Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File:                     qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier:          XFqWSEDcvJ9xXLHxcO5j2X8gtXORL393M4tOxmpOIps=
Subject key identifier:   C0:11:7B:CE:EA:CF:F3:31:AE:0B:7D:43:EC:61:2C:2F:ED:75:BE:54
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer:       /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial:       0197CB70C0C541F99C0BD8867AC2B48F6D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number:          0964
Signing time:             Wed 02 Jul 2025 14:00:53 +0000
Manifest this update:     Wed 02 Jul 2025 14:00:53 +0000
Manifest next update:     Thu 03 Jul 2025 14:00:53 +0000
Files and hashes:         1: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=)
                          2: 9Ahx80pbKuxq2Y2zQQGlzVkFvSE.roa (hash: jZsow3febERZylEEbhS1HJlyFdjV2wAsubJNdWS00Js=)
                          3: SAABZkEQbTfeoiZylh7IAj2UKJY.roa (hash: tT5S9auXfqJCWExDbLcMxXWvB7zI8R71Em3Ix9poLF4=)
                          4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: eVD8iAbuKckh55bmEb2XYWw6Z83GUmrOMmjpDzAzjYU=)
                          5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:70:c0:c5:41:f9:9c:0b:d8:86:7a:c2:b4:8f:6d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
        Validity
            Not Before: Jul  2 14:00:53 2025 GMT
            Not After : Jul  3 14:00:53 2025 GMT
        Subject: CN=c0117bceeacff331ae0b7d43ec612c2fed75be54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:ca:65:df:ce:5a:45:a0:83:eb:3c:72:eb:
                    a2:7a:77:57:f6:d2:5a:35:d9:3d:17:31:b8:2b:62:
                    64:62:26:5d:4d:26:71:b8:64:c4:29:b8:b7:27:cc:
                    ef:14:f6:8b:d9:c3:52:da:e8:6c:18:b6:2e:f2:d4:
                    17:60:e6:54:9f:22:94:ee:f1:21:c2:57:e1:4c:58:
                    3d:76:fe:3f:d2:6d:4f:04:34:ea:8d:e1:a2:20:e2:
                    c6:ec:c5:a4:32:7d:97:f2:03:a7:0c:ff:75:80:0a:
                    3d:04:8a:e7:a6:5e:0e:1e:ea:52:1a:21:96:c5:c7:
                    1d:12:85:91:9f:33:aa:51:f1:51:69:6f:66:1a:3a:
                    ad:91:a8:21:ec:44:d2:e3:72:c4:c3:e4:94:c4:08:
                    fa:ab:f8:f0:4c:21:65:01:09:88:f1:c2:ca:30:d4:
                    9f:f1:73:42:ac:a5:5c:60:77:91:b8:ec:cd:48:27:
                    3a:1b:1f:00:aa:04:a7:54:83:09:e5:70:06:40:3e:
                    9f:45:d4:4c:9d:df:45:98:61:b8:16:8e:17:bd:d7:
                    bc:63:84:6e:af:fc:5e:26:b2:9d:f4:8d:42:91:1c:
                    06:72:e2:75:61:60:71:58:44:88:77:ac:63:22:9d:
                    8b:16:7d:17:81:fe:96:77:33:21:e2:2f:51:e1:d9:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:7B:CE:EA:CF:F3:31:AE:0B:7D:43:EC:61:2C:2F:ED:75:BE:54
            X509v3 Authority Key Identifier:
                keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:15:db:ef:9b:af:dd:fd:2b:a6:82:18:23:ea:78:fd:1c:
         e6:70:ba:eb:ce:fa:23:6d:fd:c9:16:33:19:a0:3d:0d:8e:dc:
         2b:36:65:e3:1a:d8:ab:f4:c4:42:9f:31:cd:a6:6c:a5:14:7d:
         5b:61:59:e5:79:ee:9d:bd:4e:97:ad:fe:9f:fb:46:4b:cb:64:
         8f:89:24:81:9d:f8:e4:bc:8d:09:61:c9:4f:31:41:39:a4:08:
         7e:37:a1:2b:fc:85:1a:8b:e1:54:ea:82:da:e8:86:74:e2:3d:
         27:43:4e:da:a4:ad:66:28:f1:5f:02:1f:b0:b9:c7:7b:db:09:
         46:0f:dc:f2:9b:98:e9:d2:c4:68:41:63:bf:48:08:b9:e0:53:
         88:5a:95:8c:76:f9:d0:cc:76:94:8b:31:cd:29:7f:fe:9b:f4:
         29:a1:5c:e0:fe:08:bf:35:43:0d:1f:2f:4a:c0:69:a4:9b:28:
         29:4c:3d:85:8a:c5:3a:a6:88:dd:78:80:3f:fe:55:49:e6:a4:
         4c:03:5d:38:ff:20:0d:27:2c:1b:40:a1:3d:a4:6d:d5:8c:df:
         ce:e1:61:3b:da:0d:76:37:0e:d0:03:d6:d1:50:f6:e3:b8:13:
         3c:58:ac:03:cd:08:59:11:6f:00:90:89:0c:99:49:f1:ab:03:
         45:c7:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:28:04 2025 by rpki-client