Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File:                     qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier:          1eHEj/hLk9NKRwktWxM5Qbl3xODst/+nMGc0bjGlPb8=
Subject key identifier:   E0:65:56:06:28:B9:28:2C:CE:9E:E6:E6:B4:B1:62:B0:FA:D3:74:48
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer:       /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial:       01987D8ACBF2C463316CF452D3F9F0B70799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number:          07EF
Signing time:             Wed 06 Aug 2025 04:01:44 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:44 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:44 +0000
Files and hashes:         1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: QhiRulmaFOYxzQ3n7a+K3Uj5OVa053wZSAxem8bdgC8=)
                          2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:cb:f2:c4:63:31:6c:f4:52:d3:f9:f0:b7:07:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
        Validity
            Not Before: Aug  6 04:01:44 2025 GMT
            Not After : Aug  7 04:01:44 2025 GMT
        Subject: CN=e065560628b9282cce9ee6e6b4b162b0fad37448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:da:af:43:df:55:47:b7:b6:7e:03:e4:8e:
                    05:44:88:93:23:ff:84:cf:6c:17:ab:78:ce:0c:9a:
                    cc:f0:e2:7e:8b:ca:bf:f4:69:b8:08:1e:f0:dd:d0:
                    5d:5b:ea:56:dc:7f:b4:8b:ee:3f:b3:42:8b:62:e3:
                    b7:d6:1b:c0:99:77:29:77:8b:ad:f8:7e:88:ee:97:
                    a2:0d:b9:cd:10:ba:24:20:bd:b9:c2:95:07:e7:3b:
                    99:e8:34:81:c7:c9:a7:de:6c:ab:f7:ef:7b:84:77:
                    67:d3:d7:b5:02:4d:71:3c:e1:4b:10:35:6d:6e:8a:
                    d9:24:55:cf:80:39:d5:81:d1:1a:df:41:55:38:15:
                    c7:b3:bb:8c:5f:54:c9:92:8b:47:d5:88:e4:7e:50:
                    26:c3:22:4b:78:8b:6d:7b:5f:ed:46:1e:f7:be:1f:
                    2f:c5:8f:c1:53:36:20:17:c2:8a:10:43:b4:3e:50:
                    99:48:83:2a:b8:84:39:ab:22:43:ae:da:21:9e:87:
                    a0:67:4f:53:3e:f0:3d:d0:9c:e8:8c:ac:d6:5a:ee:
                    1c:7a:6e:b4:01:03:ad:3c:5e:b0:fe:a4:55:fd:e3:
                    09:4a:93:0c:f3:8a:87:a8:99:a3:fa:b0:0b:a9:67:
                    d0:a2:c5:cc:d0:7c:90:26:15:18:7a:9e:d0:92:5f:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:65:56:06:28:B9:28:2C:CE:9E:E6:E6:B4:B1:62:B0:FA:D3:74:48
            X509v3 Authority Key Identifier:
                keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:30:38:6c:36:64:61:13:22:c3:b4:88:d1:a5:e4:64:a3:ab:
         7d:e3:ae:e4:f3:5f:e5:93:50:35:6a:64:b6:7e:d4:9b:63:1c:
         6e:4b:51:bf:f3:92:94:55:a7:a1:bf:9d:cb:34:96:0d:c9:9c:
         ef:f3:c9:7c:4e:4f:2c:46:b2:d6:d9:75:7d:d3:fc:52:6e:2e:
         0e:ad:1b:d5:72:40:42:e3:5a:0c:48:45:21:16:9e:8c:ef:f4:
         d0:1c:d4:74:ad:98:cc:8e:f8:00:1a:52:03:0f:ba:03:99:8c:
         94:29:86:ac:4e:91:c3:99:16:f8:54:e6:c6:cf:1a:ca:01:7b:
         68:dd:3e:77:e3:21:01:86:a2:a5:f0:b0:f7:d4:c6:7b:47:b2:
         0e:46:bf:e4:f0:a8:42:38:39:f6:1d:7f:1f:d9:d5:40:2c:24:
         39:30:cf:39:44:e3:8c:57:17:ec:b5:73:0b:b0:37:b4:da:66:
         3f:04:1a:d2:4d:00:72:96:52:c9:a9:1c:a6:9f:d5:d9:33:b5:
         a9:f0:8e:23:95:3a:d5:d1:65:e8:24:7e:ee:d8:56:af:e6:2a:
         76:c1:e8:ab:6b:ea:e7:6d:b3:be:61:58:f8:5a:50:17:06:22:
         6b:90:92:97:d5:4f:4d:fd:eb:d0:58:da:1f:8c:69:c1:2a:2c:
         d4:cb:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:34:07 2025 by rpki-client