Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File:                     qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier:          alsSD+z+ZYaThe826RbbiIlLo8edzg1lIDAWL+wboSU=
Subject key identifier:   7A:03:17:D3:BD:7C:14:25:94:FC:4A:95:4F:8A:6C:EB:6D:89:C9:C1
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer:       /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial:       0198819DF8B78237501E90E3D826DE416514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number:          06AA
Signing time:             Wed 06 Aug 2025 23:01:10 +0000
Manifest this update:     Wed 06 Aug 2025 23:01:10 +0000
Manifest next update:     Thu 07 Aug 2025 23:01:10 +0000
Files and hashes:         1: 5O0UiD_W3tjgR9ssx2_M3oXSAqs.roa (hash: gAGUmwLvei624zjz2Ru7prJo+tns2dqLybNdH1gm80g=)
                          2: Np6VPO8za4y-5v0it7csNncXkyo.roa (hash: mi8HH/21UxHGDxLKhYzJVf0/T3jJHi/D1SQLyFOEVNU=)
                          3: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (hash: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=)
                          4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: yBvn2N2w/bb82IQ7XMcrLVDgoBAHRtg858ifIcSsKzs=)
                          5: zkvZvBR_ZIBD-QsAPtiUmTfPoYw.roa (hash: QZPnljABa+B7L3bRvs6ZKt265sGoFXO7IkclbyLbbsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:9d:f8:b7:82:37:50:1e:90:e3:d8:26:de:41:65:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
        Validity
            Not Before: Aug  6 23:01:10 2025 GMT
            Not After : Aug  7 23:01:10 2025 GMT
        Subject: CN=7a0317d3bd7c142594fc4a954f8a6ceb6d89c9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:b3:e8:ca:ad:cf:33:2a:b1:e3:c1:78:e1:
                    fd:15:1d:0e:11:aa:2c:e5:20:4b:2c:bf:18:a4:8f:
                    bc:91:da:f9:52:ed:a8:7b:0f:be:be:9f:48:0a:f0:
                    ec:b8:e9:2a:c4:7e:18:07:02:88:72:39:48:15:1a:
                    a6:cb:99:16:48:49:54:20:24:f8:50:dd:f8:4f:27:
                    60:30:00:b2:c4:d9:63:b6:7f:a5:af:64:1c:de:0e:
                    5d:d2:bc:a2:7f:7b:5e:46:ba:e3:eb:74:1c:8a:91:
                    91:d0:d5:69:cf:4f:8e:67:1b:c1:19:1e:62:80:51:
                    94:85:0b:02:de:b3:01:7e:05:b6:7a:73:b5:9a:0d:
                    9d:6c:d2:ca:51:65:51:52:dd:42:3b:35:1e:85:90:
                    a2:fc:b8:23:e2:6c:92:ca:1e:4e:36:fe:a1:d6:26:
                    2b:48:5b:fd:76:09:38:56:99:56:3f:94:00:ab:c5:
                    f9:1e:e2:15:b7:bf:77:ec:ff:04:c9:de:c1:68:f3:
                    80:fa:5c:ad:8b:f3:a7:9d:a0:75:04:70:9d:f2:87:
                    ae:76:76:cf:72:80:41:65:91:f7:e9:0d:26:c6:b7:
                    fd:76:a6:4e:7d:5b:d3:9a:cb:ae:ea:12:a8:e5:af:
                    67:37:32:fc:67:c0:91:8e:b4:b0:f6:22:e0:09:50:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:03:17:D3:BD:7C:14:25:94:FC:4A:95:4F:8A:6C:EB:6D:89:C9:C1
            X509v3 Authority Key Identifier:
                keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7e:33:5f:9c:5a:fa:c1:ca:8e:c7:f3:a8:f7:ac:30:8b:f7:
         77:38:ca:0d:9b:f9:5e:6c:24:fb:be:0c:42:da:8a:70:02:16:
         c3:e5:9b:1a:4a:30:fb:a2:3f:e4:11:4f:82:02:68:e3:25:66:
         70:7a:fb:15:cc:e2:1c:8a:0d:cb:23:cb:75:ef:96:3d:9e:36:
         a3:20:43:56:72:c5:e4:33:c8:75:fb:ed:4c:a1:f4:e0:32:b2:
         21:e3:5c:e3:81:de:f0:5f:dd:b3:60:a6:aa:41:cd:dd:0f:f1:
         a6:6d:62:ae:80:35:d2:2f:05:fd:e4:b8:6a:e1:c3:11:df:e8:
         3f:0b:c2:ed:55:fa:d2:a8:20:dd:86:c7:fa:93:55:51:92:fc:
         fb:9c:98:bb:42:41:b6:44:84:22:59:18:f7:d7:6a:3c:b5:55:
         cc:b2:7c:ee:3e:11:fd:4d:fb:dd:0d:40:3c:75:8e:40:f3:97:
         e7:a2:ac:74:b0:09:74:c3:f5:6e:a1:b5:32:8f:b1:cf:5e:6f:
         a5:80:c6:e7:18:5c:0e:16:f9:2c:05:10:e5:34:34:cb:79:f0:
         a1:f4:8a:a3:04:92:17:ae:bc:b4:06:26:fe:28:7d:fb:9d:da:
         28:71:22:13:7b:88:8d:7b:d3:b9:a0:61:e6:69:79:03:8d:c3:
         35:af:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:09:39 2025 by rpki-client