Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File:                     qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier:          6SKYhbYnnG9MIfu88eR8U9WEQRNb1475paxt0stw6lE=
Subject key identifier:   22:4F:CC:64:BD:CA:C2:BF:B7:0B:EA:94:40:4B:82:9D:AD:21:45:9E
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer:       /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial:       0198D4E08CE9922153DDD26BEA981A726B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number:          166C
Signing time:             Sat 23 Aug 2025 03:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:22 +0000
Files and hashes:         1: 5HOepO76tD27CgXh7AgBSaOVvIM.roa (hash: fhyBpQTMKKX7db+5/rypfSBY1Vplej8lw2Wzs2aMOjk=)
                          2: cBAOU6NilQLgyxc_R_xsZNCxa3o.roa (hash: 1Va+iG7tZoyq2utzAVoaMA4hrJ+B4uv1WrhEZfEJdns=)
                          3: f5DYymL8L0FgOoFZZezVYFeh5Jg.roa (hash: 7uwt9itnco/csPtpi/DQC4t0QetXfLjimKtZXfisb00=)
                          4: jVDEyqMCODRbBkqkq43-QF92dZM.roa (hash: s/kttAz6ZQTi3SrIl36OIG3RsnNyK9roMAcg0ML6WjQ=)
                          5: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: wxFioA9g4c2wjQMkmiVB1atnxOZ8LDY4R+3Gyvb69iY=)
                          6: t0oLewvfmtctM6fLKW7JACNy67I.roa (hash: eoIen7jr8ftFR2LBFlJ/X2GszHh0uXwaMxdCabuer48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:8c:e9:92:21:53:dd:d2:6b:ea:98:1a:72:6b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
        Validity
            Not Before: Aug 23 03:02:22 2025 GMT
            Not After : Aug 24 03:02:22 2025 GMT
        Subject: CN=224fcc64bdcac2bfb70bea94404b829dad21459e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:fc:63:b3:78:36:5a:39:2e:95:24:33:2a:
                    8b:f2:2c:98:c8:fb:40:8c:0f:d2:fb:ce:fb:5a:21:
                    92:c0:40:fb:68:de:a6:7f:a6:44:50:bc:d7:a9:03:
                    d5:59:4f:2d:c3:2b:43:13:8e:15:a6:e3:4f:35:5c:
                    92:0b:f2:9a:ac:d9:5c:90:3b:38:b3:69:83:b9:95:
                    29:69:6b:d6:6b:e7:49:dd:36:df:4f:bf:e7:b0:42:
                    b1:5e:ec:97:6e:68:60:f2:f0:39:37:e3:0f:c4:d7:
                    19:6c:3a:01:f6:4c:a6:2f:af:e0:3a:a8:0f:3f:09:
                    33:7b:57:2c:81:e0:b3:27:4c:ae:97:47:34:0c:2b:
                    3a:05:e6:56:0e:2a:e1:da:cb:e3:1f:86:11:46:5a:
                    aa:89:26:a8:f2:0e:2a:f7:71:44:39:96:0f:69:6a:
                    37:73:57:cb:22:81:66:6e:a0:eb:c7:a9:60:c3:a2:
                    94:86:cc:5c:b4:65:98:ec:28:a2:df:3a:29:04:4f:
                    05:53:68:87:31:ac:94:ca:f0:c2:71:47:6f:81:ec:
                    19:d3:88:4a:7e:c2:a4:a6:be:ca:14:6c:c0:a8:b7:
                    34:b9:ec:7e:29:7b:0d:8c:7e:a6:f1:29:03:a1:6e:
                    ee:c6:da:ac:f0:56:d7:a9:ac:dc:07:66:a6:cd:15:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4F:CC:64:BD:CA:C2:BF:B7:0B:EA:94:40:4B:82:9D:AD:21:45:9E
            X509v3 Authority Key Identifier:
                keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:10:99:13:6e:7d:d3:75:ab:63:a3:0d:e1:7d:e5:1a:71:a6:
         f7:cb:f5:40:e2:12:5e:e9:28:88:1b:84:44:a3:80:82:db:88:
         b7:5f:d9:e8:fc:39:84:9e:ab:9a:9d:b8:44:4d:37:79:85:68:
         01:39:bb:c7:97:7f:1c:03:34:4e:71:d2:f5:3c:90:e5:0e:8a:
         70:21:6c:7b:f5:a1:79:72:95:e8:59:af:f4:cb:d6:9f:5e:82:
         9a:55:8e:70:3f:eb:ae:c8:b1:2d:61:44:5e:77:36:ac:14:d5:
         1c:f2:4d:56:8b:d0:22:a5:6f:25:3b:dc:46:2b:f9:3c:84:bb:
         87:f5:c2:99:f0:7e:85:6a:55:59:8f:fe:8f:4a:13:4d:25:f2:
         55:fa:38:f3:ef:63:91:09:16:96:53:9b:52:a3:6c:fd:82:96:
         e7:6d:ed:21:a4:07:89:d2:b6:04:4e:bc:c1:d1:3d:bb:53:cc:
         20:de:09:65:8d:1c:f4:f3:ed:cd:9c:22:f7:06:32:47:50:3f:
         d2:b5:f6:f8:3a:94:00:81:e3:90:38:77:b6:94:48:ac:4b:fb:
         cc:f4:eb:c5:f7:b2:e9:ac:b6:9e:9b:56:3c:e6:4b:5b:c3:59:
         e2:44:17:fd:ef:c2:69:d4:bc:f4:8d:99:a3:e9:9f:1d:5f:61:
         fb:9c:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:05 2025 by rpki-client