Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
File:                     QVpBISe1FPZFXsiobinTjrCrtaw.mft (raw, json)
Hash identifier:          jenv9NdQH2T2u+mvv/CDi/xqlZOf0QMHkUeKYYERx70=
Subject key identifier:   90:AF:0C:26:31:C5:38:FE:3F:7F:F4:35:CF:9A:D2:6A:3E:A0:B5:5B
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Certificate issuer:       /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial:       0198D660E0BD5B940632DE6FADD5792A8EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 10:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:09 +0000
Files and hashes:         1: OBn58ZJwEh4MhAnhsFAWGGJLifI.roa (hash: 168HaFL19xy+6TCd3GYc8l6QrgMbWSIwNLv5YeyfQ/w=)
                          2: Q0GMmj0TLNZKmzThv89XKbeW0UI.roa (hash: JZ14w91MZvqFvHWvtqxAYRsNPtiKbIaz1hieDnidrSg=)
                          3: QVpBISe1FPZFXsiobinTjrCrtaw.crl (hash: CIypfJHFdYZN0Ipb+/sjVsj1DWhoKnEE5e0qEQ804pQ=)
                          4: QY8orDNDFtPRatFK02MXIdps050.roa (hash: NiooW7R3ctbGvF0POc0TxPmXz9RBOYgCBww2xqBcPpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:e0:bd:5b:94:06:32:de:6f:ad:d5:79:2a:8e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
        Validity
            Not Before: Aug 23 10:02:09 2025 GMT
            Not After : Aug 24 10:02:09 2025 GMT
        Subject: CN=90af0c2631c538fe3f7ff435cf9ad26a3ea0b55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:aa:db:6a:39:76:5a:65:07:34:f0:10:c3:
                    c1:36:e4:6b:53:dc:7e:53:ca:3b:d0:34:05:c4:8a:
                    b0:83:0c:ff:6d:6e:af:01:13:dc:80:9e:3d:8a:03:
                    fb:2b:69:78:20:0d:69:1d:e8:99:be:e9:a1:de:66:
                    63:dd:0b:fe:b9:ba:c9:5f:2a:78:63:2d:9d:39:51:
                    63:cb:9e:a6:1e:e2:0c:65:00:88:3d:5c:c1:56:e6:
                    57:39:38:fd:68:d7:f8:71:4e:cc:42:13:00:6b:19:
                    e9:1a:1f:3a:09:ad:74:af:86:39:09:8a:5c:57:f4:
                    80:c3:d3:ec:d3:3e:80:1a:43:71:e2:36:4d:ca:31:
                    e2:6a:f1:a4:04:c0:b6:8c:37:c3:24:db:25:f6:0e:
                    8a:9c:94:9b:b8:4b:e6:45:ba:a7:ed:15:99:01:7c:
                    22:b3:bc:d2:f3:55:1b:11:d9:c0:51:53:fe:0b:8e:
                    c8:26:cb:23:d0:ad:93:47:0e:ca:63:41:be:5f:a9:
                    bf:59:7e:31:58:33:6c:be:84:19:52:6e:fe:32:85:
                    b9:10:b3:a1:ca:42:d6:ad:d4:50:df:f7:8a:30:ab:
                    82:bb:2a:6f:dc:46:22:93:f1:c4:f0:54:e3:da:31:
                    11:78:1b:16:fd:d7:b0:64:38:ac:87:7b:ff:ce:60:
                    51:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AF:0C:26:31:C5:38:FE:3F:7F:F4:35:CF:9A:D2:6A:3E:A0:B5:5B
            X509v3 Authority Key Identifier:
                keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a9:78:04:c1:eb:bf:35:3b:ca:8b:4f:fe:8f:ed:2b:39:44:
         d6:cf:59:af:2d:08:21:a0:6c:76:3a:17:9c:0d:42:a8:e6:60:
         b8:f5:00:2e:b2:aa:d0:9b:41:87:77:b8:41:64:a3:a8:0f:cd:
         01:8b:76:9c:54:0d:af:87:1e:5a:52:c7:49:fc:1b:65:32:49:
         80:17:65:00:0c:ae:4c:66:20:c8:0c:0e:4d:66:de:c0:26:14:
         67:81:f2:8c:65:83:6c:2d:c6:10:b4:ad:dc:cc:4d:07:0b:f1:
         3b:3f:01:88:86:d6:11:5f:eb:7c:e6:5a:fd:82:fc:3e:24:3c:
         e4:8d:99:02:2e:c5:c7:3b:3e:64:e8:1f:60:1e:eb:b3:90:b7:
         0d:1b:e3:7d:c2:0a:2a:6b:76:8f:ef:8a:b8:44:a5:77:f6:a5:
         92:c4:9b:cf:8d:c6:ca:41:20:20:3e:e8:98:15:04:c7:70:a5:
         71:de:70:9e:0f:b4:50:35:72:8f:52:fd:40:55:e8:11:f7:d8:
         dc:f8:22:3e:a5:f1:67:3c:76:74:19:c8:9d:20:dd:51:23:b5:
         cd:8a:e9:75:5f:b5:de:ea:e1:ec:34:38:ee:5d:e0:b3:39:ad:
         12:75:70:55:7c:0b:db:a5:1e:eb:41:dd:70:22:76:f3:e0:59:
         65:0a:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:24 2025 by rpki-client