Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File:                     qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier:          HnNdk11vVEGJLKihTCe8I1zhi2hH8A+Ljr5XRKW5z5s=
Subject key identifier:   26:09:F1:D4:73:42:FB:E4:C4:D5:00:C6:88:F2:6D:E8:34:E9:A1:E5
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer:       /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial:       01988EEC07D934005B05453CC2502023E51B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number:          0CB3
Signing time:             Sat 09 Aug 2025 13:01:29 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:29 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:29 +0000
Files and hashes:         1: 468N6r5RPT2f5DQcT-nc3tiYbYo.roa (hash: n/z9/H3ukYX/zuXbah6+bo8U6dHBYWx6B073nDMSCSs=)
                          2: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (hash: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=)
                          3: X5Pbij4rIL8Dq4Js8EvH7j1Wj7k.roa (hash: JTczwWTBd9G1q76W/pHd7YHIV9ZzN4VCk+pl3uv/6uM=)
                          4: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: gbqgiaGo2N+uSQU69H5F+rLam8frmIgDS1fhu9wTnpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:07:d9:34:00:5b:05:45:3c:c2:50:20:23:e5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
        Validity
            Not Before: Aug  9 13:01:29 2025 GMT
            Not After : Aug 10 13:01:29 2025 GMT
        Subject: CN=2609f1d47342fbe4c4d500c688f26de834e9a1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:a5:7e:8d:b2:b0:6a:14:d6:13:18:fc:d8:
                    f4:b3:13:be:24:3e:9d:41:c0:b0:e7:06:22:2e:3b:
                    a8:72:33:38:e3:14:4b:9e:bf:cf:24:0b:b8:6b:ad:
                    d1:8b:0d:ac:d0:fd:32:0a:5a:45:b0:85:a4:c6:42:
                    b3:f7:9b:6e:2c:26:44:b4:45:85:94:7d:0d:fe:94:
                    73:32:0c:e5:57:d2:00:36:be:e3:a4:02:12:90:82:
                    af:4e:fe:06:fb:48:67:2b:92:34:44:59:66:dc:8f:
                    ec:ac:95:b6:91:06:a6:f3:34:18:9c:15:e9:34:e9:
                    e1:4d:53:12:fc:d4:a1:f4:96:74:f0:9b:6e:8c:5c:
                    33:fa:3b:22:25:cc:f9:38:dd:fb:24:97:d7:4e:31:
                    b6:66:23:65:78:b7:0d:16:9e:be:c0:4d:9e:e1:0f:
                    1f:56:6c:ab:5e:4d:c5:a2:96:0f:ab:80:52:3c:4b:
                    45:0a:64:b1:8c:82:d5:d1:4a:e4:2a:52:31:31:03:
                    cc:57:56:d2:a0:b9:b9:00:d7:cd:49:b1:c2:88:f2:
                    2d:d0:7b:f1:60:db:73:2c:7e:e5:7b:04:b9:0a:eb:
                    05:b5:6c:a0:56:fe:80:eb:75:8e:2e:36:0f:40:e6:
                    83:53:15:ef:c8:d2:fe:59:37:5d:a5:8b:f0:ca:8a:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:09:F1:D4:73:42:FB:E4:C4:D5:00:C6:88:F2:6D:E8:34:E9:A1:E5
            X509v3 Authority Key Identifier:
                keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ce:c1:07:83:b6:c3:c9:00:4e:f3:1e:e4:fa:e6:8f:67:14:
         f4:30:a0:0f:f7:08:81:df:52:d0:8a:98:43:a6:c5:23:59:e7:
         93:aa:e7:af:fe:dc:6f:3b:66:5b:68:fc:68:4c:1e:bf:99:50:
         72:65:bb:c5:c6:e5:7f:5b:36:b6:4b:39:75:0e:e8:e2:14:78:
         aa:cf:ce:80:38:7e:08:be:e1:a4:5b:6e:74:26:b2:23:2d:b5:
         71:87:73:2e:e3:9e:65:9d:cd:69:54:97:b9:d1:70:c0:1e:f3:
         09:52:28:75:b1:07:36:e6:89:92:56:39:c6:ce:5f:95:d4:01:
         a2:2a:92:6f:74:db:61:d5:e8:d6:13:eb:e8:a1:84:0b:3f:63:
         e6:d3:58:96:74:a0:8a:20:a8:69:a1:88:cc:00:f5:04:0e:d6:
         b5:65:eb:37:4e:04:6d:24:6b:0a:4e:f9:83:cc:c4:26:75:7c:
         b6:a0:19:15:f4:79:66:50:e2:f0:b7:3b:ab:9e:e8:a7:a1:6e:
         d2:9c:4a:9c:83:9c:25:f3:8b:b5:c8:d5:54:0c:d2:50:3c:9a:
         59:4e:a4:4b:32:9f:bb:02:f5:f3:58:25:95:3a:f5:86:34:58:
         3a:2e:7d:f9:1f:97:5b:e9:60:9d:f6:eb:a7:84:7a:cf:05:b7:
         8b:a3:e9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:12:06 2025 by rpki-client