Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File:                     QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier:          JciDhJCE25wUu0MGEmtFC+8exWtAq4rrEJYH+x6P/fM=
Subject key identifier:   DB:87:27:E9:66:37:84:80:16:33:8E:D6:BF:5E:6E:D1:7A:48:1A:0A
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer:       /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial:       01988B7C9B3204C5E1B53FD168F711C1B80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number:          1627
Signing time:             Fri 08 Aug 2025 21:00:55 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:55 +0000
Manifest next update:     Sat 09 Aug 2025 21:00:55 +0000
Files and hashes:         1: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (hash: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=)
                          2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: pxGapU5o7131OwE251DaFS2VJeiwBAepapL5PUrSWV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:9b:32:04:c5:e1:b5:3f:d1:68:f7:11:c1:b8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
        Validity
            Not Before: Aug  8 21:00:55 2025 GMT
            Not After : Aug  9 21:00:55 2025 GMT
        Subject: CN=db8727e96637848016338ed6bf5e6ed17a481a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:ba:91:cf:60:a3:1f:c9:7a:39:56:53:98:
                    89:bb:41:3f:91:58:bc:28:e8:7e:b1:a5:53:c5:3e:
                    f7:39:fd:89:0e:45:be:42:36:03:25:83:34:00:34:
                    4e:a8:bc:c4:03:0f:17:6a:50:51:01:5b:5e:71:c1:
                    45:7c:25:a2:d4:fd:c1:e1:cc:16:97:02:40:7d:9e:
                    a5:e4:f4:1e:17:f1:df:89:51:19:ef:01:d0:01:51:
                    83:8c:39:53:6e:10:b8:37:4f:40:5b:cd:ab:9a:28:
                    59:7b:17:9d:fa:a4:2b:0a:41:38:16:5b:f2:05:12:
                    50:6b:b9:d5:5c:08:ef:f9:c1:80:27:9c:84:b5:3f:
                    01:22:0e:45:dc:a0:d4:ca:cb:6b:b1:a8:91:4b:20:
                    98:c2:d0:52:19:19:eb:55:70:b0:ac:d5:f4:bb:e2:
                    88:45:01:bf:42:20:cb:7a:45:00:58:bc:ac:4a:3d:
                    c5:e7:88:6f:e8:89:08:8e:53:ab:bb:26:c0:c4:5d:
                    2d:87:38:53:7d:1f:e3:13:d6:cd:20:0f:cb:8a:36:
                    a6:13:af:be:4e:9b:9c:07:be:e7:70:00:0b:56:d5:
                    a3:86:30:06:0c:6a:25:65:39:ff:20:5e:da:ce:09:
                    0d:61:dc:6d:09:10:8c:88:89:ce:32:6a:25:cc:51:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:87:27:E9:66:37:84:80:16:33:8E:D6:BF:5E:6E:D1:7A:48:1A:0A
            X509v3 Authority Key Identifier:
                keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:6a:fe:32:00:ba:c5:c9:85:04:9c:71:88:54:b5:6d:ec:
         bc:c5:59:b9:d1:86:e1:67:4e:6c:60:df:9a:f1:fc:97:1f:58:
         fd:9c:45:b8:0a:d8:c4:f0:74:9f:8e:27:e0:9f:2c:77:06:34:
         3d:c1:66:ff:c2:6a:85:bc:6d:af:7e:28:e9:bd:6b:6a:be:70:
         8f:da:a6:e2:4a:1b:5b:3e:44:e2:a0:63:ac:17:62:e0:aa:4d:
         b7:23:d5:3f:1f:6c:47:50:d9:fc:bf:f3:27:95:af:9d:d4:36:
         67:d0:22:a1:89:26:71:83:51:31:34:71:03:b9:28:8f:44:42:
         c0:d2:1c:2d:fc:75:7a:76:8e:c5:3d:38:0f:53:6e:da:72:38:
         2e:e4:33:05:d5:e6:a2:6d:04:1a:31:42:eb:09:c9:60:56:ea:
         6d:1a:06:24:02:55:0d:00:f9:2a:f8:b2:be:96:e3:91:f1:40:
         a0:07:21:43:ed:e2:d4:6b:e0:be:65:da:85:85:f0:d9:fb:ec:
         27:bf:14:b2:75:8e:ee:39:17:bf:85:1f:33:f3:4d:d8:ef:48:
         19:27:de:7f:dc:98:0a:1a:02:0c:c1:ca:ef:a1:d1:37:d8:41:
         81:e1:fd:1c:4f:19:cf:24:a9:f7:87:1c:c7:ae:59:0d:51:97:
         d9:d2:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:51 2025 by rpki-client