Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File:                     QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier:          K2Wyavp8JXHygsCDTkpGIf1whapaIllvID9Xb120pN8=
Subject key identifier:   1B:D3:0D:8A:02:A4:AE:10:F3:1B:76:89:B9:EB:43:07:2A:A6:31:C7
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer:       /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial:       0197CD28B3CA4D778CE4244FB1FC42B09273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number:          15CA
Signing time:             Wed 02 Jul 2025 22:01:26 +0000
Manifest this update:     Wed 02 Jul 2025 22:01:26 +0000
Manifest next update:     Thu 03 Jul 2025 22:01:26 +0000
Files and hashes:         1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=)
                          2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: Yiul9JDZsbpmK7CLsAaWVjNSLXOLoDDRCddk8p9d2SU=)
                          3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=)
                          4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=)
                          5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=)
                          6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=)
                          7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:28:b3:ca:4d:77:8c:e4:24:4f:b1:fc:42:b0:92:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
        Validity
            Not Before: Jul  2 22:01:26 2025 GMT
            Not After : Jul  3 22:01:26 2025 GMT
        Subject: CN=1bd30d8a02a4ae10f31b7689b9eb43072aa631c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:9b:ac:3e:56:06:68:77:4a:06:c5:57:82:
                    a4:b5:1f:89:17:91:d5:44:74:5b:04:08:d7:99:96:
                    29:ac:ea:0c:cd:cc:45:f3:d0:8a:78:c0:00:e8:87:
                    77:c8:45:b3:13:2e:2d:7b:f4:46:41:f3:b6:ba:5b:
                    ab:85:a3:0f:6d:c5:af:af:7e:76:1d:f8:77:c4:b0:
                    2a:d5:13:cd:ca:c6:5c:c9:2e:f2:40:9c:96:03:04:
                    ca:c9:cf:6c:66:e8:07:74:cc:dd:0f:07:a6:63:8f:
                    58:b9:ee:b3:89:94:9b:f9:01:25:36:9a:45:19:f6:
                    f6:4a:17:c9:5a:e9:7b:7d:cc:74:a2:01:a3:f6:f0:
                    11:9b:ba:8f:fe:06:d6:a0:db:ee:fd:71:d8:84:4c:
                    b3:e2:50:56:4a:0f:b4:c7:12:88:22:bf:5b:84:f8:
                    e3:04:dc:12:99:e6:cd:c0:d3:6d:73:21:53:24:a3:
                    4b:e2:8e:29:39:44:bb:de:01:bd:fa:a3:81:cd:a0:
                    ce:d9:12:05:67:10:77:60:a4:37:ae:3c:6b:d0:3e:
                    63:10:ca:41:8a:21:cb:84:c8:bf:67:b6:0a:98:c7:
                    cc:06:66:62:e7:ef:9f:72:1e:16:0c:85:c0:cd:d4:
                    97:06:f0:2b:45:ed:03:90:3a:4a:d6:0b:17:a1:f6:
                    9b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D3:0D:8A:02:A4:AE:10:F3:1B:76:89:B9:EB:43:07:2A:A6:31:C7
            X509v3 Authority Key Identifier:
                keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:73:e6:9d:80:e0:35:b8:1c:de:9f:e5:6a:96:e2:96:9e:8a:
         32:3c:57:02:fc:83:8d:5d:53:7d:c1:b9:c1:77:d5:16:a4:e0:
         cc:44:db:48:e4:99:e1:b7:88:04:9f:58:de:47:57:32:8c:e6:
         1b:3a:c1:31:6c:7f:e7:ea:48:47:84:15:c5:c8:bc:77:ca:40:
         51:b0:80:35:55:c9:cf:fb:d1:da:c2:3d:6d:b8:1b:f0:23:c1:
         44:6d:9e:bf:92:22:82:c6:04:53:14:8b:c9:17:cd:4e:8c:9e:
         35:1c:fa:02:cc:f4:49:2c:54:57:1b:05:63:27:dd:d4:cb:92:
         4f:0a:09:51:a3:f3:44:8e:ac:8e:43:af:08:24:62:94:14:8a:
         8d:c5:fb:9b:01:84:61:ac:76:11:2a:d2:72:37:e4:91:38:00:
         0e:03:fc:2d:0a:bd:14:ac:c1:45:8e:43:a8:5e:c2:22:e1:de:
         da:db:7e:bd:68:b6:24:84:75:06:4e:47:8b:00:9f:a2:d8:40:
         a5:7d:9d:6a:33:7e:35:aa:bf:e6:17:35:cb:c5:ad:9b:40:67:
         6c:8c:99:f9:7a:2f:1c:d4:b2:f6:38:92:4d:24:9d:af:c9:5a:
         86:22:b8:2b:1d:c9:b9:36:62:08:cb:a9:b4:c9:19:bb:92:05:
         5f:ab:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:14:26 2025 by rpki-client