Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File:                     QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier:          QhD0z+VB50Sx23W8truv7ag4qQsjgSKIkBC3Em/XOBM=
Subject key identifier:   25:96:35:01:51:74:67:D7:59:58:CF:79:CB:D9:9B:46:0E:3C:6C:79
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer:       /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial:       0198D5163414DDE02831C6A0F9655F816627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 04:00:58 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:58 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:58 +0000
Files and hashes:         1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=)
                          2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: ViU3pBkXwuVqWYSM3KdbszYi5hyoAwXMeslTKATVu/w=)
                          3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=)
                          4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:34:14:dd:e0:28:31:c6:a0:f9:65:5f:81:66:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
        Validity
            Not Before: Aug 23 04:00:58 2025 GMT
            Not After : Aug 24 04:00:58 2025 GMT
        Subject: CN=25963501517467d75958cf79cbd99b460e3c6c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a6:c9:71:0d:43:62:72:5d:a1:a3:1e:c0:c7:
                    ae:b2:2b:4e:d9:1e:22:82:b4:ef:28:57:c1:91:f2:
                    1e:df:7e:48:a1:97:f9:03:de:c8:07:0f:7f:73:67:
                    59:ce:1a:e3:84:3e:4f:11:bb:86:5f:f5:d5:51:d5:
                    aa:f9:bb:cd:fc:14:f1:bb:91:f5:c0:76:bc:8a:77:
                    21:42:b8:f7:f0:a6:12:7d:92:36:68:bc:61:45:8c:
                    6b:79:f2:d0:58:e6:b2:cf:e1:8a:23:7e:b5:6f:ed:
                    1f:ad:90:3c:e5:d5:92:b7:df:54:40:06:45:e3:1c:
                    21:f5:d2:47:5b:02:c2:93:ee:b0:88:52:bf:97:83:
                    71:b8:36:d7:5b:95:63:d3:ac:ae:9f:88:d6:0f:47:
                    47:bc:f5:04:1d:0c:1b:1c:d3:05:b6:59:1e:92:40:
                    d7:80:fa:4a:c3:64:6b:c0:45:1d:74:b7:0b:23:18:
                    24:93:84:25:d7:cb:22:06:bc:38:1e:34:70:ad:7f:
                    e6:df:b9:76:56:c3:4b:a6:f4:ad:e7:0e:0e:a9:40:
                    2b:b5:da:af:74:0e:67:be:dd:bc:67:27:84:66:b5:
                    48:f7:20:3f:a5:4c:38:6d:ac:42:62:c9:9f:dc:f6:
                    0a:69:e5:25:2e:e2:82:c9:c7:77:da:af:ba:c3:7e:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:96:35:01:51:74:67:D7:59:58:CF:79:CB:D9:9B:46:0E:3C:6C:79
            X509v3 Authority Key Identifier:
                keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fa:5c:62:eb:72:74:d4:86:cf:c8:6a:b0:7b:83:f1:2d:17:
         74:3c:f3:ca:56:c2:3e:98:2a:9a:d5:3d:d2:34:e8:88:54:9e:
         47:11:e6:5e:23:f3:04:0b:49:c3:75:69:f1:6b:47:b4:04:f3:
         9a:7d:49:84:90:b9:0b:39:23:b6:b5:a5:b5:00:35:62:a5:98:
         ce:87:96:db:15:29:7a:bb:a3:8a:fe:6b:e5:db:71:9f:b9:6f:
         01:93:62:a8:e5:4f:fb:f6:c6:b1:8f:68:e4:d8:38:b7:5e:1c:
         42:bd:d8:4b:7b:a0:6e:ce:f2:31:c0:0e:44:6b:ee:92:f9:ed:
         e3:68:a5:f8:e6:30:19:26:d2:cb:fb:52:3a:b6:0b:9d:00:06:
         09:80:07:6a:cd:be:a7:83:05:86:93:04:b1:b2:b4:e8:d3:02:
         88:87:d5:bd:31:75:74:a3:65:64:bc:17:73:7c:9f:2c:cf:3b:
         06:f6:9d:a3:b5:9a:81:86:db:76:34:ea:ea:b4:7e:13:42:f6:
         67:6f:10:38:8b:2b:bf:72:e8:05:c7:51:5e:c2:25:09:58:99:
         96:c4:62:44:ef:e0:d0:07:b1:5e:0b:a8:ca:52:99:0e:22:8c:
         4b:b1:a3:af:a1:8d:8b:ac:0d:ea:c8:4f:cd:6e:3d:72:0e:bf:
         6c:2f:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:34 2025 by rpki-client