Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File:                     qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier:          lABrFGOCxyxp3nd+Z1HwDnoIMEFmqDgCgD6cZ9/jov0=
Subject key identifier:   AA:4A:37:BF:C9:8C:B3:E9:88:B3:B9:C6:06:E7:48:33:C9:30:AB:76
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer:       /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial:       019893A417A6E39764FC8F8A41B660F3D1D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number:          09CC
Signing time:             Sun 10 Aug 2025 11:01:00 +0000
Manifest this update:     Sun 10 Aug 2025 11:01:00 +0000
Manifest next update:     Mon 11 Aug 2025 11:01:00 +0000
Files and hashes:         1: 0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa (hash: k+6IIDKqJuYMt9/EhXM2bPBbRQ5u5Kv99iIIWzz5/2A=)
                          2: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=)
                          3: SAABZkEQbTfeoiZylh7IAj2UKJY.roa (hash: tT5S9auXfqJCWExDbLcMxXWvB7zI8R71Em3Ix9poLF4=)
                          4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: 1A2eSXp6JUfw2TNW+cSavx0KUV0kxL5VcQSrogARDbk=)
                          5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a4:17:a6:e3:97:64:fc:8f:8a:41:b6:60:f3:d1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
        Validity
            Not Before: Aug 10 11:01:00 2025 GMT
            Not After : Aug 11 11:01:00 2025 GMT
        Subject: CN=aa4a37bfc98cb3e988b3b9c606e74833c930ab76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:b4:34:9d:4e:1a:b5:06:e6:73:7e:19:4e:
                    17:68:7e:71:b0:c7:8b:e7:19:ff:7b:d4:bf:4a:7b:
                    21:f5:cb:21:30:23:1e:d2:91:80:5a:4b:43:77:a4:
                    40:30:14:e3:f9:65:8b:4d:71:c9:5f:da:fa:bc:97:
                    bd:b1:28:39:48:d2:2e:db:17:da:1c:f5:d7:c3:4d:
                    d5:27:fc:ee:13:fd:f1:35:e3:d1:ef:c8:fc:bc:1a:
                    f9:8d:08:68:75:d3:21:cc:e0:6c:41:3b:87:6a:62:
                    b6:35:76:69:8d:25:18:03:0d:e8:9f:c8:57:40:1b:
                    2f:15:13:19:e4:36:40:89:a9:b9:1c:2b:47:d4:05:
                    bc:7a:8c:95:bc:16:56:51:3a:78:7b:ea:50:d0:73:
                    ce:d9:c8:71:bd:85:a9:ec:f4:a4:bf:41:8c:d4:6d:
                    c5:92:da:f1:df:2a:77:66:85:8e:7d:3e:a4:67:8e:
                    e0:2d:e8:ca:d4:7c:ed:d4:8d:95:ff:e7:0f:f5:de:
                    5b:f9:4d:0d:86:16:7e:be:df:3e:d5:5d:48:3f:cd:
                    aa:cf:4d:52:28:f7:35:f3:66:9a:3f:4c:73:13:75:
                    14:73:63:04:0d:44:ee:ea:7e:8c:ba:24:6e:3c:fb:
                    30:2d:53:3f:f0:54:8b:e4:88:49:d4:82:e9:0c:5b:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4A:37:BF:C9:8C:B3:E9:88:B3:B9:C6:06:E7:48:33:C9:30:AB:76
            X509v3 Authority Key Identifier:
                keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:74:e1:19:0d:44:ac:d2:84:8d:4f:8f:46:2b:f6:ec:25:c7:
         24:ff:38:2d:65:f7:d9:6d:f3:71:df:91:83:8b:cf:f7:76:10:
         c2:9e:56:66:a8:5e:fe:af:52:4f:e5:7c:f2:31:5b:71:18:9d:
         ea:4f:0b:5b:38:da:21:2a:f3:ea:d3:05:dc:d5:b4:98:90:8b:
         ce:a7:a5:62:59:7b:b7:95:d8:fc:a0:86:f6:76:56:02:da:41:
         ce:0c:73:6e:9b:78:19:c5:e1:ed:4d:a3:7d:fe:d8:98:24:14:
         e9:a8:f1:2d:fc:17:94:3b:41:ac:91:87:e4:f4:7e:cc:df:3d:
         09:22:b4:e6:9b:b1:e2:89:41:69:88:43:50:bd:80:40:a1:d6:
         77:29:e7:50:2d:a6:e6:45:32:21:af:55:df:21:2c:4d:fc:0a:
         96:2e:68:ae:59:a1:e5:34:64:a8:2b:01:01:57:f4:34:b3:61:
         9e:d3:81:26:0a:cc:59:11:77:1f:06:ca:69:ab:e8:5d:83:56:
         8b:64:ec:8c:aa:0d:d6:aa:37:58:32:e0:01:62:0d:84:5b:d7:
         5e:4a:ce:fc:38:5e:2e:93:9d:a7:60:2e:94:cf:38:5b:dc:3f:
         e9:07:5f:0f:49:ba:e5:5e:ba:28:9d:85:93:7e:2f:c8:84:14:
         32:75:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:05 2025 by rpki-client