Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
File:                     QYHCLrezLZAdElcA4UDrYAncxto.mft (raw, json)
Hash identifier:          BCAvAQ601udDxRIgWeE5kESChvnwbHoBCKrbc7pox60=
Subject key identifier:   F9:8F:E9:40:4B:99:CB:7C:2B:5A:C9:09:11:76:31:40:76:60:88:67
Authority key identifier: 41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
Certificate issuer:       /CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Certificate serial:       01988430FED258C89718E6D8CCBB94EB6751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
Manifest number:          1624
Signing time:             Thu 07 Aug 2025 11:00:59 +0000
Manifest this update:     Thu 07 Aug 2025 11:00:59 +0000
Manifest next update:     Fri 08 Aug 2025 11:00:59 +0000
Files and hashes:         1: HitPQyHhpEoVidVOwqr2ddK23LE.roa (hash: UNtTyCfc7GR1gxgfjG0Y/XLw7gBd/DnSW8H0cz2SvrM=)
                          2: QYHCLrezLZAdElcA4UDrYAncxto.crl (hash: WHlC3+KYhRhW/3vgY7KtJ25J683Ewba/AVAq7XG4XtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:30:fe:d2:58:c8:97:18:e6:d8:cc:bb:94:eb:67:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4181c22eb7b32d901d125700e140eb6009dcc6da
        Validity
            Not Before: Aug  7 11:00:59 2025 GMT
            Not After : Aug  8 11:00:59 2025 GMT
        Subject: CN=f98fe9404b99cb7c2b5ac9091176314076608867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:ca:e8:e9:84:29:3d:2f:97:17:a5:49:d9:
                    6a:db:20:d2:38:e4:c6:59:8f:47:a8:9d:ed:6b:e5:
                    a1:57:fa:df:66:6b:a3:6e:27:c2:8d:55:c1:91:5c:
                    e8:89:e4:17:82:d0:60:2e:e4:4f:62:97:55:a4:e4:
                    16:cd:f4:f9:02:cc:13:30:c5:ad:55:fc:a2:92:6b:
                    43:88:07:2c:27:35:a7:48:bc:47:e6:c3:4d:99:ea:
                    98:db:48:f7:d1:a2:88:04:a6:83:15:51:f7:fa:26:
                    53:e0:1d:18:8b:7e:fe:9b:13:4c:df:75:da:9d:f7:
                    6d:45:cd:59:88:d5:f9:c4:cd:da:5a:4f:5d:dd:29:
                    32:e6:fe:96:59:a6:20:af:3b:1f:ab:3f:bb:48:0c:
                    eb:61:dc:ee:01:8f:c7:6c:cf:92:7f:73:29:6b:9d:
                    cf:58:33:96:77:35:f2:49:4d:ba:b3:79:ef:30:be:
                    c7:ee:66:4c:58:14:31:00:46:4d:1f:31:e7:ab:a0:
                    dd:e4:e3:a4:bb:ea:1d:9a:8e:bb:ba:8a:9f:4b:1b:
                    7d:61:ee:be:71:f9:36:e0:7f:13:3b:22:da:eb:ce:
                    c7:49:e6:f4:6b:74:67:45:9e:d2:5a:a3:1e:f2:65:
                    2b:68:49:4b:7e:37:53:88:05:03:1f:1c:8e:1d:94:
                    79:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8F:E9:40:4B:99:CB:7C:2B:5A:C9:09:11:76:31:40:76:60:88:67
            X509v3 Authority Key Identifier:
                keyid:41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:41:b3:0b:cc:ff:47:e3:3d:3f:df:b0:d7:aa:db:68:8e:85:
         7b:7d:37:36:49:ab:6b:93:78:70:73:a1:c6:71:2b:eb:1b:1c:
         55:59:e8:b5:3f:2a:d6:90:55:2e:de:5d:40:4a:0e:b1:08:fe:
         29:46:6b:fe:fa:4d:73:c4:d6:60:a0:53:75:8e:bd:50:a9:49:
         db:01:44:d8:a1:8d:22:8a:70:07:da:aa:fd:9e:9e:cb:69:f0:
         23:bd:2f:f1:1c:87:f8:e1:ae:25:c3:66:74:ee:26:34:ca:e2:
         cf:1c:57:55:d2:3a:42:90:87:ea:94:e0:40:02:e5:49:7f:a7:
         9d:3e:bf:17:74:ed:16:5b:ed:00:76:f3:66:b8:56:87:f9:ee:
         2a:58:37:de:d7:49:2d:4b:5f:d0:68:1e:d5:ee:b1:5e:51:4c:
         9a:99:10:05:bb:4a:16:00:2f:88:ba:5d:fb:6f:6b:9f:10:3a:
         20:c0:dd:72:35:65:bd:04:b1:29:c1:3e:1a:96:7e:52:ca:ca:
         2a:a0:16:8f:f8:85:5f:6c:22:7d:5c:2b:81:39:67:20:3d:16:
         32:3d:f4:25:fe:7d:c3:d9:a0:18:24:8e:bf:1f:85:b3:8d:31:
         13:64:1b:a0:9b:25:c8:fa:3c:27:5e:cb:c2:f6:20:bb:a4:bd:
         a0:70:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:17:47 2025 by rpki-client