Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File:                     QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier:          LjQ86rpE6uH5vh9WJIq2O0ZwMGLgfls/QM1Yoj2kwNs=
Subject key identifier:   82:C6:83:4F:11:AB:3A:79:49:57:EC:12:9C:5E:AB:D2:7B:4D:59:29
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer:       /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial:       0198D65F0C2382CA5FCC5538C4720C4038FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number:          0D20
Signing time:             Sat 23 Aug 2025 10:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:09 +0000
Files and hashes:         1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: GE14OJ1fGo4fwYncduvI3TMCcTT/pNKV/kJYE5EDQ0s=)
                          2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:0c:23:82:ca:5f:cc:55:38:c4:72:0c:40:38:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
        Validity
            Not Before: Aug 23 10:00:09 2025 GMT
            Not After : Aug 24 10:00:09 2025 GMT
        Subject: CN=82c6834f11ab3a794957ec129c5eabd27b4d5929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:0c:14:f3:3d:02:d5:78:be:d2:ca:0b:ef:
                    b4:84:b1:33:ca:a5:d4:d5:4d:ad:2c:aa:a7:62:99:
                    8e:32:5d:73:86:b6:78:63:c4:e4:16:90:46:cd:d6:
                    67:40:88:ac:31:fe:6d:c6:d4:b3:37:5d:47:d0:3a:
                    46:ab:4a:21:86:23:81:6e:25:88:1f:17:df:53:a4:
                    b9:6d:9a:fb:ba:4d:50:25:b7:93:ab:9b:9a:d0:58:
                    4f:73:a5:e4:62:fa:54:4d:19:7f:88:73:4a:96:65:
                    e2:39:45:18:95:6c:a8:d9:77:eb:7c:9e:f3:37:38:
                    53:93:37:84:41:a0:71:6a:74:be:9a:2b:de:b4:41:
                    ad:9c:6f:0d:85:04:1c:f5:62:e4:3b:e9:ce:41:3c:
                    67:84:92:19:0d:0e:42:a1:2c:0e:76:b3:03:92:53:
                    b6:e5:fb:d7:c9:09:c2:c7:70:c1:4b:29:b8:e6:00:
                    e1:24:55:67:e4:80:e1:68:3b:6e:05:3c:40:93:ff:
                    6f:e6:6f:90:34:78:e4:f4:74:45:a2:4a:0f:2d:fc:
                    58:3e:31:83:a6:19:90:64:24:4e:52:fe:aa:0b:39:
                    2b:70:fc:e6:d9:93:6c:28:aa:7e:69:77:7b:31:9d:
                    83:e6:a1:01:69:65:6b:85:23:2b:c8:f6:fa:6a:31:
                    aa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C6:83:4F:11:AB:3A:79:49:57:EC:12:9C:5E:AB:D2:7B:4D:59:29
            X509v3 Authority Key Identifier:
                keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:e3:72:3f:01:36:5d:2e:6d:0a:64:0d:10:14:f0:d7:50:
         dc:07:09:d8:27:2b:a4:f9:70:f8:08:36:9c:9d:8e:c7:e3:e3:
         2c:df:bf:a8:61:57:71:d7:37:a5:64:f4:e4:63:d5:32:67:e2:
         de:34:dd:02:73:e6:83:f1:4a:6c:90:4a:e7:2d:9d:30:16:8a:
         c8:33:05:ae:0d:a0:bf:0b:0c:f6:47:f3:e7:9f:b7:c6:f5:44:
         9c:c9:a8:ad:6c:3e:5c:cd:f7:ae:79:4e:20:ac:8c:59:da:90:
         b6:b1:2f:81:35:e7:f1:d9:6a:d4:f1:dc:4b:63:bb:7a:2e:a6:
         bb:8e:12:e9:b6:45:93:6b:ed:8c:e5:02:fb:28:95:31:74:d1:
         43:f9:ee:75:e3:96:ce:c4:2b:f2:ff:bb:72:5e:03:4d:a3:78:
         90:f8:a4:47:77:68:2d:45:f9:a0:56:bb:49:c2:13:1d:cd:0e:
         c5:29:88:fe:36:0a:34:35:2a:2c:30:db:d3:b2:76:42:89:90:
         87:ad:6c:8e:9b:31:90:17:83:70:ac:31:71:9f:47:58:20:85:
         00:ce:14:b8:44:a4:80:7a:1f:49:07:a8:a3:80:1b:b2:f0:5b:
         45:95:0d:b3:54:12:78:64:a2:60:f6:e9:95:50:cd:9d:85:9d:
         e5:be:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:10 2025 by rpki-client