Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File:                     QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier:          lZMxyFitAy60UZrmtBxwVQUI4CE/3mQJVnX5orYvdHE=
Subject key identifier:   D7:E0:10:65:C4:3E:49:D9:40:1B:ED:82:EB:47:33:7C:C4:2B:5C:57
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer:       /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial:       01989713968103D213D6FD7F838B03C406D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number:          162D
Signing time:             Mon 11 Aug 2025 03:01:39 +0000
Manifest this update:     Mon 11 Aug 2025 03:01:39 +0000
Manifest next update:     Tue 12 Aug 2025 03:01:39 +0000
Files and hashes:         1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
                          2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: p6HaqtfBPslg8g9SzjNsKIWD+fTK5kNLwHH18wXt1hw=)
                          3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:13:96:81:03:d2:13:d6:fd:7f:83:8b:03:c4:06:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
        Validity
            Not Before: Aug 11 03:01:39 2025 GMT
            Not After : Aug 12 03:01:39 2025 GMT
        Subject: CN=d7e01065c43e49d9401bed82eb47337cc42b5c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:69:f1:28:1a:7a:f7:fd:a2:e8:bb:7f:cc:
                    45:8a:b8:5d:f6:71:7d:2f:ec:72:dc:96:ab:0f:29:
                    c4:a4:cc:c6:5c:92:ee:26:5d:4c:c3:0f:c7:b8:48:
                    a1:ea:6e:6f:02:8d:f7:73:96:08:0d:36:d9:6c:26:
                    f1:d9:23:a8:7f:86:6d:03:a6:75:52:e4:a3:0e:63:
                    f2:54:c8:2e:41:b0:e0:62:01:29:f3:fa:f4:16:7c:
                    9a:0e:ae:ff:a5:3a:11:e2:a5:3e:05:71:3d:a3:99:
                    93:15:5f:a7:f9:3f:8e:79:60:74:6e:02:f2:a1:06:
                    6f:54:f8:23:8a:5f:13:6f:26:5b:f8:ec:2a:2c:66:
                    ee:2e:3b:e2:62:78:b7:97:ee:4d:10:2c:e7:28:cf:
                    db:5d:34:4e:9f:39:db:09:12:1b:c4:90:5e:3a:ed:
                    eb:13:c4:5c:9c:16:34:fe:5c:b8:01:9a:fd:cd:72:
                    6b:99:d7:74:15:fb:14:3c:3a:4f:11:ad:06:06:64:
                    3c:79:86:af:01:f2:52:08:3a:7a:32:03:e0:e7:7d:
                    d6:25:8e:81:51:40:f5:92:86:34:69:7f:be:68:a7:
                    f2:97:cc:b6:92:24:0a:33:8e:ee:ea:97:a9:a7:19:
                    ac:36:5c:1c:b3:00:cd:4c:53:d1:fc:d8:76:54:08:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E0:10:65:C4:3E:49:D9:40:1B:ED:82:EB:47:33:7C:C4:2B:5C:57
            X509v3 Authority Key Identifier:
                keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:db:2e:bc:64:4d:8a:12:6b:cb:60:26:ee:61:bb:0d:1d:f0:
         93:2e:bf:45:25:6c:a8:92:34:a7:25:30:78:7e:97:40:49:d3:
         18:8e:e9:7a:94:7a:49:a7:2f:13:dc:b9:45:e5:5a:01:30:0d:
         48:f7:0f:f6:70:df:f0:4a:fe:99:2c:53:ff:6e:aa:10:09:16:
         34:f9:e8:aa:cf:43:d5:99:7b:fa:f6:f4:6b:2b:81:0e:b7:15:
         6f:22:9d:bb:96:21:35:4b:4a:fc:08:39:6e:4e:15:7a:cb:e8:
         6d:02:ab:50:c9:62:e1:27:b7:94:14:b4:aa:5a:07:6d:39:40:
         d7:37:b5:95:9b:44:e4:ce:83:83:10:cf:ae:41:3d:7e:a3:67:
         30:4c:ed:f2:47:4d:c2:67:24:fb:0b:e2:25:8f:ef:99:a6:d0:
         b3:b7:8a:9a:81:c4:d1:58:a7:92:b6:9d:48:08:a4:dd:96:61:
         8b:06:0b:ec:15:06:41:a8:91:1d:83:d1:83:96:cd:30:90:1d:
         03:ae:9f:80:8c:9e:bb:f3:4e:cd:2e:af:43:bd:c7:91:b1:26:
         21:4f:9f:8a:a3:22:11:5a:d5:c6:ed:a7:50:e7:0c:66:67:da:
         0e:5d:35:cd:00:bf:0e:62:b9:50:52:9f:56:dd:fc:ba:17:0c:
         d7:45:d8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:49:02 2025 by rpki-client