Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          76R0FoqVknnQJ5janbz3bV4B0DT+vjtnh+rKx9gC7zk=
Subject key identifier:   29:0C:EC:0D:51:3C:06:ED:10:9E:88:9D:F6:B9:EE:0A:85:6C:A7:F8
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       0198733D21A6A5C5CDB3951E38F08FC03E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          09E7
Signing time:             Mon 04 Aug 2025 04:00:42 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:42 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:42 +0000
Files and hashes:         1: 1-Q-SU6M1eWokdvHWYPfiDLf862M.roa (hash: C1hLhsta908XltJUmng5iUBY0gsffPf1N3xCcfgoTn0=)
                          2: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
                          3: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
                          4: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
                          5: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
                          6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: b9kjhxFLShIhfa0NJ4P1Ei3Sv1QdtFZBnmeJ6HJGhsw=)
                          7: sRlrf2L_j98uPIoNnChhrs6bing.roa (hash: 1ZhMP4XH7DUgYDZTVYKViXDgJjDrkhtBjx0bS6tr/u4=)
                          8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
                          9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:21:a6:a5:c5:cd:b3:95:1e:38:f0:8f:c0:3e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Aug  4 04:00:42 2025 GMT
            Not After : Aug  5 04:00:42 2025 GMT
        Subject: CN=290cec0d513c06ed109e889df6b9ee0a856ca7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:0e:3d:b8:c6:f7:40:d8:bb:7c:42:20:90:
                    93:76:57:5e:20:c6:7e:1f:e1:56:52:4b:e3:1d:2d:
                    d8:4b:60:86:5a:88:3e:5c:83:67:e9:67:cb:11:4c:
                    e5:2b:59:36:df:e6:f8:01:81:c6:22:81:c7:f3:5c:
                    d2:d0:66:a4:de:ba:ed:88:57:3e:0e:a7:b0:4a:d1:
                    f1:74:e5:23:d1:db:4e:03:e6:24:86:29:68:ed:a1:
                    ad:67:70:d8:f1:6f:74:db:fb:dd:91:44:d5:52:09:
                    ee:b7:4e:9d:a8:aa:c7:95:9c:0d:af:30:a9:d2:34:
                    47:ba:f5:94:44:ac:a9:0c:2f:12:12:f2:66:2e:bd:
                    0c:a2:77:a6:f6:c0:af:bb:c2:aa:e9:cc:8b:9b:8f:
                    3d:27:bd:ba:68:5e:4a:9d:0a:ed:3e:c7:aa:3a:1c:
                    a0:c9:3a:44:71:46:50:69:67:62:5b:0d:8e:3d:74:
                    7e:8a:d6:dc:62:99:8b:42:f2:d1:ff:48:ed:10:85:
                    a4:b8:4d:67:66:c0:a1:a5:be:57:38:d5:e0:8a:02:
                    a5:ec:f0:cb:c1:38:35:9b:61:a1:2e:72:5f:28:8d:
                    01:1c:17:18:48:02:03:ff:b9:83:83:8b:72:4f:04:
                    93:3f:16:bb:ea:ca:5b:33:21:ef:2e:88:7d:3b:f6:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0C:EC:0D:51:3C:06:ED:10:9E:88:9D:F6:B9:EE:0A:85:6C:A7:F8
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:a9:a0:a5:61:cd:8b:8f:a1:2d:51:3b:c1:e8:c5:4c:fc:
         e2:28:85:6f:3a:1b:1c:e8:ba:7b:fb:18:74:a8:fd:ea:6f:25:
         5e:12:65:81:d1:e0:2a:1d:d9:2d:39:4b:00:14:55:11:fa:46:
         79:02:0c:ed:c8:6a:77:93:3b:24:96:b3:b9:26:bb:5d:9b:1d:
         fd:06:b2:b6:cb:91:48:35:87:c9:76:de:35:f6:d9:4a:6b:ee:
         cd:cd:95:9c:17:e0:eb:76:e0:d1:51:1e:ed:ef:0c:ed:b2:b0:
         79:43:b2:47:6d:53:69:2b:42:02:c2:22:d5:85:17:04:95:c8:
         21:26:d9:65:5f:74:40:a8:fe:57:46:4c:1f:ad:3f:7a:29:c8:
         bb:3a:e1:72:81:f5:50:8c:37:66:f2:84:b6:0e:91:fd:a0:b7:
         06:af:13:ec:ba:10:bb:1a:6f:fb:e5:3e:a4:ca:95:57:b5:94:
         36:d7:d1:97:7c:09:79:5d:d6:c2:75:76:64:31:f5:12:60:54:
         bf:01:d1:c8:6e:a3:66:91:37:6d:50:2d:ad:2e:8e:98:b5:6d:
         39:f0:89:95:06:1f:e4:f0:06:4f:31:ec:f4:74:2f:f5:f9:bc:
         40:74:6d:bd:aa:44:35:20:df:31:f2:c4:b1:91:0c:de:d0:40:
         61:35:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:19 2025 by rpki-client