Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
File:                     qvIogBSZWTJzeuf5_CJN8QIUElU.mft (raw, json)
Hash identifier:          Onk9dy+3ENaLWqZ/B4Tw6tSEpzdPU3Zxu/8cGPB84fQ=
Subject key identifier:   77:0C:F1:89:31:27:07:80:24:E8:31:BC:53:C8:F6:4A:13:FA:52:66
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Certificate issuer:       /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial:       019889FBF301FCB920DA8DC972D855C2A2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
Manifest number:          135D
Signing time:             Fri 08 Aug 2025 14:00:46 +0000
Manifest this update:     Fri 08 Aug 2025 14:00:46 +0000
Manifest next update:     Sat 09 Aug 2025 14:00:46 +0000
Files and hashes:         1: qvIogBSZWTJzeuf5_CJN8QIUElU.crl (hash: PJKvwgBNGcxwWQP2WZZ77yyZbuuJUXMcMNtHVpOksN8=)
                          2: ssFjFRP8rOyA12qsYqju5Tngnd4.roa (hash: hIS1+X5/5zlmutztUW28Al86ZCC1Pn71/f8lra8GU0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:fb:f3:01:fc:b9:20:da:8d:c9:72:d8:55:c2:a2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
        Validity
            Not Before: Aug  8 14:00:46 2025 GMT
            Not After : Aug  9 14:00:46 2025 GMT
        Subject: CN=770cf1893127078024e831bc53c8f64a13fa5266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:e7:7b:c1:7f:65:16:a2:a4:2d:93:59:e2:
                    e3:79:c4:12:1d:a6:25:ed:50:b3:fd:45:06:d9:e0:
                    ce:99:e7:b9:01:1a:cc:d3:35:77:7a:ee:d3:d6:94:
                    a8:db:9d:23:c6:15:be:9f:f0:05:94:c0:8b:aa:7b:
                    46:37:50:96:3e:97:0e:52:ef:91:3b:9b:0c:c9:4f:
                    82:9b:7d:f8:70:52:a3:1e:33:8e:e9:21:f0:b0:6a:
                    3a:b7:98:6a:29:be:45:72:f3:6f:53:04:7f:42:a7:
                    e6:40:cc:03:bd:be:c5:1e:b1:d8:8f:61:e4:a8:5e:
                    a4:1d:f8:e2:56:e8:47:27:94:83:20:ca:ae:8f:55:
                    65:54:59:19:a3:85:91:f6:dc:96:bd:ca:80:a2:99:
                    98:65:3f:7a:44:8c:b6:1f:76:ee:2f:17:e0:ab:f8:
                    f7:95:da:24:66:5f:e0:75:4f:2d:ab:35:b1:8f:45:
                    b7:27:63:79:70:23:e6:aa:51:4d:c2:a5:bb:1e:49:
                    c5:b3:6e:4e:80:f2:07:35:aa:7f:91:7a:ba:c5:63:
                    a5:a0:3f:fe:63:95:36:26:ff:8f:f1:ee:e9:38:9a:
                    20:3c:bd:c3:d5:28:c1:8b:9c:3a:cc:f4:c9:f1:0b:
                    a0:d6:0c:06:41:d8:60:d2:ba:b1:b5:e5:57:a3:b0:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0C:F1:89:31:27:07:80:24:E8:31:BC:53:C8:F6:4A:13:FA:52:66
            X509v3 Authority Key Identifier:
                keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:f7:3a:32:a0:38:b8:1a:c0:f4:12:3f:13:d6:2c:86:f2:
         5f:b7:d3:7a:13:80:bb:74:9a:37:40:e3:f8:ec:9d:9e:b8:40:
         28:de:02:09:79:93:15:12:9d:cb:48:db:98:07:67:a2:81:ec:
         81:bf:90:56:89:6f:cb:29:d6:f9:3f:e1:a8:99:3e:9e:15:74:
         66:ee:f7:b9:d3:91:bb:74:1e:75:26:4a:92:42:70:14:a9:ce:
         81:5b:51:74:dc:b4:7f:56:c8:07:1e:34:ba:d4:af:59:de:06:
         e8:9e:28:31:01:6a:0a:65:91:d6:49:db:60:49:1b:5d:0d:71:
         81:9e:f5:f1:cf:d9:81:1b:92:75:3e:84:c1:67:8d:33:1f:37:
         1d:a8:22:89:6a:a9:89:39:bc:e4:1f:cb:5b:61:31:53:71:36:
         06:a5:51:1f:3f:7f:6e:d1:8f:c9:5b:48:a8:66:4c:bc:ca:f6:
         f4:7c:6e:0b:47:39:f2:1b:c9:7e:d3:69:be:f0:15:84:1f:c5:
         c5:f9:10:8a:ad:4e:fb:77:ed:b1:60:6f:7c:fe:86:2b:33:2e:
         1f:e7:0a:3f:db:86:0f:e7:5c:bd:b8:fc:03:88:21:59:8a:4f:
         26:ec:be:a6:b7:7a:a2:b9:81:59:be:1b:af:85:3f:74:03:92:
         d7:15:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:34:45 2025 by rpki-client