Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          uHRbCQ/rTwkambhOUVk0e6EKxFHYJlsKk6KWF223p3E=
Subject key identifier:   5A:45:3D:47:EE:81:29:27:64:D3:18:8E:A4:65:F3:8F:A8:CB:A2:FF
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       019873E30A29DA8B797429E68883EED7CB19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0CED
Signing time:             Mon 04 Aug 2025 07:01:55 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:55 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:55 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: 7TcASoSFrsNDD/IyNmilIr51ovLAE36NcFnkJ9qHCAU=)
                          2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:0a:29:da:8b:79:74:29:e6:88:83:ee:d7:cb:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Aug  4 07:01:55 2025 GMT
            Not After : Aug  5 07:01:55 2025 GMT
        Subject: CN=5a453d47ee81292764d3188ea465f38fa8cba2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f6:69:65:13:f4:8a:90:57:28:fb:3c:cb:18:
                    c1:0b:c7:45:12:7a:c1:e2:80:16:4b:f9:26:4a:ab:
                    a0:98:a3:13:6d:55:b9:22:df:5e:ca:c5:d3:54:9e:
                    e6:ee:8f:1d:97:ed:f3:07:c2:db:6a:fb:85:de:d5:
                    18:55:3f:75:8a:e0:77:90:c4:34:82:d9:e3:ae:00:
                    cd:a8:04:58:63:5d:b5:a2:98:d5:9b:45:39:db:39:
                    3e:6a:d2:c9:fb:c9:00:2b:81:41:15:fd:fd:98:fa:
                    b5:77:76:9c:0c:56:6d:72:a6:e2:4f:ab:60:5f:0b:
                    f8:86:e8:39:5a:5f:65:46:93:fb:f0:cc:43:0b:a3:
                    09:40:a8:1e:b4:f1:41:29:48:37:4b:5c:5b:db:15:
                    93:10:ad:e8:7c:d1:b7:ff:f1:22:91:7b:24:4a:7e:
                    d1:ec:bd:a4:bf:8b:90:eb:37:2f:8b:6a:41:f2:9c:
                    26:d4:eb:62:08:18:30:22:d5:cc:5e:95:aa:70:33:
                    b1:23:62:3a:cf:c7:07:89:c5:41:23:52:8c:c7:31:
                    a3:ef:04:a2:12:52:06:c4:14:4c:dd:e8:48:ee:06:
                    18:0c:90:fb:e0:df:ed:72:fc:fc:e9:2f:57:6d:54:
                    80:57:67:7c:37:61:5d:82:c2:9b:e2:af:19:2f:05:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:45:3D:47:EE:81:29:27:64:D3:18:8E:A4:65:F3:8F:A8:CB:A2:FF
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f4:fc:b1:e2:5e:b4:cf:df:7c:f2:6a:14:49:5c:d1:ea:a7:
         df:3e:47:20:0f:8e:0d:48:a2:4a:85:00:5f:02:70:70:bc:8b:
         e5:76:7c:7a:f7:89:3e:ff:db:cd:28:58:62:f1:9b:8f:84:76:
         3a:d7:9a:d2:ae:7f:42:93:dc:1e:0a:f5:5c:3a:dc:9c:7b:97:
         8b:61:cc:f7:b0:1c:c1:54:ed:83:09:4c:74:f1:02:87:f4:99:
         20:51:c7:21:61:f9:0a:bb:27:a5:48:51:c7:fb:3c:f1:0d:7e:
         68:f5:1f:83:e3:37:1c:94:e6:7f:f5:40:cf:a8:88:f2:f2:50:
         e4:db:f5:d6:17:10:f3:ac:6c:55:2b:18:ec:f2:4b:9a:55:31:
         27:b0:a8:c7:d3:53:e4:03:11:a4:a1:43:0e:e9:78:61:f5:7d:
         d6:cd:f4:ba:de:c2:79:f5:d0:97:36:5f:b4:e4:72:3c:9e:27:
         4f:d2:c0:69:da:64:25:70:a5:fa:92:82:9c:41:05:73:b2:22:
         72:f4:63:1d:3c:e3:9a:d0:fc:82:f9:b5:a3:4c:0f:b6:1c:23:
         84:c7:4d:00:fd:24:08:6d:fa:d6:ba:ee:b9:20:0d:be:6f:65:
         03:7c:bb:25:9f:e3:e1:b8:90:2e:80:04:1e:ca:6d:11:19:f0:
         f2:b4:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:45 2025 by rpki-client