Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
File:                     Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft (raw, json)
Hash identifier:          vxWfUBWKpCFyoJFNXk0SHHIGuoyeWQmPgbjDmKUe1fc=
Subject key identifier:   7F:55:71:1D:35:97:EF:66:AC:ED:6C:B6:9F:B6:C5:C8:26:A1:F9:EA
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Certificate issuer:       /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial:       0198D47373D9A734D8D4085322FA5B24C053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
Manifest number:          1066
Signing time:             Sat 23 Aug 2025 01:03:12 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:12 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:12 +0000
Files and hashes:         1: Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl (hash: 80KaPuZi4meFAksIluKnncivmWK5qV+qQMd3XtWAgzs=)
                          2: pGi5mprHxSOkx1tGIc-vLUmzaew.roa (hash: dSlWsgh48wgZDLLaxYVN9gYqMrT57evwFejA3CWUycE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:73:d9:a7:34:d8:d4:08:53:22:fa:5b:24:c0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
        Validity
            Not Before: Aug 23 01:03:12 2025 GMT
            Not After : Aug 24 01:03:12 2025 GMT
        Subject: CN=7f55711d3597ef66aced6cb69fb6c5c826a1f9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:6d:0f:c4:89:f5:4c:ec:20:db:53:9c:64:
                    9f:b9:9c:f8:b1:23:69:82:29:3b:8c:7c:24:ff:25:
                    63:bb:59:55:61:da:26:15:12:f2:40:1c:5e:6d:e0:
                    91:5f:92:a0:89:01:38:6f:39:cd:70:28:72:0a:8f:
                    a5:fb:40:b7:e3:18:79:c1:34:11:be:6a:9d:25:ee:
                    4f:25:70:c2:99:4b:cd:57:ba:95:6f:9f:84:9a:a1:
                    12:00:0d:45:b0:86:0e:23:63:16:75:19:bf:b3:00:
                    0b:39:c2:27:49:64:97:42:b5:a5:5f:4c:4c:d2:af:
                    16:3b:90:0e:44:75:a5:f2:7b:88:b8:6b:0e:3a:76:
                    70:c3:34:70:9d:34:98:26:22:d7:dd:cd:45:c1:81:
                    36:3b:f5:dd:7b:3b:14:c8:b3:7c:19:98:9e:d6:73:
                    76:eb:14:0b:7f:b3:08:a3:41:bd:8a:69:9f:8e:20:
                    9a:cc:de:d1:3f:74:82:6c:8a:7b:70:a1:cc:08:07:
                    6a:16:52:38:76:ed:21:e2:a9:60:6a:44:e5:d7:16:
                    b9:4e:46:b3:89:41:ed:34:18:04:57:7e:95:a7:b7:
                    bb:f4:f6:96:40:51:5a:12:30:d7:f9:f6:0e:b3:dc:
                    93:87:34:0f:0f:05:51:32:5b:c7:e4:ca:bc:0a:4d:
                    8d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:71:1D:35:97:EF:66:AC:ED:6C:B6:9F:B6:C5:C8:26:A1:F9:EA
            X509v3 Authority Key Identifier:
                keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:ab:dd:e8:e1:55:4d:b9:51:e7:82:46:73:ec:eb:10:60:
         f0:05:1c:5e:cf:67:0f:e7:0a:97:8f:8d:e8:49:62:05:13:9c:
         5d:8b:99:b6:b5:ef:59:8b:15:c7:5f:bb:eb:89:2d:3e:50:a0:
         8f:16:b7:d2:b4:02:fe:0b:81:f3:5a:69:a2:f2:26:b8:d8:bc:
         36:c6:c3:b1:21:ab:e5:67:34:2a:3b:74:fa:d1:ba:c3:52:9b:
         6f:7d:ce:09:cb:6b:fe:54:3b:e1:05:54:f2:df:cf:07:ae:27:
         7e:9f:88:17:68:0d:7a:b0:c1:1f:ce:48:a3:09:d1:dd:fa:72:
         d8:2e:d7:50:9c:10:6c:11:ae:7a:ba:a2:ad:05:43:2f:d3:48:
         5a:30:41:ed:1c:1c:e6:15:05:89:15:d6:c1:78:76:a3:91:e8:
         6d:bf:8d:a4:96:35:6d:05:ec:f3:3d:9e:7e:71:2d:08:27:ad:
         8e:77:66:f5:a4:30:77:65:83:5b:3c:c7:ad:23:7f:cb:46:f0:
         f9:06:8a:86:41:f9:8f:dd:55:a3:45:a4:6c:42:2e:4e:7a:28:
         4a:4e:8d:cc:6c:9e:92:ea:43:e3:15:04:d4:c4:04:03:b8:54:
         c9:1a:b7:ce:42:aa:27:ad:88:90:c2:6a:d2:92:4d:01:ab:ec:
         63:4d:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:42 2025 by rpki-client