Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File:                     qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier:          GBv8Hy9IsSQxTcz1qfJmRNUrbTPoucnlIpS+Sr7iIec=
Subject key identifier:   9E:AB:AC:C6:B3:D7:7B:C2:68:49:AE:3A:8B:01:41:34:BB:A2:22:F2
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer:       /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial:       0198D697F1D3783A52CE327CEA46E9EA88C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number:          C2
Signing time:             Sat 23 Aug 2025 11:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:18 +0000
Files and hashes:         1: CDUsDykTOJjzj2PfEalP5NWfeaM.roa (hash: MDsxP0rZPQ79FjaH/eHSpSKbqQZrO2HQf+/0HhGuzhE=)
                          2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: l7Mgrqvq1un6PqBQ0cZqQITA36foiteZjt3f/Vy84qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:97:f1:d3:78:3a:52:ce:32:7c:ea:46:e9:ea:88:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
        Validity
            Not Before: Aug 23 11:02:18 2025 GMT
            Not After : Aug 24 11:02:18 2025 GMT
        Subject: CN=9eabacc6b3d77bc26849ae3a8b014134bba222f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:84:cc:5b:92:5f:dc:96:b1:ab:f2:1c:ab:
                    05:f4:c2:9d:21:f4:af:43:1d:45:4f:0d:63:28:a2:
                    5e:62:24:a4:2b:05:65:3b:98:4d:76:38:ee:52:72:
                    ad:37:54:d2:25:e3:c7:0e:28:61:ff:42:14:86:89:
                    cd:ed:77:6f:a2:fe:15:4f:1d:4b:4e:3f:01:2a:79:
                    8e:73:04:43:cf:64:33:65:a6:e5:fb:be:11:7a:86:
                    58:ff:f9:57:c1:03:a0:e8:27:af:cd:82:4e:0c:60:
                    bd:ba:17:a1:e4:ff:66:75:17:fe:25:c6:8b:b8:d3:
                    42:79:9d:d4:81:98:ab:8e:d0:13:cb:3c:69:58:51:
                    fb:ec:1c:b6:12:2e:b1:06:0b:a8:f5:40:a7:ae:45:
                    a1:88:c9:34:cd:6f:f6:62:9a:97:d0:d1:6a:6a:fb:
                    2a:a2:25:df:44:cc:e9:84:06:26:00:54:15:e3:3f:
                    db:67:b9:83:bf:c4:c8:11:07:fa:8f:78:db:f9:ae:
                    11:74:c1:48:91:18:ca:44:dc:9b:6b:be:89:10:90:
                    24:3f:0c:63:89:3b:5f:f0:b3:8d:63:47:e6:49:bc:
                    b8:be:75:e4:e9:48:da:b5:f9:7f:c6:e7:3c:5a:93:
                    9d:c4:0a:f3:1c:33:f4:f7:51:22:7a:e1:7d:4b:7f:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:AC:C6:B3:D7:7B:C2:68:49:AE:3A:8B:01:41:34:BB:A2:22:F2
            X509v3 Authority Key Identifier:
                keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:92:66:3a:d5:40:2e:59:8f:34:da:12:ac:0f:6d:9a:3a:
         34:2b:b9:bf:fc:89:e3:0d:77:c1:c6:05:57:c8:4d:68:64:6b:
         93:36:c2:fe:1a:52:85:f7:ac:4d:a1:8b:b6:2f:1a:28:43:b7:
         27:23:df:d9:9b:31:12:32:a6:ca:02:34:c5:a2:fd:3e:0d:83:
         e4:7f:e4:ae:fd:7b:71:43:7a:8f:f0:bb:72:0f:4e:ea:69:24:
         bb:95:81:9f:80:c6:11:68:e9:4f:7d:b5:85:c8:08:0f:86:8a:
         b2:11:78:bd:6c:cd:c1:bf:03:0b:61:fd:55:00:79:46:4b:26:
         7d:6d:47:c2:a4:28:7a:9f:c6:61:e3:f5:71:5b:5e:e2:76:85:
         c8:ae:1f:d3:25:37:90:02:17:72:38:b1:c8:11:50:24:cc:6e:
         f6:c3:d9:af:5e:36:48:5d:5c:b9:db:40:7b:61:c4:86:66:a3:
         54:b6:bb:22:cc:59:5e:5b:01:91:1e:1f:ae:31:74:be:05:12:
         4e:c9:72:72:cd:be:35:13:3f:6f:d3:1a:a6:7e:cf:b9:df:42:
         93:0c:dc:f3:89:62:99:72:ca:1f:ea:a5:fc:d9:7b:6a:e9:d5:
         fe:32:9d:0b:33:da:70:88:c0:96:34:bf:79:2e:36:8a:4d:eb:
         4f:76:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:29 2025 by rpki-client