Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File:                     Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier:          T5J1kVcsAblDVjaSGYW5PP+ckqGo2Wi98IHrloBNi4s=
Subject key identifier:   9E:1F:EB:52:8F:D4:CB:11:D0:30:E9:4A:10:1F:B5:3A:CB:64:7B:BA
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer:       /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial:       0198868D5E2A1078AF1FF526926A8DCBD3E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number:          10A5
Signing time:             Thu 07 Aug 2025 22:01:08 +0000
Manifest this update:     Thu 07 Aug 2025 22:01:08 +0000
Manifest next update:     Fri 08 Aug 2025 22:01:08 +0000
Files and hashes:         1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: HuzdCVpZXQnbVkuDnJPNB+BeNnXpnZKu0E2EVIIVIVQ=)
                          2: TrfKChON90CRCXVKGdWD_lFGLCU.roa (hash: GFMm+kc1nJBxOyEj3z/q6lfVZK3yETv8yRHloXoAgN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:8d:5e:2a:10:78:af:1f:f5:26:92:6a:8d:cb:d3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
        Validity
            Not Before: Aug  7 22:01:08 2025 GMT
            Not After : Aug  8 22:01:08 2025 GMT
        Subject: CN=9e1feb528fd4cb11d030e94a101fb53acb647bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:2f:74:fd:07:d4:07:c1:0d:cd:f9:a0:69:
                    d7:55:aa:63:52:57:f6:bc:bc:b7:e0:56:c9:4c:a0:
                    4a:22:f4:47:77:34:ff:4f:9c:93:e5:7c:59:08:86:
                    65:36:26:c5:9f:ce:c5:cd:e8:9c:c3:6a:18:6a:72:
                    ec:71:f6:47:a6:83:d9:5c:12:a7:56:dd:e3:3c:40:
                    ca:40:02:25:d1:f2:29:d9:94:ff:62:37:09:f4:d1:
                    21:d9:bb:ef:a5:0f:cb:27:41:b5:78:87:14:89:01:
                    a5:68:bf:9a:19:3b:47:e9:45:1c:ef:6b:e7:e3:90:
                    ad:3b:dc:fa:6e:d7:bc:90:cd:5c:d8:27:0f:97:ca:
                    ea:e6:a3:d1:27:c3:b2:9c:e0:ba:b2:b3:d1:2d:84:
                    08:54:80:d4:97:47:18:53:76:b5:ce:86:11:35:c2:
                    80:68:9e:34:7d:38:9e:6c:dc:5b:52:ee:46:71:d3:
                    fa:d4:e0:eb:e1:cc:7f:9a:74:9a:57:f4:a8:07:3f:
                    e5:78:f8:d8:20:f0:73:ba:1d:fd:f9:83:82:8d:92:
                    5f:ad:d2:76:c0:20:eb:0a:05:83:b9:4d:2d:5d:27:
                    1b:89:89:84:01:95:a7:49:e5:f1:dd:6d:74:6e:fb:
                    58:ad:8c:80:04:b8:e3:17:71:11:fe:10:11:31:05:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1F:EB:52:8F:D4:CB:11:D0:30:E9:4A:10:1F:B5:3A:CB:64:7B:BA
            X509v3 Authority Key Identifier:
                keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:9b:b0:2e:8f:b7:76:e9:05:41:b9:04:8d:94:69:1e:80:
         df:56:2b:fa:06:c2:2a:bb:6a:ee:bf:35:23:23:fe:f2:07:57:
         d7:47:af:b1:24:24:1f:91:04:02:9c:a4:4a:37:b5:70:9f:bd:
         e5:c6:08:bf:1f:f3:97:bc:f4:a1:57:2b:fe:1e:e8:61:5e:8a:
         6e:33:27:70:53:e0:9f:12:8a:fa:05:c8:d3:12:0b:27:62:3c:
         86:db:07:54:72:61:f8:e2:32:59:dd:bc:c7:5f:2b:06:de:ef:
         1e:52:10:51:76:62:e3:03:1c:3b:cf:4e:2e:25:49:01:8b:d7:
         6c:9e:74:dd:2f:e4:a2:d2:21:2d:f8:7c:95:53:01:6a:03:20:
         8c:5a:6d:70:d8:1f:0e:23:2f:55:41:6d:be:91:1d:b5:c4:59:
         40:3e:7b:b3:d7:61:9e:35:3b:6a:3a:be:eb:e5:e7:be:29:98:
         7e:3b:d9:25:f7:33:4e:20:83:e5:a1:8d:15:36:5e:c5:3c:71:
         8c:6f:c6:87:bb:66:03:1f:76:56:30:46:cf:42:c7:3b:37:d0:
         82:ba:06:af:c9:df:49:3d:a4:30:7d:c0:a4:98:ce:f4:7f:f8:
         23:3d:76:8d:50:de:52:04:72:9f:82:27:94:47:88:c8:10:8e:
         90:ee:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:52 2025 by rpki-client