Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File:                     QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier:          5IYSeE6vsnwFr1Fmi/jAr6AVldubD0Xjq/+5DU5E2V8=
Subject key identifier:   1E:5A:A6:68:8B:03:D4:CE:C9:B2:EC:11:E8:31:55:F3:41:C6:4D:9D
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer:       /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial:       019889572AF31F84F06E2813A6BDD93C65C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number:          0EE4
Signing time:             Fri 08 Aug 2025 11:00:47 +0000
Manifest this update:     Fri 08 Aug 2025 11:00:47 +0000
Manifest next update:     Sat 09 Aug 2025 11:00:47 +0000
Files and hashes:         1: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (hash: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=)
                          2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: okg5SdU72Hrx3e5GqFal9YVUfJwBwMLIKCbvCi/JL3A=)
                          3: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (hash: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=)
                          4: d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa (hash: eCiVHw72+bTZlv8fotK++2o6VMWQ+UX2AuVuNcdkIqk=)
                          5: iXw_41SDwVWtAf5ihJuQUw9Lk8I.roa (hash: IeaHE4eJJAlQPpX43/jtDGK9a0UQu+G72Lz6Qc9LhBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:57:2a:f3:1f:84:f0:6e:28:13:a6:bd:d9:3c:65:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
        Validity
            Not Before: Aug  8 11:00:47 2025 GMT
            Not After : Aug  9 11:00:47 2025 GMT
        Subject: CN=1e5aa6688b03d4cec9b2ec11e83155f341c64d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:ae:a3:db:1a:18:f2:c0:ec:91:c5:37:1d:
                    17:62:23:66:0d:a2:42:01:07:de:04:21:57:6b:b7:
                    30:93:99:40:a7:87:be:2a:22:98:3c:e4:fe:f6:0f:
                    61:23:91:33:2f:39:d1:ff:df:e6:ca:c2:d6:2f:e7:
                    dc:a6:56:9b:11:39:6b:f3:12:53:66:fa:dc:29:75:
                    b2:1a:d6:c3:8a:87:14:7e:d8:a7:44:ae:dd:65:54:
                    a6:4f:15:11:9f:6d:f8:4f:1e:2b:76:9d:ac:3c:92:
                    45:4e:3f:28:ca:2b:ac:92:88:cd:90:2c:6b:9c:77:
                    6c:21:d4:72:17:ef:ee:18:21:bb:d3:35:06:0b:ed:
                    21:df:cd:25:21:28:b3:c8:c4:64:5a:a2:8f:5a:0b:
                    f0:eb:8d:4d:19:33:01:5f:92:4a:56:49:ab:1b:d1:
                    c2:63:4f:22:a5:53:1b:cf:5d:72:23:ff:52:2c:86:
                    94:55:61:84:30:17:f0:29:e3:d2:6b:2a:27:c6:05:
                    c9:e9:62:2e:c5:98:75:e7:c1:2e:4a:f5:11:45:d4:
                    fb:12:d1:7f:6c:60:47:de:03:7b:d0:36:3b:79:eb:
                    3b:c8:36:ed:a4:c7:9b:e9:7a:65:2b:16:f0:95:32:
                    4f:19:b6:7f:6d:c0:c0:b9:57:2c:11:d3:3b:ae:67:
                    25:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5A:A6:68:8B:03:D4:CE:C9:B2:EC:11:E8:31:55:F3:41:C6:4D:9D
            X509v3 Authority Key Identifier:
                keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:51:ec:b9:5e:64:02:74:2e:b3:01:30:26:85:02:23:51:12:
         d4:b0:ed:3a:94:77:68:54:9a:c8:a4:92:78:8d:e6:d6:c9:25:
         cc:1e:4a:b6:da:a9:aa:22:80:ca:db:b0:8f:c8:87:5e:44:3d:
         fc:f4:e0:6c:3b:1a:25:34:2e:e0:c4:ba:46:3d:e3:bc:d7:c6:
         22:02:a0:55:d3:dd:e9:8f:65:11:13:e0:02:91:7d:19:d1:fa:
         ad:f6:e9:31:89:d2:36:3d:09:5c:ee:64:48:76:28:99:ad:74:
         0c:fc:38:3f:7d:5a:6b:7e:97:0b:72:58:00:a9:9a:9a:a5:2c:
         62:a6:8a:18:53:dc:e0:c1:ed:03:8e:34:83:ba:d9:b3:fb:f6:
         a7:c9:a6:64:7e:30:e7:ce:11:ac:3a:77:8a:89:e4:70:c0:0c:
         95:27:6b:fa:0f:9e:a4:67:36:c3:75:ff:8d:72:f4:02:c6:34:
         e4:5b:9a:84:3e:49:b6:33:3c:4d:22:d6:4f:95:6f:95:23:f3:
         83:9b:f7:61:df:f0:2c:79:c9:8d:26:c9:f3:f7:cd:49:71:b0:
         97:79:3e:d4:e5:db:a2:b4:78:3f:8b:93:e4:d1:ea:06:1e:52:
         9a:3a:f3:2a:5c:8c:58:39:d0:f9:50:8d:14:9a:47:50:70:d3:
         ef:74:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:05 2025 by rpki-client