Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
File:                     qS3HvbydCXM23mJDtVCrFzN16jk.mft (raw, json)
Hash identifier:          DJGOokne9zvye8lxsNf407GUS0vtZMHcEk+UR4nxK+U=
Subject key identifier:   F7:5E:55:24:F0:AA:A0:03:F0:30:C0:6A:62:2A:4C:F3:68:61:07:F9
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Certificate issuer:       /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial:       01987418ED476E69C5B1D1723A13E71DA321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
Manifest number:          0D3A
Signing time:             Mon 04 Aug 2025 08:00:47 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:47 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:47 +0000
Files and hashes:         1: DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa (hash: Xe6PXCoxFN3TxuAuxssMLTkZiOn7w8CCGbAYJjxvzp8=)
                          2: ICTqfYBG-REglE6QLqLm2DMr9nE.roa (hash: tDqSslkp4cv0xRmwxWP8ihUEHojImR31lIwN5aeFXMA=)
                          3: UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa (hash: WlUQqIFYI5VcIHzcu2H+hLq92ENL7s5Vno3Whj19yac=)
                          4: qS3HvbydCXM23mJDtVCrFzN16jk.crl (hash: 47iU7pbxroyNfED1APFA99iu0u0zqpBdtf3ApuNvYkU=)
                          5: z4IiemcHS1pMiHT-EsPFFeOITkw.roa (hash: 0Cm5tDp/8EqZeA3+YLY/lnsQEFVnqQEXb0poa3VHvws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:ed:47:6e:69:c5:b1:d1:72:3a:13:e7:1d:a3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
        Validity
            Not Before: Aug  4 08:00:47 2025 GMT
            Not After : Aug  5 08:00:47 2025 GMT
        Subject: CN=f75e5524f0aaa003f030c06a622a4cf3686107f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b7:a6:b4:6c:c1:8b:f3:78:0b:4c:95:be:4e:
                    b3:94:fc:9f:3f:0b:4a:51:2b:9e:9f:bf:ea:6a:cf:
                    d0:48:61:9e:30:58:d6:31:2c:20:b4:89:15:9d:ac:
                    5c:7b:60:e3:68:6c:07:c9:53:41:e3:53:0f:c6:05:
                    b2:5a:b4:e6:24:ca:da:5d:af:c3:28:3d:e9:bc:77:
                    bd:02:77:1c:ad:06:70:19:8c:da:f9:7f:9d:86:60:
                    60:28:36:a1:58:ca:f2:a6:ca:8e:57:9e:ea:2d:c6:
                    81:0e:26:28:3f:4d:a1:6c:fe:bc:1f:36:e8:de:76:
                    88:b3:a5:0d:9d:9b:0e:97:54:85:df:f3:d4:18:47:
                    f1:d9:6c:44:5e:e6:a3:ed:8a:ca:9e:2d:ef:61:8c:
                    d5:6f:a3:3a:db:21:95:b3:53:c3:80:85:c3:fc:f7:
                    c0:1d:ee:7e:6a:05:b0:5e:7f:68:ae:ed:f8:4f:0d:
                    b1:d4:1b:da:d6:85:de:24:4c:33:9b:f5:d4:8d:15:
                    a4:69:46:e0:f8:07:e3:f7:6c:c7:e3:3e:01:ad:bc:
                    fd:b3:5d:6a:ea:a4:b4:fa:c0:4d:52:c6:3c:57:ef:
                    2f:1b:39:d6:6d:11:dd:40:c4:e0:f0:52:7f:3c:5b:
                    40:2a:9f:44:96:bf:af:4b:8b:73:10:f7:df:46:c6:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5E:55:24:F0:AA:A0:03:F0:30:C0:6A:62:2A:4C:F3:68:61:07:F9
            X509v3 Authority Key Identifier:
                keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b0:56:6f:70:42:0d:3a:4c:f0:42:8a:35:26:2c:4f:3d:f2:
         b0:20:3f:b1:85:17:8a:c1:50:6b:d4:a5:1a:c9:fb:ba:08:b2:
         54:57:fc:80:ee:71:d4:29:71:6d:85:82:fd:19:21:f2:fb:0c:
         38:4d:dd:e2:b9:14:4d:fb:8e:bc:3d:36:4c:6c:76:98:7a:66:
         d3:5d:3a:7c:15:be:2e:51:99:c7:dc:44:6f:4d:e7:25:70:d6:
         4c:a0:05:38:a5:f2:b8:b6:9a:cb:72:3a:e0:30:47:19:81:3d:
         fe:76:8d:3e:7a:31:fa:2f:dd:3a:c6:d4:93:b6:12:5e:37:b6:
         cc:60:11:14:eb:07:e1:d4:ac:d7:0e:8e:d8:b2:37:b0:c8:db:
         b8:99:75:f1:bf:27:d1:c1:a8:29:84:94:a1:82:03:97:35:fc:
         25:7b:d4:bd:50:6c:a5:13:25:cb:4e:52:ca:6b:40:bd:a1:3e:
         84:b4:76:58:5a:a2:5f:fe:af:b0:ab:11:3f:e6:25:04:a0:e9:
         cb:3b:09:b0:b6:ad:3c:13:08:79:4b:bb:a8:8a:d5:52:5b:ec:
         62:5c:ee:94:5c:ce:13:43:c2:2c:96:09:08:97:e6:d5:9a:f4:
         db:cc:80:66:09:bd:f2:12:4b:09:e3:4e:f7:e3:a1:ee:cc:d4:
         1f:6b:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:12 2025 by rpki-client