Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File:                     Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier:          AeVKSrNISfuie51x4fQkFTKxpj1MU5WYp3E24oDOW2c=
Subject key identifier:   63:7E:D4:50:6E:A2:2E:FB:DD:8C:8D:E1:CD:1B:33:70:33:7C:5B:48
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer:       /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial:       0198D583BF82EE4F9CD4FC2DCEEC6F1A6F59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 06:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:37 +0000
Files and hashes:         1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=)
                          2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: CEAeixIWlMEcd+Zo6u6zEREzNyoOXnZGdOfeoKkkx3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:bf:82:ee:4f:9c:d4:fc:2d:ce:ec:6f:1a:6f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
        Validity
            Not Before: Aug 23 06:00:37 2025 GMT
            Not After : Aug 24 06:00:37 2025 GMT
        Subject: CN=637ed4506ea22efbdd8c8de1cd1b3370337c5b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2c:77:0f:88:46:bc:f5:fb:0a:cf:83:55:3d:
                    01:26:15:dd:f4:59:a8:08:89:27:0a:89:30:bc:f5:
                    e3:2c:ab:3e:5d:5d:c2:a6:24:75:23:b6:df:02:7a:
                    32:9c:60:a4:63:25:54:fb:bb:62:f1:da:76:3c:c1:
                    47:43:ac:2e:38:97:7a:a3:ea:d8:47:cd:20:7e:fd:
                    0a:c8:f2:3a:17:6c:ce:dc:58:bb:0c:92:c5:7f:ef:
                    53:ef:ec:9e:75:31:54:cd:d6:4c:7a:4d:a0:21:98:
                    31:f1:6b:cd:3c:13:d2:60:df:7a:c3:5d:a1:20:82:
                    0c:5e:45:21:9c:09:6e:61:a5:0d:c4:e5:c9:7c:b7:
                    98:b8:59:ef:6b:59:b3:20:79:e5:cb:b4:1d:09:84:
                    50:9c:51:93:89:e7:8f:06:ec:7f:76:4e:4f:8c:aa:
                    81:bd:31:d9:c5:72:96:20:9d:20:93:d5:de:45:c8:
                    8b:68:3a:b3:be:d1:8c:76:f5:fb:10:1e:85:71:bb:
                    c0:63:00:18:28:91:c0:dd:f9:cf:27:ef:3e:e7:f4:
                    28:9c:e5:40:f3:ba:84:19:a7:d6:81:74:98:f8:bd:
                    54:a0:da:62:6d:23:6d:1b:ef:bb:ef:c3:06:10:19:
                    43:c7:16:0a:ba:dd:69:5c:1d:09:0d:c1:e9:36:54:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7E:D4:50:6E:A2:2E:FB:DD:8C:8D:E1:CD:1B:33:70:33:7C:5B:48
            X509v3 Authority Key Identifier:
                keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:35:61:0c:26:b4:6a:c3:bc:34:c1:ad:be:42:0e:ac:b5:
         41:2d:bf:ae:4d:f6:da:a8:05:e2:ff:48:22:2f:e1:cd:70:ca:
         a8:46:58:5b:fb:03:f5:9c:0a:ca:12:ae:e3:70:be:3d:80:3d:
         fc:4c:92:04:ac:a5:66:90:e1:12:18:c3:c2:90:6d:d3:99:33:
         b4:bb:b3:13:ef:9f:ec:d4:4d:a2:9f:0e:ae:0b:6a:52:1b:e0:
         3c:9c:3f:7b:9e:d4:15:a0:d1:d3:ea:66:ee:73:04:09:ae:b6:
         fd:12:a2:f2:c2:f3:29:c9:37:91:d8:51:51:c1:48:39:01:ea:
         4c:8b:e7:31:e4:95:0d:15:fa:67:f6:58:6b:bb:5f:20:3e:bd:
         3f:1d:e6:2c:e8:e7:4c:cf:10:be:9e:45:11:54:ae:2a:ec:b8:
         58:71:3f:d8:61:6f:13:cb:47:69:19:8d:90:12:38:85:3f:08:
         88:ab:60:de:37:1a:52:db:75:a6:af:5e:49:cb:9d:53:cd:0d:
         6b:e3:39:5a:37:65:93:ca:89:20:39:f3:eb:7b:d2:2e:de:8f:
         e9:f9:e8:7b:bc:96:4b:b6:df:bd:ac:d7:4b:7a:33:75:14:a5:
         c6:e2:c0:af:af:60:0f:19:c0:60:ff:91:8a:b5:d1:eb:2a:3b:
         75:0a:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:35 2025 by rpki-client