Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File:                     qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier:          zoccZyP4Yje8KW2YdI0iWNvTlSmX5GvoKGyvY/88jFw=
Subject key identifier:   8F:EF:43:83:22:E8:33:4C:FF:AA:8A:40:B4:3A:3F:91:A1:6E:CC:69
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer:       /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial:       019873E38F301C5C1BECF9FF70D88C2B8205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:02:29 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:29 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:29 +0000
Files and hashes:         1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=)
                          2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: ZKmt7OF/RiZYc6iyCWQybW+EeOV0ueF/pdfwx+Wp/sM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:8f:30:1c:5c:1b:ec:f9:ff:70:d8:8c:2b:82:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
        Validity
            Not Before: Aug  4 07:02:29 2025 GMT
            Not After : Aug  5 07:02:29 2025 GMT
        Subject: CN=8fef438322e8334cffaa8a40b43a3f91a16ecc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:a1:7e:5f:3a:e8:8a:53:57:fe:9c:aa:31:
                    29:ff:8c:bd:60:3f:5e:b1:09:00:cc:98:ec:f9:e7:
                    e4:c8:4e:a9:39:5c:bb:3a:23:59:d2:83:d8:7e:5a:
                    04:e0:b8:17:65:d4:48:67:84:44:ea:f5:20:09:46:
                    55:9e:9a:75:7b:6f:d8:48:be:1c:3b:92:81:42:1a:
                    25:b7:d4:39:54:02:d1:3c:8c:4a:e5:6d:b5:36:7f:
                    82:38:d0:fa:66:86:3c:16:68:67:9f:d4:fe:e4:19:
                    bf:eb:d2:5a:ee:6a:f1:6d:d2:73:9e:f2:2d:1c:67:
                    13:70:29:8b:d1:d1:56:5b:ea:d1:dd:ad:cb:42:a3:
                    4e:e6:51:6d:52:f4:cc:c3:fb:21:98:94:b2:8b:4b:
                    d8:d2:b5:80:89:49:28:12:bc:6a:8b:ee:fa:6d:69:
                    4c:a5:e0:89:b4:bc:19:29:ad:32:fe:53:f7:28:fe:
                    55:53:8c:a2:66:b8:3b:fe:19:e0:7b:22:c1:3e:f9:
                    c5:bb:67:04:d2:58:ab:80:29:29:dc:28:ec:1a:57:
                    9e:7d:cd:4d:40:8b:04:cc:8c:5c:51:77:9a:49:ec:
                    13:e1:90:2e:fe:fc:52:e9:71:a7:f6:18:79:0c:64:
                    c0:35:04:d8:de:78:3e:0a:e5:3b:8d:be:de:7a:d1:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EF:43:83:22:E8:33:4C:FF:AA:8A:40:B4:3A:3F:91:A1:6E:CC:69
            X509v3 Authority Key Identifier:
                keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ae:1e:e7:63:b9:5f:45:0b:19:71:9f:67:0e:ba:f5:4c:84:
         bb:66:9a:80:aa:a9:1c:09:7d:f2:6b:0e:70:73:7f:71:bb:de:
         7e:a2:cb:a1:12:eb:5b:a3:2d:9a:f1:d8:2d:ef:c0:89:32:48:
         6b:f6:07:37:31:21:64:b5:98:0b:ab:f4:8b:6e:4a:22:9c:56:
         0d:44:e9:01:3b:b0:8a:49:30:39:f5:0d:d4:a1:05:89:38:33:
         24:01:39:2d:76:a3:89:b1:62:e0:13:2a:e9:06:3a:5a:0d:22:
         c6:25:dc:72:e6:28:be:73:19:07:08:23:be:1e:e5:ec:ea:28:
         66:9c:6f:d8:ce:db:81:83:84:1e:aa:c7:de:13:c5:89:8b:0c:
         5d:16:a9:a8:07:6a:31:f4:3f:48:9e:4a:e3:3b:ad:47:ac:c5:
         7d:de:a6:af:37:46:7c:4c:24:76:2b:1e:f1:e2:1f:0a:2f:93:
         f7:26:17:06:48:fa:1c:44:68:24:bd:98:6e:7d:48:20:e0:e5:
         24:55:32:35:41:1d:89:c0:76:64:9c:40:da:c2:f7:b5:93:2e:
         5b:79:16:95:08:82:8d:d3:dd:92:64:6f:f0:34:f8:9d:0c:ed:
         ce:f5:9b:ee:dd:b1:4f:98:fc:8c:00:e9:c4:84:eb:41:3b:69:
         9e:02:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:33 2025 by rpki-client