Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
File:                     QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json)
Hash identifier:          JoKvfMMxy/uotWezu573di4FXIKnjErWDg+vJ59uFi4=
Subject key identifier:   73:A6:43:DA:39:65:DA:A9:EB:97:7E:7D:76:FE:7E:52:62:6E:E5:5C
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Certificate issuer:       /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial:       0198D6CCE52D101AAFA77E0704C49E137F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
Manifest number:          05CB
Signing time:             Sat 23 Aug 2025 12:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:08 +0000
Files and hashes:         1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: hoWfVO0W9DDMZ+nu8th3IDlm3dGzleYpwOWYMxgeqdI=)
                          2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:e5:2d:10:1a:af:a7:7e:07:04:c4:9e:13:7f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
        Validity
            Not Before: Aug 23 12:00:08 2025 GMT
            Not After : Aug 24 12:00:08 2025 GMT
        Subject: CN=73a643da3965daa9eb977e7d76fe7e52626ee55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:e5:41:0b:d9:ab:9c:9e:c9:1a:52:98:72:
                    99:d3:16:0e:46:f2:27:82:dc:12:41:c8:af:df:13:
                    6e:4f:0f:1d:37:41:85:24:eb:3c:6e:48:30:84:89:
                    57:85:83:2c:8c:ba:4e:4b:9b:af:c9:56:18:46:0d:
                    ec:24:7e:c5:fb:70:74:14:33:cc:0d:41:ed:96:10:
                    20:28:7b:e3:27:a4:0c:7f:90:ce:5d:b1:e7:7b:10:
                    ba:c9:ee:18:c2:4f:27:f1:f6:54:97:43:fe:d9:f5:
                    af:71:af:ba:77:34:f8:c0:a2:74:8f:21:46:10:e4:
                    ce:8f:e8:04:f8:84:80:2c:b6:c1:72:7f:51:19:90:
                    01:fb:39:49:59:21:82:b1:4a:2c:50:81:53:c4:b0:
                    8f:63:4b:9d:82:96:38:96:19:07:48:05:0d:04:da:
                    0c:e7:cf:51:dd:16:ca:b1:f8:ca:d7:c8:f5:6a:ca:
                    8a:fb:36:19:ee:ab:67:b3:17:f4:9d:a0:ab:80:ad:
                    f8:a2:97:f1:f3:1e:2d:cd:ba:1d:c7:e6:b5:52:d3:
                    9a:a8:28:a8:51:67:09:ea:da:cc:8d:bf:90:0b:6a:
                    0e:82:a9:53:8a:5a:ad:35:d1:74:c8:45:90:c4:b8:
                    1f:1c:53:4a:82:9a:c9:0f:5a:50:1e:1a:2a:84:ee:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A6:43:DA:39:65:DA:A9:EB:97:7E:7D:76:FE:7E:52:62:6E:E5:5C
            X509v3 Authority Key Identifier:
                keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:35:4e:2c:82:41:69:6a:66:db:94:65:ad:d8:29:8e:f2:
         4b:cb:6e:11:3a:4f:bf:d8:44:93:8a:2f:6f:56:a4:86:7f:9f:
         a9:de:cb:05:e4:af:62:d9:65:bf:c8:d7:bb:3c:2a:57:67:5b:
         3b:0b:d5:07:a5:47:67:0b:65:b0:a0:81:92:b3:4b:7d:6b:a2:
         0f:44:a9:fa:9b:72:0b:8a:1e:35:4f:75:b3:37:5b:66:fc:0a:
         12:84:0d:95:22:cc:44:22:14:59:8e:3a:2f:a4:7e:61:fe:5a:
         fa:92:8f:eb:ec:18:ac:65:68:7c:a4:e0:8b:1b:13:34:15:ca:
         a5:9c:f7:6a:a4:02:5c:98:7c:ca:f4:92:e6:2c:37:43:7c:d0:
         7f:51:24:82:e7:39:16:b0:52:96:96:cb:55:7a:30:8c:bd:3c:
         86:5f:5f:42:dc:c0:37:f1:92:22:42:c5:d5:8b:9e:b5:1c:c0:
         7f:80:1a:24:fa:6d:db:8b:77:ba:05:49:7b:79:61:ef:41:d8:
         82:0b:e3:d6:ab:90:99:72:fd:fd:f4:1d:9d:de:2f:a9:48:c4:
         99:7f:a0:c6:6c:0a:c2:52:f7:53:2c:50:93:da:3c:ff:d1:8d:
         72:10:ce:74:ea:00:a1:a4:09:f6:57:b7:a7:a6:ec:dc:dd:3a:
         21:03:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:51 2025 by rpki-client