Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File:                     QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier:          nJVLgKRuOyU0UiULF7UTy5TqUp55azrEzwsGOZuD5ys=
Subject key identifier:   06:17:AC:66:D0:0D:6F:99:F3:B5:99:34:E7:70:E3:92:60:63:9E:14
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer:       /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial:       01987298B541AC9D794C794493E5942BD2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number:          13A2
Signing time:             Mon 04 Aug 2025 01:01:07 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:07 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:07 +0000
Files and hashes:         1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: PqrHGb3QPyr4tPgAAgVavAQMABc2Bidp0Q8wo4KfPPY=)
                          2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:b5:41:ac:9d:79:4c:79:44:93:e5:94:2b:d2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
        Validity
            Not Before: Aug  4 01:01:07 2025 GMT
            Not After : Aug  5 01:01:07 2025 GMT
        Subject: CN=0617ac66d00d6f99f3b59934e770e39260639e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:cb:3b:8a:31:70:e8:2e:68:a5:e8:c1:46:
                    f4:23:f7:40:15:a2:b8:4e:d6:f3:5b:60:eb:36:33:
                    ce:3f:3e:39:c3:3e:c9:d4:68:64:6a:cf:55:51:71:
                    e6:66:1c:56:c6:02:fb:eb:3a:47:85:c2:40:80:0e:
                    87:c3:db:46:0e:b0:ba:9d:a9:d3:a9:0d:03:1f:67:
                    81:f2:95:58:e9:5b:7e:3b:bf:c4:d0:e7:ef:08:5f:
                    da:68:b9:22:ca:c5:e8:37:11:46:42:3e:44:b7:51:
                    86:de:24:07:a4:6f:39:92:a8:3c:83:39:8a:ff:d0:
                    bf:3c:ab:81:ff:26:ee:95:03:53:57:da:2b:cf:9b:
                    c4:bd:f9:40:ca:01:9e:66:fc:8a:a2:b2:d8:86:4b:
                    b1:99:3c:20:ef:65:13:e3:ed:5e:1d:9c:c0:b5:50:
                    fb:6b:0a:a4:c4:b7:2b:75:79:16:a6:6f:8a:99:0b:
                    a6:2a:d4:ff:9e:1d:7e:7b:1e:e6:e7:bb:50:3b:d6:
                    cb:84:e6:64:df:be:61:fb:e8:45:2f:36:a4:d8:14:
                    51:d8:05:3f:b8:fe:d1:06:fc:b1:38:25:fb:7f:e7:
                    7b:85:2d:70:0a:ba:7d:af:32:07:e2:95:e0:f3:d2:
                    4d:8a:b2:c9:b2:5c:21:51:45:7a:61:40:44:15:95:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:17:AC:66:D0:0D:6F:99:F3:B5:99:34:E7:70:E3:92:60:63:9E:14
            X509v3 Authority Key Identifier:
                keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4c:1e:1c:f9:60:ad:77:2e:94:14:3c:53:71:36:d8:60:3f:
         90:b3:85:2d:c2:21:5b:f8:c9:cd:1b:3f:69:b2:c4:b3:aa:d3:
         9b:ce:bb:af:ae:64:a9:0c:1f:69:21:8c:ba:6e:6b:e6:ed:79:
         7e:3c:85:e0:c2:5e:b0:7b:d2:e2:91:36:90:af:06:b0:f7:d3:
         51:37:f2:fe:3b:e1:4a:48:cf:ee:c3:e7:5c:fd:68:0b:61:c3:
         57:b1:4c:da:2c:f3:f5:6b:2c:04:f2:e5:77:4d:4c:c6:b4:6e:
         a7:05:3b:e3:33:fc:9d:55:2c:71:49:79:2d:d5:d6:23:f2:65:
         4d:89:0f:c3:4d:7c:73:bd:4e:0f:a1:4a:2f:3f:80:a9:f5:ee:
         bc:62:26:98:8c:0b:84:99:e8:6e:35:19:a2:86:0c:ba:ce:b9:
         9c:03:78:9a:10:dd:11:c6:99:0d:f4:95:0e:37:66:a6:d7:a4:
         5d:63:0f:35:45:ca:38:cf:06:13:3f:d8:f9:8c:81:cb:f5:2c:
         22:6e:c3:c2:31:b9:b1:82:fe:33:10:db:a9:49:d1:16:b7:6b:
         3d:a2:40:f5:19:68:14:d2:ed:78:c6:bf:71:12:ee:f6:4f:e8:
         22:ef:f0:fa:48:10:0d:65:da:a9:c3:53:cf:73:db:a1:bc:ce:
         44:49:cf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:02 2025 by rpki-client