Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File:                     QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier:          Radnc3noMLZzfU5OtdM0IZdlWTcZ2fJVbs5MOOSgMfM=
Subject key identifier:   CA:D1:61:38:2D:BF:30:1B:C3:4C:B0:CA:D6:68:40:59:27:EB:9B:E5
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer:       /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial:       019880F8F1D350100BDCB4B51FE471BD76CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 20:00:55 +0000
Manifest this update:     Wed 06 Aug 2025 20:00:55 +0000
Manifest next update:     Thu 07 Aug 2025 20:00:55 +0000
Files and hashes:         1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=)
                          2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: Sf9IFl1zY4tB3KeK6xBjZwrIytjdRdZwmRa9b35R1ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f8:f1:d3:50:10:0b:dc:b4:b5:1f:e4:71:bd:76:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
        Validity
            Not Before: Aug  6 20:00:55 2025 GMT
            Not After : Aug  7 20:00:55 2025 GMT
        Subject: CN=cad161382dbf301bc34cb0cad668405927eb9be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:f3:8e:69:d1:3a:01:4d:71:88:ce:7d:06:
                    4e:7e:38:b8:4f:8e:ce:23:b2:ed:98:65:dd:ab:db:
                    3f:89:77:a3:df:0c:2a:f8:cb:9a:e0:27:a0:ca:73:
                    05:b4:27:9a:da:62:86:a5:6e:63:64:a3:3a:f7:98:
                    88:52:a1:a3:d7:89:44:71:fd:3b:08:48:8e:d9:00:
                    f3:cf:fb:4d:ca:d9:6f:47:e1:d5:e5:ad:a7:00:69:
                    67:2b:23:55:bd:f9:75:66:29:a5:cf:32:55:8b:c9:
                    11:6b:40:18:94:ab:9b:1c:e4:a8:2f:4e:61:2e:17:
                    e4:10:d9:3a:ae:2f:5d:80:09:6a:85:76:0d:89:ac:
                    c8:bd:d9:48:5d:d1:21:f3:64:9e:61:b2:d2:68:22:
                    58:e2:47:13:51:14:f3:86:8a:ca:10:8e:45:5f:bc:
                    8c:61:85:13:aa:34:0b:54:2d:a2:dc:11:b1:d0:e5:
                    f4:c6:f4:31:14:b6:85:3e:05:6b:00:20:e7:1d:79:
                    a1:1e:35:0b:4b:35:71:ca:e4:68:7f:45:c1:e9:24:
                    ae:0e:27:0c:a9:35:bf:3f:5c:e4:f6:bf:3d:50:2b:
                    39:31:09:58:cb:45:21:44:9f:44:b9:80:43:d8:d4:
                    d4:d6:ed:17:c3:5c:56:66:58:9e:11:02:9e:bb:c4:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D1:61:38:2D:BF:30:1B:C3:4C:B0:CA:D6:68:40:59:27:EB:9B:E5
            X509v3 Authority Key Identifier:
                keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:68:96:77:08:64:d2:09:11:4b:87:ec:3c:3f:91:91:1a:98:
         92:9d:0a:2a:ad:7a:1c:a8:4d:40:fb:72:9b:a9:a4:35:0e:c6:
         65:c2:34:17:47:ac:5d:2d:da:8e:ff:12:e0:fc:a8:dc:96:9a:
         f0:8a:70:f2:6c:97:09:84:04:ca:9a:d8:45:3c:2c:8b:1a:88:
         9a:8d:9a:e3:44:d6:28:0f:6c:2a:f7:43:6d:b0:a9:f8:35:44:
         e2:7c:7a:6d:55:1e:75:97:37:c9:e8:0f:72:bd:ac:47:fd:5f:
         96:6c:8b:7c:e2:d2:01:cc:7c:7d:d4:91:af:2f:e2:32:26:ea:
         df:9a:1b:18:b2:fa:0c:7a:54:50:bf:78:75:c0:2e:44:c9:d3:
         9a:ad:60:35:05:86:6a:72:39:7c:52:ae:fe:b0:6b:07:a5:a4:
         36:0b:bb:eb:e7:34:cd:d9:e5:8e:bd:fc:4d:4b:66:4c:aa:89:
         03:ad:18:ea:fb:9e:42:8d:9f:24:dc:9c:77:9e:7c:24:52:84:
         05:1d:5f:59:55:89:60:b3:44:6c:1d:70:63:63:22:44:7d:fc:
         e4:05:d0:18:3c:3f:9d:6e:70:38:c5:53:ca:97:7e:cd:32:8e:
         91:ac:71:1a:29:74:20:01:a4:64:86:9b:d1:60:24:80:2f:67:
         7a:fc:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:38 2025 by rpki-client