Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File:                     qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier:          +L3huCXSpuFs3vJRLL3+64Ua+eHQTI9cmhZChSn73mM=
Subject key identifier:   47:82:02:67:57:16:55:A1:03:0F:BC:B7:B2:59:72:68:BB:CF:70:32
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer:       /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial:       0198D473ADD67B100768A625FF308912C313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number:          0753
Signing time:             Sat 23 Aug 2025 01:03:27 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:27 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:27 +0000
Files and hashes:         1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=)
                          2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: SIMmkj/T4iwGRx/Vd3WjpJO5swEMgZke+uImmcRg8Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:ad:d6:7b:10:07:68:a6:25:ff:30:89:12:c3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
        Validity
            Not Before: Aug 23 01:03:27 2025 GMT
            Not After : Aug 24 01:03:27 2025 GMT
        Subject: CN=47820267571655a1030fbcb7b2597268bbcf7032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:eb:dd:e9:ed:4d:e5:cb:27:75:73:f8:11:
                    76:60:01:a8:df:8a:ee:d0:de:fe:f7:6f:4c:b2:ae:
                    0c:61:bd:be:e8:f9:43:ec:90:d8:fa:76:2e:b2:15:
                    13:fe:26:d8:d6:e9:86:9b:89:3d:1f:4b:90:82:be:
                    bb:53:0d:63:bd:36:01:48:a7:f9:17:d5:95:29:71:
                    e7:39:45:97:dd:bc:5f:2f:74:b8:a7:1c:76:f8:9b:
                    5f:e1:7f:29:84:07:93:e9:d0:4a:4a:81:c0:5a:35:
                    7b:a6:df:3e:75:85:7d:bb:66:b2:d4:c6:f0:f3:df:
                    c7:84:82:32:cf:c3:90:f6:60:b7:13:16:9e:f0:9e:
                    25:f1:15:4d:15:11:01:7b:d1:95:0d:ed:9f:e6:f2:
                    6a:f7:5b:41:94:61:21:60:51:93:3b:ce:e1:e4:ab:
                    be:90:b2:62:38:81:89:98:90:da:24:62:03:96:e3:
                    f4:d0:5a:17:28:03:db:5e:bd:1a:53:85:e1:5b:ae:
                    b4:07:c1:e6:cb:ba:97:c1:8f:d8:3c:8c:e4:58:71:
                    0a:8e:57:29:85:be:34:c8:ad:65:9e:50:dc:49:88:
                    fd:47:d5:27:98:63:22:65:bc:c9:aa:72:57:5f:16:
                    4d:05:6a:a6:27:67:a1:99:8e:7a:a4:02:79:46:c6:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:82:02:67:57:16:55:A1:03:0F:BC:B7:B2:59:72:68:BB:CF:70:32
            X509v3 Authority Key Identifier:
                keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fb:39:83:04:76:64:5d:72:f4:c3:ea:f9:fe:09:f4:4f:34:
         d4:aa:59:0b:f2:47:9e:59:96:d3:cb:60:f6:9c:48:c7:d0:be:
         ba:16:43:c8:90:fd:5b:5f:0c:c2:f0:02:a8:d8:49:1a:2a:b1:
         a1:97:3b:bc:28:de:b0:4f:38:c9:63:e2:12:cf:ca:4d:72:da:
         ef:84:ba:9c:52:f2:f8:3c:d0:4a:6d:38:fd:10:6d:78:02:f6:
         58:d6:ad:df:ff:bf:59:c4:d1:c9:e3:a3:48:2e:34:2e:f6:3e:
         d8:71:05:33:09:67:b7:c3:81:a2:dd:9a:c9:a8:68:04:f8:b8:
         84:26:52:ea:62:0b:a4:77:dd:01:11:a9:db:e6:bf:ec:2f:a6:
         1d:29:e7:ea:7c:d8:0a:3d:1a:0c:19:a3:c8:3b:44:d3:26:2a:
         47:48:3d:a6:28:54:a2:86:2b:c3:4e:0a:90:eb:52:d8:89:0c:
         95:7c:c8:37:f9:f8:33:17:a3:81:01:7a:e5:2c:fa:09:9d:6f:
         6e:7a:16:22:3b:f0:5c:ff:8d:f4:d9:f9:16:8b:83:e4:25:17:
         a1:98:19:11:ef:6c:65:14:e2:6c:90:cc:0d:03:c3:db:de:75:
         df:46:fa:67:69:dc:f8:74:f0:ac:2b:28:36:79:f1:41:dc:2c:
         b2:99:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:56 2025 by rpki-client