Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File:                     mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier:          jMybU2QE0jilS/RZk254Jv8Ia69EEuenB1Axix8ssEQ=
Subject key identifier:   B0:26:24:F2:E0:91:56:72:01:E7:9B:15:3B:4E:B8:12:15:C8:50:3F
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer:       /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial:       0198D6986974FE89426E7DCE302DCBD8EF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number:          1043
Signing time:             Sat 23 Aug 2025 11:02:49 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:49 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:49 +0000
Files and hashes:         1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: X4shngd4V/QO7TvFiNgDG8ypzAN0vykeb203aOg1Xeo=)
                          2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:69:74:fe:89:42:6e:7d:ce:30:2d:cb:d8:ef:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
        Validity
            Not Before: Aug 23 11:02:49 2025 GMT
            Not After : Aug 24 11:02:49 2025 GMT
        Subject: CN=b02624f2e091567201e79b153b4eb81215c8503f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:cb:84:06:cf:9f:ad:da:9d:4c:4b:67:02:
                    cb:52:6f:8e:66:ac:1e:df:9b:53:06:9d:53:a9:7c:
                    84:a6:2d:49:f0:de:20:85:98:42:21:1d:8b:9d:c6:
                    96:ac:93:84:b8:66:ea:a5:94:6d:ae:68:62:14:95:
                    87:21:ee:5d:fe:27:54:3c:29:6e:4b:6b:6d:fe:7d:
                    ea:64:58:f1:62:11:2c:fa:1a:f3:34:bd:2b:dd:82:
                    cc:7a:f4:f6:86:2d:6a:3d:5f:b3:81:eb:5d:89:84:
                    00:dc:90:5d:b8:87:2e:b4:6c:18:bf:3f:38:10:8e:
                    cc:30:08:fa:f5:2b:30:3c:8b:97:b0:8a:e1:f6:95:
                    a6:c1:42:82:4f:1e:bb:d0:fa:87:c0:ed:55:10:01:
                    16:67:02:88:e7:59:2d:74:46:43:08:dc:96:19:61:
                    10:dd:00:97:af:64:4d:91:95:78:00:74:85:b3:53:
                    43:15:3b:e4:ad:4b:4e:94:55:e8:c4:30:be:c6:99:
                    14:5e:70:69:b2:ed:d2:38:ab:41:50:b8:20:3a:9e:
                    77:98:92:38:98:07:3c:48:cc:a2:79:01:76:f5:c8:
                    d2:b7:a4:24:76:c5:bf:47:d8:cc:26:91:2d:09:5f:
                    a7:b3:67:60:ed:ea:93:c5:c8:14:14:51:da:a6:0b:
                    37:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:26:24:F2:E0:91:56:72:01:E7:9B:15:3B:4E:B8:12:15:C8:50:3F
            X509v3 Authority Key Identifier:
                keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:46:a5:48:48:98:64:4a:85:8d:9a:8f:69:a3:95:58:43:e6:
         e5:45:dd:25:41:23:16:60:ea:bc:ca:c3:24:cc:10:17:4b:f3:
         ec:9d:8e:11:c1:c9:26:1d:b1:7d:f1:e6:bf:ec:71:ca:80:ec:
         e7:bf:ed:25:ce:0d:aa:8d:df:e9:89:fe:0b:07:62:22:3b:9b:
         2d:8a:a0:fc:db:d4:68:61:95:22:f2:24:5d:30:0e:2a:2f:4d:
         26:6b:95:97:9c:a6:a9:6e:be:90:7e:73:aa:5b:04:e3:44:2b:
         9b:9a:29:ba:66:41:f1:49:ee:d8:12:09:b5:31:2e:78:ef:07:
         6b:1d:e1:ff:17:79:9a:7e:fc:bc:c1:74:99:65:78:eb:8f:6f:
         70:0b:df:a1:68:fa:ff:91:20:c6:64:0d:36:45:3d:7a:fc:9b:
         79:61:a0:3f:d7:da:1c:aa:9b:50:49:c9:ed:0e:ac:a6:ad:f8:
         32:f4:2b:c0:9d:e7:26:66:9d:28:53:90:fe:e1:6c:3d:62:19:
         e0:44:76:b4:67:6b:42:ac:8d:2c:cd:f0:fa:49:bc:83:72:2e:
         89:8c:ee:5d:c3:42:75:99:d9:0c:c0:c6:6e:9a:60:b0:56:2d:
         9a:a7:05:a9:af:8f:a6:31:b1:28:6a:72:ab:da:6d:79:85:dd:
         69:da:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:02:00 2025 by rpki-client