Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File:                     QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier:          qqt3B0K5Ew+7Fj7p1YnPRaemgbdtTTNt7MmQQRuovNo=
Subject key identifier:   31:D3:B2:EE:62:6F:7E:7C:3E:06:2E:14:E0:B7:39:3D:34:0F:29:3A
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer:       /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial:       01988166EFB38EE225C05D53C23691FDC122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number:          0EF6
Signing time:             Wed 06 Aug 2025 22:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:03 +0000
Files and hashes:         1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
                          2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: gRxBxjusymXwhe9FO/GipmvJJLVgr7hFbaoAvW1gFZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:ef:b3:8e:e2:25:c0:5d:53:c2:36:91:fd:c1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
        Validity
            Not Before: Aug  6 22:01:03 2025 GMT
            Not After : Aug  7 22:01:03 2025 GMT
        Subject: CN=31d3b2ee626f7e7c3e062e14e0b7393d340f293a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:4f:74:34:51:68:77:93:8c:aa:d3:58:94:
                    06:1b:1a:df:88:35:88:ff:39:ec:54:05:72:4c:b6:
                    40:3d:74:8c:4e:ec:25:51:8e:3a:41:c7:ef:b4:3e:
                    a9:91:a7:7d:ff:69:11:41:8d:ac:02:5a:ef:cf:a3:
                    4b:44:c7:a9:ce:08:80:78:fa:70:32:6e:56:95:68:
                    cf:7a:4c:e4:6f:95:03:6b:d8:07:95:54:a7:46:25:
                    02:2f:f8:dc:1a:d7:2d:da:ca:c4:85:76:43:e9:cf:
                    61:8f:f7:43:12:d8:92:80:a7:66:b0:59:d3:65:7b:
                    66:81:c2:e0:c8:9f:68:4e:25:77:a6:a7:fb:18:91:
                    c2:7b:a9:c6:7e:6e:04:00:15:8f:e8:cd:a0:c1:64:
                    4c:f3:98:f7:44:a9:2d:d4:71:0d:6f:eb:2f:78:78:
                    86:41:a2:0e:f1:1a:7d:e2:29:e0:77:35:96:17:78:
                    59:e3:17:a6:01:d8:f0:1d:64:28:ed:74:6d:34:c9:
                    49:70:fc:8e:65:2e:a4:39:8a:61:d0:ad:42:22:92:
                    4f:83:6b:54:bc:ea:9d:ac:94:2a:22:86:8e:34:45:
                    76:6a:cd:10:d5:5b:22:02:5f:8a:43:0c:e7:0c:8a:
                    82:cc:b8:3c:df:f7:f7:fc:e5:8d:c2:6f:45:4a:f1:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D3:B2:EE:62:6F:7E:7C:3E:06:2E:14:E0:B7:39:3D:34:0F:29:3A
            X509v3 Authority Key Identifier:
                keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:94:ae:f9:d4:31:77:d8:75:d2:81:f6:41:b8:0a:64:b9:58:
         fa:9b:a4:50:90:54:67:f4:f3:f2:e2:ed:e2:29:99:d7:38:6e:
         91:21:16:b5:2d:26:06:57:f4:92:06:8b:46:cd:4d:12:15:94:
         21:93:94:80:80:1a:a9:e5:72:cb:30:5f:3a:2a:88:f6:b4:78:
         87:87:b3:ed:a3:66:51:04:a1:1b:b9:32:a8:a5:1a:c1:d0:ff:
         1a:3b:e8:9a:75:85:96:62:99:17:15:09:b5:6a:5a:ea:6d:22:
         d9:63:6c:55:78:2a:2a:cc:73:69:41:82:4a:d1:93:f9:a0:6f:
         10:b2:51:5b:2e:80:fe:22:42:99:9e:c4:06:89:5b:e4:e7:c7:
         33:3b:25:e5:c9:e5:ff:da:0e:01:2c:40:8c:60:6b:57:56:62:
         84:d6:a9:e0:b3:d3:ea:e1:50:4d:50:6e:11:87:61:3f:b8:df:
         37:aa:49:4d:d1:68:42:68:d5:eb:d0:d7:c4:df:b4:44:68:60:
         65:57:4c:d2:a1:3a:56:23:bf:24:72:0d:7e:0c:0d:5d:db:c4:
         fa:c3:b9:5a:67:22:fc:63:72:fb:07:44:b3:69:d3:85:69:00:
         f5:49:dc:f9:38:85:ab:a2:81:f0:b9:e3:95:15:33:46:25:bc:
         de:75:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:23:50 2025 by rpki-client