Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File:                     qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier:          aZsKi5msBtWU4VqcdpxK+C0Qw9S4AzFHVAhFFPCp8kM=
Subject key identifier:   77:F5:94:7B:8B:B9:78:1B:C9:CC:E0:62:A1:6D:18:06:D8:A4:84:00
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       0198D6298ACF38B94E6858863E5049359ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number:          1654
Signing time:             Sat 23 Aug 2025 09:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:43 +0000
Files and hashes:         1: Q1epDLLNnUzfsf-xFW4a-Y2XkJQ.roa (hash: w84BOAfcBqYsqabALnnfg1Wuoyv3VSmyIx6zia+PYNA=)
                          2: gLJC-FPMB6JG4uvuoXfj1y1VVB4.roa (hash: bJcY81wfY+5zVAZK4pJVEqgscj1+3rGIYBuBLom9f1Q=)
                          3: j51vgTDCax1tLhOyiZp4zqvzOKU.roa (hash: bN88IoNu8hIQldCCMN1vfnD2HLAoTn8gvr6w/tzj/KM=)
                          4: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: cmrTE5pmsHR0nWMoTj8cVPcaujCyXqngQrknhpxP0+8=)
                          5: z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa (hash: rTNzicdR5UxEu+zSwQpGpaPQg7acnJ6eKVlTT5jJQ8s=)
                          6: zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa (hash: db5+QXNKRG2BQO2CHQMOqU0fUStvszTNPuMXFPPnliI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:8a:cf:38:b9:4e:68:58:86:3e:50:49:35:9e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: Aug 23 09:01:43 2025 GMT
            Not After : Aug 24 09:01:43 2025 GMT
        Subject: CN=77f5947b8bb9781bc9cce062a16d1806d8a48400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:48:ee:c6:1c:54:43:15:89:b2:8f:cf:5a:
                    90:1a:41:ed:02:8f:3f:bd:49:ab:75:3f:cf:b9:20:
                    29:3b:1b:e2:6e:af:ed:21:b4:09:d5:9e:eb:0e:76:
                    93:3d:da:db:f6:c5:87:7b:a5:46:dc:33:44:3d:37:
                    96:38:90:e5:83:12:69:3f:44:d6:5d:c9:e5:92:83:
                    0f:92:0f:16:94:aa:cf:1b:da:e0:1d:e5:59:32:4a:
                    fa:5d:97:08:81:6f:ba:e7:b1:86:8d:3f:9d:f6:9f:
                    6c:31:f9:f0:84:5e:02:8e:90:d4:62:7e:6f:58:8b:
                    de:c8:48:49:e5:bd:89:80:9c:f1:a7:52:a1:8a:a2:
                    66:95:bd:3b:d7:20:68:21:7f:30:85:7a:2a:75:bf:
                    36:ab:8a:71:d1:5d:92:0f:96:21:69:9c:66:74:e7:
                    2c:b1:d1:40:00:5d:69:ea:5f:44:23:95:9c:c8:c8:
                    a9:be:0c:3d:68:b5:18:9d:c8:04:37:c9:0f:b6:db:
                    86:9e:ff:9b:c5:05:7a:ff:e7:82:98:fc:0d:69:b8:
                    d7:d2:f1:39:86:88:f0:ef:35:28:55:59:7c:b4:49:
                    fd:a1:cc:a3:03:8b:39:8c:cb:47:14:0a:e0:32:4f:
                    1a:9f:ae:77:44:fb:b0:3a:5a:73:47:2d:5b:c5:8a:
                    4f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F5:94:7B:8B:B9:78:1B:C9:CC:E0:62:A1:6D:18:06:D8:A4:84:00
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:94:ed:5d:45:3b:c2:f3:b5:f8:04:12:f3:34:09:c7:d4:fb:
         a2:8e:97:f2:42:58:f7:d1:5f:e4:22:1a:04:d9:d6:a8:1a:d7:
         ea:88:7b:06:14:18:c7:1e:69:e2:9b:0e:6c:ca:a1:a5:63:c3:
         4d:be:2b:92:40:cb:8d:d4:8c:aa:8b:f4:ef:55:2d:45:56:be:
         1f:f3:dc:18:f2:8d:79:fc:ed:f5:ff:30:af:99:57:7e:55:db:
         a6:e4:f2:43:f4:4e:0e:9b:f6:03:96:83:6a:07:74:98:31:b5:
         a4:2b:d4:e0:c3:c4:e8:c8:0b:b7:8a:10:f5:74:53:1c:5c:cb:
         45:32:f1:d0:af:d0:d2:2e:5d:f0:99:9a:b3:c0:d2:55:84:00:
         ce:a1:aa:1c:a8:93:95:63:28:8f:0b:96:ba:af:8e:b5:8d:ce:
         86:9a:d0:37:dd:44:ad:ba:5f:90:12:3c:78:74:d4:65:62:04:
         2b:ec:b6:b1:22:8f:79:34:b2:56:9d:d3:73:b8:6c:bc:ee:3b:
         f6:9a:fe:2a:d5:63:af:1f:18:a2:c1:c5:71:6e:ba:c8:95:7c:
         b5:d9:a0:54:13:5b:be:9c:6b:42:bd:e0:5b:79:05:e4:6d:06:
         de:a6:91:8c:7a:e1:d1:6e:5d:f2:8d:c5:c7:d4:f0:78:fc:9f:
         a6:a3:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:46 2025 by rpki-client