Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File:                     qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier:          cq8H2ss0mS8sRzGEO1rnqpk8ysXLwQAiMYDsUrr8M/U=
Subject key identifier:   16:C6:07:4B:19:5D:B8:6C:00:0C:5A:72:D1:1F:1C:CE:1A:30:2B:84
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer:       /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial:       01988B4578580B4B52AFFA491EBEFA54ACCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number:          1622
Signing time:             Fri 08 Aug 2025 20:00:42 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:42 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:42 +0000
Files and hashes:         1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=)
                          2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=)
                          3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: Q6Ca7Ztlbriewxh9AYiMCHLqDh1GtqB0NzgDyZY47Vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:78:58:0b:4b:52:af:fa:49:1e:be:fa:54:ac:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
        Validity
            Not Before: Aug  8 20:00:42 2025 GMT
            Not After : Aug  9 20:00:42 2025 GMT
        Subject: CN=16c6074b195db86c000c5a72d11f1cce1a302b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:51:74:d8:8f:85:33:68:a2:0b:20:08:27:41:
                    ed:7d:c9:cf:d9:63:e5:43:a1:d3:dc:25:5b:50:75:
                    95:b6:81:12:62:e8:1b:27:75:ad:10:0f:91:34:4f:
                    8f:92:c2:95:1a:50:84:a2:a4:e7:43:6f:a9:8a:66:
                    48:d7:43:99:b3:fa:a6:7f:e8:11:08:67:c2:7d:56:
                    e5:54:9d:f9:64:9f:5f:57:fe:48:8d:9b:2f:85:ad:
                    b0:c2:c1:f6:e4:cc:4b:ae:74:49:b2:b1:b6:6b:2f:
                    c8:1a:2e:9b:82:24:f6:13:d2:7e:f6:f3:36:00:65:
                    b7:aa:52:3f:99:86:c8:0d:32:ca:94:3f:06:5c:af:
                    17:b5:a8:23:b9:89:6d:e1:57:81:4d:55:50:70:f4:
                    44:1a:d8:32:7e:90:83:98:7c:7c:59:bc:33:f4:9c:
                    74:23:34:c0:d0:d6:be:86:ce:75:99:27:b6:86:78:
                    92:92:6b:95:e6:f1:83:cd:88:26:2c:06:28:b7:fe:
                    5a:4d:7c:fa:20:80:22:8c:97:57:d1:41:5b:fa:21:
                    1e:8e:15:22:d0:b0:e2:26:90:8f:b5:c1:79:cb:3d:
                    76:bc:7c:eb:7d:84:da:71:ce:9f:2a:9b:22:c7:5b:
                    82:58:39:ef:6c:7f:87:eb:34:d4:20:e2:91:8a:fc:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C6:07:4B:19:5D:B8:6C:00:0C:5A:72:D1:1F:1C:CE:1A:30:2B:84
            X509v3 Authority Key Identifier:
                keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:20:c9:85:f3:40:69:55:3f:6c:ae:d1:b4:6d:55:82:f0:
         dc:94:c1:c5:03:74:8f:45:fa:ab:ab:ad:43:0c:ce:23:24:ab:
         ed:17:22:4f:a6:dd:df:f0:ae:38:1a:9d:d8:1c:24:06:10:bc:
         aa:b7:52:7a:b3:37:d7:3a:f7:e7:96:c1:30:b3:19:27:bc:19:
         42:4a:a4:2c:a5:b3:6a:95:0d:a2:f5:05:02:d5:88:82:4d:bc:
         e8:7f:18:eb:90:41:0e:bb:d3:32:ef:75:c9:a7:9f:90:70:03:
         44:e3:5c:3e:10:46:f4:f3:e5:08:3f:75:f7:07:bb:21:cd:0e:
         9f:b9:f8:04:a2:f0:5d:c3:59:76:71:61:54:59:49:7a:fe:43:
         1c:e0:73:eb:c4:38:05:09:3f:4c:a1:4a:e0:40:05:03:75:dd:
         7b:4a:95:8e:35:9a:59:66:31:9b:eb:6a:93:f8:23:d0:d7:c5:
         3f:d4:2b:28:23:60:2b:6f:ef:d3:2b:d8:4b:32:4e:b4:f5:96:
         e9:9d:c3:d2:c5:cf:2e:bb:4b:85:58:f7:cf:14:df:9a:19:07:
         62:72:fe:2f:59:b4:3a:b8:21:c3:49:98:e6:91:6c:f8:33:d8:
         9a:ab:76:32:3e:1a:64:b5:c3:45:a3:75:ad:59:dd:39:70:75:
         2d:41:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:33 2025 by rpki-client