Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
File:                     qV9jiGJSm22v1EDhcqIvASCwmuo.mft (raw, json)
Hash identifier:          jahgoB8wpWKfgIs4DrGM4G4ghCT11YWYULFKkufD3Qg=
Subject key identifier:   AA:BF:E0:DF:E5:A7:8A:8F:DE:AE:0C:85:21:30:5B:19:7E:F8:41:4F
Authority key identifier: A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
Certificate issuer:       /CN=a95f638862529b6dafd440e172a22f0120b09aea
Certificate serial:       0198D5838129C59394C364DA553090BE95A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 06:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:21 +0000
Files and hashes:         1: 5LFA7pu9BAuW9Zs8wziojRaCNSk.roa (hash: UzC92ONklOjy0NiAl9iqdlk8UfZjfzE3sfwqDQwnG80=)
                          2: qV9jiGJSm22v1EDhcqIvASCwmuo.crl (hash: YafBuK8exT/QVFbaywTZoDeX/XEZpwWMOjdfnDohVIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:81:29:c5:93:94:c3:64:da:55:30:90:be:95:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95f638862529b6dafd440e172a22f0120b09aea
        Validity
            Not Before: Aug 23 06:00:21 2025 GMT
            Not After : Aug 24 06:00:21 2025 GMT
        Subject: CN=aabfe0dfe5a78a8fdeae0c8521305b197ef8414f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:c3:2d:0a:d7:32:56:49:c3:e7:a2:5a:6a:
                    81:6f:4a:12:e4:cc:86:de:26:96:db:88:a9:81:53:
                    61:2d:bc:cf:07:e7:d1:d5:e6:37:51:93:92:47:02:
                    96:8c:3a:cc:c8:6b:9a:2a:13:e7:6b:b5:23:ac:45:
                    97:e0:c2:59:81:17:f8:07:0a:95:a4:37:74:67:01:
                    99:1c:86:e0:01:b8:7a:81:4d:39:c8:a8:15:22:a6:
                    5c:12:2e:f5:64:b7:ee:09:3e:ed:5c:f8:e8:6b:31:
                    56:c9:c0:c4:0a:c5:dc:06:61:5b:7a:dd:08:52:1d:
                    84:19:7e:29:66:b8:d2:fa:fc:93:af:17:d3:0a:ae:
                    62:7e:f9:94:72:a8:10:44:21:99:02:57:25:54:cf:
                    5c:c0:18:a4:d7:88:95:96:98:d2:63:81:c3:2c:73:
                    aa:ab:af:11:42:1c:c9:5e:f5:87:4e:cf:14:e9:83:
                    37:c2:cd:31:50:1e:22:87:f2:2c:50:40:b3:f3:71:
                    48:91:a2:c5:0d:63:b7:fc:eb:92:8e:45:72:20:00:
                    6f:89:94:14:87:89:72:f1:c0:c3:5c:4e:ac:32:98:
                    da:0e:8e:f3:2b:03:80:8c:a0:5f:1f:eb:0a:6b:0c:
                    6a:e6:61:13:88:fd:34:47:34:0f:eb:b1:4a:75:08:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BF:E0:DF:E5:A7:8A:8F:DE:AE:0C:85:21:30:5B:19:7E:F8:41:4F
            X509v3 Authority Key Identifier:
                keyid:A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:90:dc:d5:70:40:f5:90:62:e3:e6:82:1b:49:d7:70:52:d4:
         ae:89:24:ba:73:72:83:84:e7:d4:da:e6:17:47:b8:3a:42:39:
         0b:e1:2d:7a:a3:d0:b8:1c:32:07:5f:a2:2c:b0:f1:9e:48:ed:
         fb:f7:87:bd:b2:5f:0e:b6:ad:95:87:f4:23:fc:b6:c9:42:13:
         da:9a:4d:f4:b8:a0:1a:29:c9:f7:80:fa:90:91:8b:ce:d5:f5:
         f4:de:59:80:9d:34:ab:8e:3e:0b:08:86:41:11:1a:aa:ec:a5:
         84:d3:f1:5e:5e:10:5e:2b:c1:f6:25:4c:e4:c4:8a:47:de:ed:
         ea:07:52:a2:3e:83:8a:1d:38:cc:c2:9e:22:83:30:a7:a2:1b:
         bb:e9:3d:8a:99:90:61:28:9b:3c:6f:2b:5e:26:c3:84:a9:4d:
         eb:bb:97:93:66:59:dc:fe:10:07:b3:39:c0:c5:6c:00:47:04:
         03:0d:2d:31:27:80:9b:b5:cd:72:77:9b:ec:bc:a4:45:d5:42:
         86:d5:43:9d:31:b2:fe:6e:eb:1b:87:2a:a9:29:ee:ef:2b:3b:
         7c:93:ed:00:ba:89:58:60:ea:69:03:28:68:d6:60:1b:2a:1e:
         8e:96:90:00:73:d5:73:a7:b4:b6:51:1f:4c:b3:8c:0a:81:43:
         64:24:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:45 2025 by rpki-client