Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File:                     QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier:          YFtdrs9b4ZlJtGnwGg55XX5qRvX816wAUb4ca7BI1Ss=
Subject key identifier:   53:59:FB:49:0B:6C:6F:DC:97:3F:DC:04:61:D8:D3:98:9C:0B:CB:9B
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer:       /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial:       019880C2B62BFB522DAFE53CD4E5F22A1F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number:          1624
Signing time:             Wed 06 Aug 2025 19:01:40 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:40 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:40 +0000
Files and hashes:         1: I4AtuDZrbSqrgt1jAfNEMLFaaig.roa (hash: 7wTj3H6so/8/7mTO73IV6vt8mViKC1vPmg3wdN+1rZ0=)
                          2: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=)
                          3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: FVtVmltpjGbesrRjMWwIPacg2vzVsNxDLikjs9kHt5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:b6:2b:fb:52:2d:af:e5:3c:d4:e5:f2:2a:1f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
        Validity
            Not Before: Aug  6 19:01:40 2025 GMT
            Not After : Aug  7 19:01:40 2025 GMT
        Subject: CN=5359fb490b6c6fdc973fdc0461d8d3989c0bcb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:ed:aa:a7:72:f7:d9:b5:0b:ff:51:02:00:
                    88:a7:29:cb:3f:02:da:85:15:65:70:b1:2c:49:ee:
                    ae:8d:cb:e8:70:df:58:f6:9e:1b:53:8a:b5:cf:55:
                    f5:ca:74:ff:94:eb:87:b5:27:b3:81:94:fd:0a:fa:
                    1e:1b:7a:1b:c3:e7:ee:46:ae:22:1d:c2:e6:f6:13:
                    7d:8b:99:03:8e:71:b8:f6:4f:0b:ae:af:b3:f2:70:
                    b2:ce:e0:44:ae:b4:0b:89:50:c5:58:13:ea:d8:93:
                    9e:13:db:80:03:f0:59:77:b4:ed:e3:ad:45:d4:72:
                    bb:eb:c0:37:f1:8a:1c:4c:4a:7e:d3:44:33:bd:ed:
                    a1:94:99:f2:ff:74:26:5a:19:5f:c5:61:5c:9e:c7:
                    91:60:e1:68:d9:a2:bc:fe:13:a7:39:ae:fc:db:e7:
                    ad:40:95:3b:9c:4e:b2:99:f8:1f:62:bb:b2:aa:d6:
                    cb:a3:f6:c9:63:ba:50:90:ec:a0:4c:62:01:0f:1c:
                    66:58:d8:24:dd:cc:cb:ce:8a:4e:05:ac:25:34:8a:
                    fb:19:c2:a8:18:29:78:0e:0b:76:b6:37:c2:de:9c:
                    de:27:ce:1d:55:fd:93:c5:b8:84:d1:03:fb:69:d6:
                    62:76:76:e1:c7:c7:fc:5c:bd:e5:c9:d1:f8:b0:a4:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:59:FB:49:0B:6C:6F:DC:97:3F:DC:04:61:D8:D3:98:9C:0B:CB:9B
            X509v3 Authority Key Identifier:
                keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:cf:4f:c8:f6:4f:b5:1b:2f:88:6e:b0:bc:fd:bd:bc:56:
         15:56:f6:dc:46:ed:3d:07:eb:c7:82:34:01:21:10:3c:45:19:
         14:29:a7:4d:2c:f3:fd:52:84:b3:05:17:f3:bf:43:13:3d:65:
         90:d7:56:4a:27:14:d3:60:4b:18:cd:b9:0c:14:5b:19:73:90:
         91:55:2c:34:af:38:1f:bb:6a:da:e8:51:88:78:3f:b3:a7:90:
         ca:e0:9f:8c:b2:8f:fc:63:c8:38:89:af:94:41:1d:00:60:c9:
         f9:61:86:cd:5f:16:29:96:85:a4:df:5a:d5:c5:5e:c2:e6:92:
         2f:15:d8:cf:a4:65:c1:a4:81:61:61:a0:5f:56:17:15:80:9e:
         d3:05:a6:43:54:18:16:f8:c9:58:19:b8:a6:19:dc:15:12:7c:
         ed:82:ce:d7:e9:e6:68:05:94:4e:59:05:44:58:15:d2:6f:40:
         e3:44:2b:d5:e8:0b:53:e3:03:61:a0:4e:30:d5:2c:c8:c6:fa:
         51:52:7b:49:d8:3a:30:42:88:f9:00:e0:57:85:15:93:3c:a3:
         40:85:22:af:e2:1e:eb:17:a9:0a:8b:5c:cd:ef:c9:d0:92:ef:
         d6:3b:52:43:2f:36:f0:cd:05:e3:ab:d9:dd:7b:a3:01:20:95:
         ae:86:cc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:36 2025 by rpki-client