Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File:                     QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier:          n5RInarF4UgaRVI13Etf3YYtHPZhb04rZc/V7wCnzx8=
Subject key identifier:   B6:86:14:A6:2E:7F:CE:46:E6:C2:B1:A6:3A:CA:BB:51:04:58:3C:7F
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer:       /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial:       019880F92EEED2934A22B655F9B6AB03CDCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number:          07F8
Signing time:             Wed 06 Aug 2025 20:01:10 +0000
Manifest this update:     Wed 06 Aug 2025 20:01:10 +0000
Manifest next update:     Thu 07 Aug 2025 20:01:10 +0000
Files and hashes:         1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: ftJtKYtISt2oj8w5jvuCD/z7EopaE5WAy/b6KowntrI=)
                          2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f9:2e:ee:d2:93:4a:22:b6:55:f9:b6:ab:03:cd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
        Validity
            Not Before: Aug  6 20:01:10 2025 GMT
            Not After : Aug  7 20:01:10 2025 GMT
        Subject: CN=b68614a62e7fce46e6c2b1a63acabb5104583c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:53:aa:15:62:3b:70:d6:7c:15:a7:44:f4:
                    de:46:d4:50:10:67:04:54:53:a7:22:50:57:8f:50:
                    8a:17:f4:f2:7d:06:fa:aa:e9:5d:22:70:a5:af:67:
                    0d:1f:02:7b:15:43:d0:41:95:37:33:4e:6f:0a:da:
                    23:d9:f8:b2:c5:36:fa:58:35:1f:eb:70:26:4f:5e:
                    d6:68:27:6c:ca:d9:c7:36:3d:91:39:75:8c:1e:ef:
                    b8:d0:da:cd:cc:93:d3:20:0b:69:cb:9b:4b:68:45:
                    af:22:94:1c:b6:03:98:38:b3:57:f8:d6:8d:20:c4:
                    c7:6d:5a:4e:22:b7:55:dd:27:cd:52:4a:71:dd:b5:
                    b0:0b:69:70:2c:1e:55:9c:1d:a0:48:bf:2c:6c:60:
                    22:69:e0:8c:35:fc:8d:8d:8e:0a:5c:60:0d:da:e8:
                    d9:8b:ca:44:ad:39:28:b9:78:bd:ef:0d:f3:7b:3a:
                    31:50:28:cd:53:fd:da:19:7d:d8:e2:e3:c6:65:cc:
                    3a:06:90:b2:0e:95:6c:50:79:3e:55:6a:be:9e:ba:
                    0a:be:42:d0:3e:84:87:50:7f:00:e3:b2:42:b9:16:
                    c7:ca:f3:1c:ea:3d:41:e2:bc:e3:bc:34:f5:b7:bf:
                    ff:0f:b2:01:6a:bd:58:cb:70:fe:9a:9d:a8:75:48:
                    03:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:86:14:A6:2E:7F:CE:46:E6:C2:B1:A6:3A:CA:BB:51:04:58:3C:7F
            X509v3 Authority Key Identifier:
                keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:84:5a:df:c4:7c:30:b9:4e:fb:62:07:09:d2:8c:a7:cb:cb:
         f6:45:a8:a4:c2:d7:9c:57:28:20:f5:05:ed:2d:a7:65:ee:7f:
         d8:de:fe:d6:6e:5a:5a:f8:33:43:a3:0f:e5:b1:3a:83:1d:c7:
         b6:a6:b9:3d:f9:8d:1e:29:cf:8c:86:d5:53:9c:14:45:68:88:
         68:a6:db:47:98:7a:07:59:40:bc:6c:e6:59:cb:55:88:31:90:
         36:c1:e8:b2:ba:08:7a:9a:b9:68:ab:1d:2c:61:c5:1f:71:19:
         08:62:2d:ea:c6:81:8e:e0:43:84:47:29:d3:0d:a1:ad:1d:9c:
         de:eb:61:b4:63:2f:d0:a7:5c:45:59:a9:4e:e6:b3:b3:8f:80:
         ac:8b:69:99:8c:04:c2:7f:39:6c:ae:48:3b:98:bc:89:62:d5:
         de:d7:d0:73:3d:8b:79:b8:ed:f8:22:9d:52:15:43:46:c5:ff:
         8b:5f:73:3f:7f:3f:6d:b9:48:8f:e8:1f:e0:03:37:d0:85:c1:
         7f:d8:91:40:26:7b:3d:3d:ca:db:de:4d:35:ec:1d:3c:4d:e9:
         17:1e:17:19:b6:9c:24:79:3e:6a:fb:7c:04:78:47:a9:5f:c7:
         8a:34:86:f8:67:45:30:31:87:bf:6a:b5:6d:a0:33:b3:dc:72:
         b0:94:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:52 2025 by rpki-client