Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          BH3taNojrDv2lnl+ZGbg1XlsNmJsssvBXLPcTRkQnsA=
Subject key identifier:   8F:72:E1:02:23:AF:10:B1:DF:EE:E2:F3:A6:0A:1C:AD:EA:A5:D5:B9
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       0198D5F18758E4FABB5D1C3294D8F2E4206C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          1659
Signing time:             Sat 23 Aug 2025 08:00:32 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:32 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:32 +0000
Files and hashes:         1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
                          2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
                          3: RXbwxnxv5i77bPKXOPNg3gLHQ2Q.roa (hash: Hb7ewCgNUReilTcVx5Y6r0li4yOFHBvAH9Jj35wZEN0=)
                          4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
                          5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
                          6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: KDN0vkGCHl3J9m0Jdso1q0P5TZOWw+zNJD8+dMQAswI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:87:58:e4:fa:bb:5d:1c:32:94:d8:f2:e4:20:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Aug 23 08:00:32 2025 GMT
            Not After : Aug 24 08:00:32 2025 GMT
        Subject: CN=8f72e10223af10b1dfeee2f3a60a1cadeaa5d5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:cc:b9:46:47:0a:61:cd:b4:fb:ec:3e:cd:
                    88:fd:75:a4:20:3f:5c:71:62:ad:96:00:1e:f5:30:
                    b8:d4:40:82:a3:f9:cd:f4:fc:05:4d:ad:1a:26:f5:
                    d6:40:62:c1:13:2b:1a:b4:1b:bd:48:1a:0f:d1:57:
                    9d:f9:ed:b3:fa:c9:ff:68:8d:42:0a:0c:f7:7d:97:
                    9a:99:79:75:ed:e0:a9:1e:07:0b:56:94:a1:45:12:
                    64:5b:79:a2:46:82:fa:c2:16:c9:1e:f0:22:79:f2:
                    14:9c:2d:e9:b8:5c:a2:a9:9c:c4:01:9d:5d:6d:1f:
                    72:db:13:09:1a:8e:29:2b:6d:a8:6d:ac:00:b8:d6:
                    50:1e:1e:f4:37:99:8e:70:97:cf:cf:d8:6f:af:e1:
                    0e:01:c6:b7:04:a7:8f:33:82:5e:8e:90:27:bd:64:
                    44:4e:94:13:fa:f6:c1:f6:3e:9e:ad:43:8b:d5:35:
                    0e:d6:97:28:43:c3:f9:2d:0e:14:77:e4:44:47:29:
                    18:19:61:d9:be:be:e1:20:5e:a1:0e:39:3f:5a:57:
                    74:c0:4d:77:94:17:4b:0b:e3:2d:f1:e5:40:99:67:
                    b9:a8:04:85:fd:00:45:c7:72:a5:60:67:fe:5e:8b:
                    4a:a3:04:0f:c0:51:2b:70:cf:a9:8c:ce:12:80:7d:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:72:E1:02:23:AF:10:B1:DF:EE:E2:F3:A6:0A:1C:AD:EA:A5:D5:B9
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:a4:3f:7a:da:b7:4c:98:78:75:87:1e:c9:76:c2:95:b5:
         63:a2:83:31:6a:19:98:c7:d8:a1:4d:cb:d4:d1:ac:c6:31:ae:
         cd:96:8d:9f:e7:63:5b:fb:ad:3e:c0:d0:bb:d6:38:ad:e8:e0:
         ce:5d:ef:83:22:5c:8e:a2:a2:81:1a:2d:01:88:2c:36:da:f1:
         a2:d3:fe:5a:91:1a:53:93:47:74:bf:d6:87:58:50:93:cb:ea:
         ad:7e:e0:d7:65:a6:2f:d5:49:10:a0:09:e1:c8:c2:e4:8f:c0:
         69:89:c1:97:17:fb:27:ca:f5:34:1b:0f:23:ac:a9:f4:63:d8:
         72:86:d9:18:86:c9:47:c6:9b:11:e7:db:98:e9:1b:64:53:13:
         f4:d9:1a:b5:b0:27:3e:a4:1c:72:32:32:7c:9c:05:c5:3a:e5:
         48:67:5c:a9:23:b9:64:29:30:13:ba:7d:98:20:ec:77:21:26:
         65:95:bc:1a:f5:9a:c9:8f:ad:b8:e6:fa:85:08:5f:42:29:a7:
         fc:ff:6e:ca:c3:34:23:68:3e:81:d5:45:28:88:a1:fa:d5:8d:
         10:e1:63:b3:62:de:02:f8:75:dc:a6:c3:e5:4f:d1:9a:8a:b0:
         03:0e:f3:d4:1c:fe:16:18:a4:e5:62:cc:bb:2a:cf:7b:60:10:
         a7:40:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:38 2025 by rpki-client