Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
File:                     QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft (raw, json)
Hash identifier:          ItLrM6UkMyXBVggh2yDhBDZJ2a7oMW7K/zSTyeGcFqc=
Subject key identifier:   C5:C2:45:76:0C:71:4F:97:53:4C:7C:A5:59:63:CE:82:52:67:64:D4
Authority key identifier: 41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Certificate issuer:       /CN=4155087a81848bf7b37ff8be59751d79440d8116
Certificate serial:       01987CE50C2D4AE1E4439FEDBF7E8376D593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
Manifest number:          0577
Signing time:             Wed 06 Aug 2025 01:00:42 +0000
Manifest this update:     Wed 06 Aug 2025 01:00:42 +0000
Manifest next update:     Thu 07 Aug 2025 01:00:42 +0000
Files and hashes:         1: KZYzQ7jFzWYYwYRhQ-ZJNAP7g7s.roa (hash: bwXn17r3CjUQeiw9goACwMSayH6c9Rjo8urDQ0LO3DQ=)
                          2: QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl (hash: fqjPfZW2E/0RBmP2bFq4gvzeUGoo9V3xbgqXaqUslRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:0c:2d:4a:e1:e4:43:9f:ed:bf:7e:83:76:d5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4155087a81848bf7b37ff8be59751d79440d8116
        Validity
            Not Before: Aug  6 01:00:42 2025 GMT
            Not After : Aug  7 01:00:42 2025 GMT
        Subject: CN=c5c245760c714f97534c7ca55963ce82526764d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:df:db:bb:a1:aa:68:26:24:fd:6f:8a:bb:
                    78:df:08:20:52:e4:79:56:ad:35:de:b2:1e:e0:14:
                    f4:d5:77:4f:c1:35:c6:61:39:df:95:d8:7e:ca:6f:
                    8e:fa:01:be:c1:f7:26:dc:88:45:24:a4:2b:14:36:
                    1d:fe:40:34:9b:0f:84:18:aa:20:b8:36:9b:78:ae:
                    90:c6:97:d3:6e:3f:ea:de:b4:d0:54:2b:9c:cc:97:
                    a1:3d:3d:4f:1e:63:3c:02:07:54:11:60:15:29:47:
                    7a:98:1b:a8:65:07:8f:41:f8:33:50:40:3d:34:b4:
                    3f:97:ab:49:b8:a1:6c:52:7e:e1:cc:42:68:21:37:
                    20:0c:1a:96:96:71:c9:0f:3c:7a:4d:79:e9:4c:49:
                    93:04:15:f0:a5:65:fe:7a:14:2d:a2:6a:76:93:0b:
                    e4:a5:22:5e:90:ff:eb:44:6d:82:4d:30:cf:05:6e:
                    53:69:ae:87:4f:63:a8:84:78:a8:d1:b0:12:36:94:
                    9c:4c:91:48:a3:3d:98:0e:c8:dd:cc:04:fd:c2:d8:
                    aa:9a:1d:4f:39:d5:7f:cd:a4:ca:e3:c1:9e:bb:81:
                    9b:07:39:d2:4a:49:34:dd:d1:c9:f6:11:e1:40:9b:
                    5b:15:cb:f7:b8:e4:21:5a:bf:97:0e:5c:aa:ad:84:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C2:45:76:0C:71:4F:97:53:4C:7C:A5:59:63:CE:82:52:67:64:D4
            X509v3 Authority Key Identifier:
                keyid:41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d9:d5:d7:a1:ac:7d:07:79:47:0e:cc:3b:10:42:37:73:96:
         6f:4e:53:07:8c:17:7f:2c:0f:2e:4f:db:2a:a9:0b:53:80:85:
         d8:4c:73:76:49:67:ec:08:fa:12:a4:4b:44:52:d1:f9:f2:d5:
         de:33:05:6d:25:06:19:8b:63:81:f2:12:34:35:16:98:51:fd:
         d4:31:c1:96:40:6a:31:a7:27:f2:f1:b5:fc:25:29:b8:e3:c2:
         19:0d:79:2b:5c:00:58:a9:8b:a3:66:f5:19:ff:5a:12:87:78:
         25:af:f5:ce:da:ac:6b:b1:ba:3c:9a:1f:d6:e0:69:09:5f:5f:
         44:cd:b8:c2:4b:2f:dc:cd:92:24:f2:48:a5:d4:17:4d:52:1a:
         1c:c6:11:7a:08:9a:09:c7:83:92:c9:ee:7f:08:71:86:ba:c0:
         6e:40:96:ea:58:41:38:5b:90:5a:c4:37:8a:59:10:41:9c:8a:
         9c:34:d7:56:c1:0e:d8:b1:0e:8b:e1:f5:b5:1b:86:6d:cc:07:
         4f:d3:51:8a:fb:e9:83:74:3a:d3:85:8c:51:09:9f:17:73:11:
         4c:eb:22:c7:0c:01:7b:fb:b1:f3:53:95:76:50:e4:59:69:ad:
         99:44:8b:76:23:21:0a:5b:c2:69:37:c6:fe:21:97:f6:62:fa:
         b8:22:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:42 2025 by rpki-client