Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          f66CtCsGDICgaSjQfhe9tv+cyEOybYznQgbcMkLLdsw=
Subject key identifier:   22:95:ED:E7:98:E2:17:FA:06:F6:11:6F:3C:36:2E:16:52:51:BF:B3
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       0198857A8CD09628A75D9F1BB6AE3B1231BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          0AB2
Signing time:             Thu 07 Aug 2025 17:00:57 +0000
Manifest this update:     Thu 07 Aug 2025 17:00:57 +0000
Manifest next update:     Fri 08 Aug 2025 17:00:57 +0000
Files and hashes:         1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: +kf6PkqH4jOscBASAUAwaqBcNlsR18C1EQPF0OBIlZ8=)
                          2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:7a:8c:d0:96:28:a7:5d:9f:1b:b6:ae:3b:12:31:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: Aug  7 17:00:57 2025 GMT
            Not After : Aug  8 17:00:57 2025 GMT
        Subject: CN=2295ede798e217fa06f6116f3c362e165251bfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:6d:ea:d2:c2:d9:65:9c:8e:77:5f:1e:c5:
                    ff:eb:76:c0:36:0b:f2:51:a8:c0:17:a6:76:6c:f9:
                    39:77:81:c7:83:d8:8d:9b:a8:21:6c:23:86:2c:14:
                    ff:ea:d9:45:6a:a7:10:eb:e6:d3:3f:cf:cf:1a:2f:
                    2b:ca:80:28:1b:7d:b7:30:b8:a6:dc:90:1f:10:7e:
                    1f:ce:68:96:ec:a4:d1:9d:fc:48:89:7e:08:27:47:
                    0a:44:11:ba:75:3e:a8:ff:62:2a:bf:0a:9c:45:d1:
                    dc:db:cc:f2:9c:6b:dc:a5:5d:cd:c4:d3:9f:bb:f6:
                    b9:83:39:b5:2b:d7:f7:53:00:9c:1a:d3:9f:2d:c1:
                    21:58:b4:79:00:8c:fe:2b:d3:bb:d3:1b:21:52:10:
                    4a:64:72:cf:61:25:ad:bf:7d:92:f8:eb:7c:b3:72:
                    82:a3:77:2b:c7:f2:57:9c:40:cf:a1:97:81:dc:3a:
                    7f:d0:22:a7:f8:b1:66:91:54:57:9e:96:4d:69:07:
                    6d:69:e9:ab:9c:cc:3c:3f:90:9d:c2:0f:11:eb:1e:
                    fe:81:0a:73:d7:0a:7c:10:7d:db:e6:01:ba:6a:91:
                    5d:34:97:c1:05:9c:f5:5b:6e:3a:49:1a:e3:fa:36:
                    65:91:5a:e0:e0:85:f4:7b:25:a0:67:fd:9d:f2:e1:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:ED:E7:98:E2:17:FA:06:F6:11:6F:3C:36:2E:16:52:51:BF:B3
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:78:7e:6e:0f:ba:eb:a9:03:0b:97:f4:64:31:73:d0:f0:4b:
         30:56:1e:24:10:ae:0f:50:08:4c:6a:b1:7c:38:5d:f4:20:74:
         ba:44:d3:e4:9a:5b:32:f7:92:01:7d:1e:86:af:f3:bf:37:aa:
         96:8d:6c:09:4f:48:ac:85:b3:a7:79:62:f8:c0:36:e8:60:64:
         34:09:5c:d2:d8:f0:c4:40:0e:99:4c:66:9b:81:e8:a4:9b:f0:
         9d:99:4a:77:05:74:1b:75:1b:94:f3:6c:7e:14:d4:ec:72:0d:
         bd:82:30:e5:67:4b:a9:8e:2e:ac:df:bf:af:4e:e3:ef:f0:6e:
         1c:2a:4f:b9:c2:8a:ac:42:0e:27:35:16:2c:b5:0f:fb:5d:4e:
         e1:ea:f3:87:25:50:8c:44:dd:7c:02:06:c1:32:be:27:69:1a:
         f5:ae:9d:9d:af:e6:f1:e6:7a:1c:d2:bf:fe:af:ee:e1:dd:ce:
         78:fc:f2:36:09:00:9e:9d:72:6e:1b:d2:55:36:9f:da:f9:fd:
         24:82:03:b0:f4:92:55:2b:3d:c9:af:02:84:e4:dd:69:03:32:
         be:5f:aa:da:ad:28:fa:d4:4d:ae:2d:15:7a:34:74:1d:c6:4b:
         41:3c:f2:20:d7:5b:91:32:8a:45:fe:4f:16:f3:2d:e0:7f:04:
         e5:4c:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:22 2025 by rpki-client