Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File:                     qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier:          BVz9v4NUtLPO7xJx1lE+a7WIWD1DR8Ggtve5NljafiI=
Subject key identifier:   30:35:B2:B8:8C:18:13:A1:0F:CC:B7:1D:3C:C5:8F:6B:09:93:14:17
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer:       /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial:       01987450AD9B592A18911D20F618D03D5C4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number:          163A
Signing time:             Mon 04 Aug 2025 09:01:40 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:40 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:40 +0000
Files and hashes:         1: 5HOepO76tD27CgXh7AgBSaOVvIM.roa (hash: fhyBpQTMKKX7db+5/rypfSBY1Vplej8lw2Wzs2aMOjk=)
                          2: cBAOU6NilQLgyxc_R_xsZNCxa3o.roa (hash: 1Va+iG7tZoyq2utzAVoaMA4hrJ+B4uv1WrhEZfEJdns=)
                          3: f5DYymL8L0FgOoFZZezVYFeh5Jg.roa (hash: 7uwt9itnco/csPtpi/DQC4t0QetXfLjimKtZXfisb00=)
                          4: jVDEyqMCODRbBkqkq43-QF92dZM.roa (hash: s/kttAz6ZQTi3SrIl36OIG3RsnNyK9roMAcg0ML6WjQ=)
                          5: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: YXLw6Z9C2IV5NszeLv24D5u+D0RuaxQIhh2kcz6MPYo=)
                          6: t0oLewvfmtctM6fLKW7JACNy67I.roa (hash: eoIen7jr8ftFR2LBFlJ/X2GszHh0uXwaMxdCabuer48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:ad:9b:59:2a:18:91:1d:20:f6:18:d0:3d:5c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
        Validity
            Not Before: Aug  4 09:01:40 2025 GMT
            Not After : Aug  5 09:01:40 2025 GMT
        Subject: CN=3035b2b88c1813a10fccb71d3cc58f6b09931417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:6a:8a:fe:d0:65:6d:54:92:29:e8:20:6d:
                    d3:2c:5a:50:cc:9c:4d:d2:47:79:93:c5:85:1c:3e:
                    73:3b:7d:b9:e9:e4:57:88:55:7b:d9:1e:fa:d1:6d:
                    9c:66:7a:58:c8:0d:fa:93:ec:2f:00:c1:9a:d7:a7:
                    84:fa:03:d9:32:6d:e3:fc:d4:77:67:2f:0e:2a:71:
                    59:47:68:7a:b1:60:e7:b6:e8:8d:4d:4d:cc:53:9a:
                    43:0d:e3:cf:62:66:fd:74:cf:88:48:08:d7:a0:fa:
                    aa:38:62:e6:be:f0:2e:23:64:2e:36:bb:45:3f:a1:
                    7b:5f:f1:09:1c:3e:d3:29:86:06:b3:5a:82:ff:29:
                    2c:f7:36:08:07:12:20:08:2c:3f:06:84:55:18:70:
                    06:be:45:e8:08:2c:ae:6d:31:65:5b:d9:53:48:d7:
                    e2:b7:ca:02:3e:da:32:b3:ed:fc:67:5a:37:ec:38:
                    76:6a:26:ac:01:77:c0:19:13:b9:cd:53:7f:30:11:
                    b2:83:21:bb:df:a0:e7:d1:af:db:af:69:de:f7:8a:
                    a3:05:80:1a:4e:86:61:88:1d:ea:bb:00:3e:21:55:
                    6d:fd:1a:96:b7:f0:9c:97:a7:4f:d4:8b:cd:d8:7c:
                    44:86:33:93:eb:60:ae:fe:cc:fb:8d:9c:b5:82:ff:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:35:B2:B8:8C:18:13:A1:0F:CC:B7:1D:3C:C5:8F:6B:09:93:14:17
            X509v3 Authority Key Identifier:
                keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:15:5d:06:7e:4d:7b:81:1a:a7:07:f0:26:fa:ee:d0:83:4d:
         20:0d:a8:5b:c8:ae:12:bb:7d:3e:6b:33:ec:b8:a6:1f:28:30:
         75:d2:d6:5c:f0:e4:40:0e:ba:b9:58:25:c5:5b:2e:90:98:e0:
         50:58:2d:cb:af:5d:90:59:f5:83:b2:7a:4b:7f:33:8f:9c:2d:
         73:42:94:59:21:b3:c7:71:18:c9:d7:7b:10:98:0d:86:b4:90:
         b9:bc:d3:fd:f4:62:1d:09:ff:96:93:57:0b:62:a7:9f:bf:56:
         51:0c:e5:04:cf:42:d0:35:72:33:2b:3c:82:cb:d0:60:6a:3a:
         a2:9c:fe:bf:f1:b6:e8:80:88:7b:ab:45:0e:b6:a7:19:eb:02:
         93:4a:c4:89:c9:df:ee:45:8a:84:2b:d1:09:3a:f3:38:35:d2:
         90:a3:84:d0:4f:e1:5a:2c:17:38:5d:7b:6e:e7:10:a8:32:cb:
         12:5c:1a:7c:3d:77:3a:a3:a8:83:c1:4d:fc:18:1f:13:bc:ce:
         83:b1:b2:e7:1b:be:a2:66:21:7b:85:d0:4c:c5:33:bf:c5:72:
         4e:3e:b4:ee:79:22:fd:d5:ef:63:4b:81:72:d0:c8:e4:51:28:
         29:46:d9:50:91:1e:28:f7:24:1e:09:fe:29:d5:cf:15:90:db:
         e5:21:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:58 2025 by rpki-client