZyG-7zrfRA.roa (hash: YhNG/6VofCuK7pQjtVrVurKsTSoyBGAKru+JjLAKpoo=)
                          2: DUyUlX3xTZHlVnLSKpECvt4NkYU.roa (hash: ZP6huwEf1pdyFLtyz+3lIcMnm1rz3bsZAcR3RQdU+KU=)
                          3: QeODxYB-mzL1dtCluO53RMrPtxc.crl (hash: /sq+NQKHK4JrUhDFt/Zg3HHlna/cCagQLAAqTgVnEdo=)
                          4: bB3G3EZqBAqArfU6X5zzc1opBME.roa (hash: gPeixOKastqxOj7HlHBp8UwchVAjS4fsBzFCexJl5H8=)
                          5: lKGyjDcky_IoNZN6qvlaMVTqM58.roa (hash: IiBQAy+zcf79xQNY8RIQMsijGISjsQrLjaoVvIJA9t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:81:6a:c5:e6:e5:1b:63:5f:97:07:cc:98:e0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
        Validity
            Not Before: Aug  5 21:00:54 2025 GMT
            Not After : Aug  6 21:00:54 2025 GMT
        Subject: CN=0bffbd8a29ba09ff30ee46847edb01f91c436939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1d:e3:96:5e:a9:8b:e0:33:e9:8b:6e:44:8d:
                    6f:05:ab:09:1e:30:67:4b:87:41:e8:69:6a:62:79:
                    cf:9e:7e:e4:b3:e7:38:33:80:07:c5:70:f8:b2:53:
                    4f:7c:e6:b6:55:a1:09:52:c7:06:47:8d:8f:7b:29:
                    e0:a3:2a:f8:65:d2:55:e0:81:5a:44:d6:44:92:7b:
                    4e:8c:e4:27:09:20:01:7b:c8:f1:ba:81:65:3a:7b:
                    e9:ba:06:2d:a1:97:61:fb:04:0e:9d:be:7c:4e:8a:
                    0f:de:95:e1:c6:b5:5e:ea:60:5c:90:4e:50:25:30:
                    2e:cf:59:04:a6:97:01:cc:09:be:1c:6f:4d:68:16:
                    49:44:b8:6c:b1:2b:eb:9c:ac:62:9f:e1:15:83:9c:
                    25:25:d9:6a:69:f4:60:80:64:2d:d3:6b:22:dc:1d:
                    81:0c:06:e0:70:96:c0:31:28:57:24:a2:98:34:a1:
                    e4:f8:59:76:8a:90:d1:25:b4:f8:47:0e:09:1e:b1:
                    dc:c9:38:aa:b1:27:62:99:06:a8:e8:09:83:ae:72:
                    72:11:31:55:cc:33:68:2c:28:bc:4f:bc:51:e6:8b:
                    da:06:b0:50:69:6d:4d:e3:a9:0f:60:5d:b0:18:1e:
                    04:a6:b8:10:b1:fe:0f:2b:0b:b0:6d:af:c3:35:f2:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FF:BD:8A:29:BA:09:FF:30:EE:46:84:7E:DB:01:F9:1C:43:69:39
            X509v3 Authority Key Identifier:
                keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:79:70:65:46:b1:2a:f6:5e:66:b3:ae:96:53:4c:0c:b8:35:
         7d:89:88:d4:33:4a:94:db:1a:ce:d5:cc:1a:ac:ea:a0:e5:d3:
         79:80:dd:67:d3:6b:06:85:6e:4c:d6:74:ba:ed:a5:a8:52:0c:
         63:9e:38:11:30:ad:d8:70:09:2b:63:49:b7:8c:24:de:77:b4:
         3d:0a:b5:20:5d:33:69:a4:c8:81:a9:6b:94:38:25:03:8c:19:
         bd:5f:54:e3:f1:d2:9b:1c:37:0b:99:48:1e:6a:75:54:e4:fa:
         e4:c1:d4:4f:b9:6d:da:f5:3a:0c:17:7c:c2:7a:6f:da:1b:3a:
         de:9a:01:00:8c:e6:8a:f5:81:2d:2a:ff:e3:ff:b6:83:a9:a1:
         8b:c3:a1:18:43:ef:40:e2:7f:70:99:0f:31:da:19:88:4d:d7:
         7f:71:5e:61:ac:62:3b:9d:87:9d:e4:9a:f2:72:ac:c1:1f:1c:
         42:55:a0:17:dd:49:64:7c:29:7a:b6:32:61:6e:49:21:09:87:
         7b:02:2c:eb:3e:e6:65:be:7a:65:3e:c4:5c:5d:d7:5f:65:69:
         d4:76:4f:56:fc:1e:0c:f2:ee:c1:e7:4c:07:25:13:ab:d8:12:
         34:75:28:bc:1b:d2:fa:92:3b:14:0d:93:34:7a:df:e5:03:8d:
         8e:f9:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:52 2025 by rpki-client