Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File:                     Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier:          3JsM7ZIGnKUGZUPcKiPh/Fav7FUMG6oyRG5N6sN1D2Q=
Subject key identifier:   2A:9B:11:A4:84:AD:D0:35:E3:06:D5:A1:2F:62:D1:3C:D9:7F:22:D5
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer:       /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial:       019894B8201214E12E3337199DE18B295808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number:          0517
Signing time:             Sun 10 Aug 2025 16:02:31 +0000
Manifest this update:     Sun 10 Aug 2025 16:02:31 +0000
Manifest next update:     Mon 11 Aug 2025 16:02:31 +0000
Files and hashes:         1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: Z4tF2vQF2F1lRPa/1sLDwsXDa4ZwulgAxhx+EAMJDkU=)
                          2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b8:20:12:14:e1:2e:33:37:19:9d:e1:8b:29:58:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
        Validity
            Not Before: Aug 10 16:02:31 2025 GMT
            Not After : Aug 11 16:02:31 2025 GMT
        Subject: CN=2a9b11a484add035e306d5a12f62d13cd97f22d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:88:19:a5:93:ec:e3:ce:8a:08:4e:a5:7b:
                    45:2c:d7:9a:99:01:c0:73:33:28:c0:aa:07:d7:1c:
                    41:41:00:4c:af:08:d1:2b:2c:15:92:2c:a9:19:1c:
                    09:c3:ac:8c:42:b8:0e:a1:71:80:75:27:78:1e:5c:
                    07:2b:c7:05:7c:a7:b7:af:7e:51:d4:69:52:a1:0b:
                    29:ad:ff:2e:bd:ba:cc:41:f7:c1:14:bf:92:d9:13:
                    c1:aa:54:c7:b6:10:03:2a:95:ba:b6:19:0d:18:84:
                    0f:54:ff:46:10:95:06:00:ff:01:31:f6:3f:c1:3f:
                    50:98:7e:0f:18:35:82:bd:03:0d:03:8e:6c:2d:c1:
                    94:d1:a2:6e:3b:45:e2:da:fa:94:fe:9e:6f:44:0d:
                    a4:cd:f8:a9:d6:08:04:39:17:62:11:75:e9:fb:c1:
                    69:9a:01:a2:eb:99:e7:ce:de:0b:9f:92:84:b7:84:
                    5f:76:22:45:25:2e:a8:71:63:b4:4a:f5:b7:81:93:
                    d4:73:46:78:37:92:fd:2d:4d:8f:3f:bb:25:44:cd:
                    f5:e2:5e:21:ea:35:a3:6f:35:2c:37:c1:44:13:c4:
                    26:9d:48:e2:29:07:51:d6:59:90:cc:3c:66:8e:50:
                    be:91:81:2a:3c:07:54:5e:46:13:8b:7e:0b:1e:4a:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9B:11:A4:84:AD:D0:35:E3:06:D5:A1:2F:62:D1:3C:D9:7F:22:D5
            X509v3 Authority Key Identifier:
                keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:56:2f:00:d0:b5:34:7e:8f:62:d1:bf:88:24:e5:00:ea:b4:
         a8:b9:90:d8:fe:b4:76:a4:83:f3:69:a2:11:89:13:79:9a:1a:
         30:14:8d:7f:51:90:5a:5d:06:d5:68:6a:d3:c9:55:0b:e0:fd:
         47:30:93:79:82:86:1e:1b:e5:0b:bd:df:a9:f8:24:38:0d:49:
         f3:c8:37:f1:c2:38:b2:2b:c9:55:e4:9a:9f:b8:e2:2e:fe:e1:
         81:b4:26:2d:7c:71:e7:58:1a:e6:2b:01:1d:98:d6:54:7b:75:
         9d:84:a8:37:1e:4f:fc:b1:dd:26:db:e9:3a:d1:ab:69:8c:9d:
         b8:5b:13:2b:59:ca:31:00:9e:4b:26:95:85:cd:00:a2:ba:8c:
         41:48:06:b3:fa:1c:e1:7b:04:91:76:a3:59:2c:e3:13:4f:c7:
         71:1a:c5:eb:51:a5:7f:02:8a:7f:b5:c0:f7:c4:3f:27:d0:1d:
         64:de:6e:4a:92:50:a7:7d:6b:bd:4a:87:b7:ce:ae:4d:58:d3:
         30:bd:68:13:16:da:91:b8:a5:88:4e:e6:2e:73:1a:8c:84:7a:
         a8:7a:4a:60:58:fc:b0:00:95:7b:57:ea:94:3f:68:6c:73:d5:
         bb:16:6f:4b:48:01:b5:c9:d2:d3:a8:21:f4:a8:05:b2:86:a8:
         18:c8:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:07:50 2025 by rpki-client