Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          1ryiKGC3PcM0VjMOXtA9FSiT4KXIN9Fzai2sZXl8lJI=
Subject key identifier:   DA:03:1F:AC:7A:95:F4:07:84:F0:EE:48:B2:93:8A:46:82:F0:2C:49
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       0198D4A7C4687BAA5380976438BB53BE1D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          1228
Signing time:             Sat 23 Aug 2025 02:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:21 +0000
Files and hashes:         1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=)
                          2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=)
                          3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: p/OF3G8j3AvArfIeVO+Oc50w4zoP7kbE5KbIVgYfPaI=)
                          4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=)
                          5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=)
                          6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=)
                          7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=)
                          8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=)
                          9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=)
                          10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:c4:68:7b:aa:53:80:97:64:38:bb:53:be:1d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Aug 23 02:00:21 2025 GMT
            Not After : Aug 24 02:00:21 2025 GMT
        Subject: CN=da031fac7a95f40784f0ee48b2938a4682f02c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:74:4f:87:cf:66:0a:90:21:cf:38:17:e8:
                    32:87:5b:a4:6c:0b:e4:f7:c2:87:b5:ff:33:34:0d:
                    f3:be:fb:af:46:92:43:7b:17:a7:b3:b9:39:22:15:
                    45:ff:ee:7d:ad:17:58:e3:e0:a2:3e:68:d3:40:69:
                    a0:9b:67:91:8a:4d:ab:d9:13:f3:f5:ba:de:88:d3:
                    a9:a8:ad:35:6f:6c:63:91:f7:14:f4:ad:99:af:4b:
                    76:00:b6:a0:97:73:74:17:d0:a3:ad:64:c8:67:78:
                    1c:82:17:cf:66:12:60:5d:29:0e:01:65:dc:9f:21:
                    7c:02:30:72:61:98:09:e5:eb:d6:a5:77:31:ee:0f:
                    39:7b:fd:e2:dd:70:52:d2:dd:a9:23:52:58:ae:e8:
                    80:bb:36:27:bf:96:49:39:91:d5:82:72:58:63:52:
                    2c:27:b7:fc:39:b3:97:fd:16:4f:ee:dd:06:7a:94:
                    01:79:17:7a:70:fc:f3:94:dc:be:70:19:58:fa:c5:
                    b9:81:67:37:88:76:02:ba:68:c3:2d:58:b6:97:87:
                    42:6d:b7:1b:69:98:b6:f1:5e:c1:be:31:d9:e8:ee:
                    09:58:18:2e:42:b2:e3:1d:2b:94:e5:b0:70:41:97:
                    6f:1a:4a:28:18:8a:1d:8c:a9:bc:b3:8c:bc:ae:94:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:03:1F:AC:7A:95:F4:07:84:F0:EE:48:B2:93:8A:46:82:F0:2C:49
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:92:dc:f7:aa:45:65:c0:f0:5b:9f:6e:88:99:9d:fb:62:7c:
         44:70:82:bd:f8:a2:34:78:9a:2b:35:bc:70:42:cc:19:ae:f2:
         c5:4e:28:2e:70:65:ee:0e:cd:01:f2:b5:8b:70:71:ba:01:09:
         d3:ce:3f:32:63:69:fd:e9:26:eb:d8:b0:31:e9:fc:1e:ce:79:
         66:99:69:23:9d:48:66:68:a9:bd:ed:a2:69:19:0d:71:f9:30:
         ab:4d:a9:6b:2f:14:09:43:6e:2e:26:31:7b:fd:36:69:95:32:
         d3:63:01:8f:a4:59:57:f4:3c:88:1b:3d:b4:83:90:5a:79:3e:
         fa:73:3b:86:74:14:7e:54:96:ef:77:a3:ea:04:60:66:d8:83:
         ca:92:d4:5e:9d:90:cb:58:f8:9a:61:85:34:f8:51:36:12:68:
         9e:04:1a:86:cd:74:45:4f:af:12:d9:55:91:87:32:f7:2c:2d:
         78:b5:2f:b1:db:96:b7:7f:a5:d0:7e:f1:8a:22:73:30:1a:0a:
         61:4c:eb:5e:ce:93:32:b2:cd:c9:d2:2c:09:c7:b6:95:57:05:
         b8:a3:63:c7:a6:31:5a:c6:dc:9f:7c:8c:6e:9c:0e:22:1b:90:
         80:b8:83:60:08:1e:9a:1f:a2:1d:27:c5:95:8c:83:03:c6:81:
         dd:6b:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:36 2025 by rpki-client