Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File:                     qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier:          QKNYzvsATVzxRFfyT1YogOkj53EaxgYQdOZ18ZZTH7I=
Subject key identifier:   1E:1C:E3:B9:23:B6:26:86:0B:FF:59:C4:3C:82:8F:E3:6E:98:65:84
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer:       /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial:       0198D5BC0470ED98E0E8DCC7D7F7EAB809F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:02:05 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:05 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:05 +0000
Files and hashes:         1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=)
                          2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: S87z4nKCi9h2XMwZ5IB4q8eSv+YG4yJ8tJNpgYB2Ujk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:04:70:ed:98:e0:e8:dc:c7:d7:f7:ea:b8:09:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
        Validity
            Not Before: Aug 23 07:02:05 2025 GMT
            Not After : Aug 24 07:02:05 2025 GMT
        Subject: CN=1e1ce3b923b626860bff59c43c828fe36e986584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:a2:fd:69:73:65:de:40:c9:e5:4f:83:9d:
                    d4:24:05:73:e6:a8:a5:a8:c5:d1:5a:a4:fc:d8:05:
                    92:82:9f:74:4e:dd:53:52:35:a4:10:ae:e9:02:8c:
                    53:25:e2:e2:4f:d8:c9:d0:7f:7d:5a:58:d6:e7:6f:
                    8a:7b:64:3c:b7:7d:8c:ad:52:09:85:7f:40:9f:76:
                    0c:f2:23:73:89:5f:c7:21:b7:0c:ee:b0:f4:cd:c3:
                    9b:b1:24:6c:ad:45:2b:7b:cb:0d:59:45:9f:f4:94:
                    a8:09:10:7d:90:bc:6b:c5:58:8c:0f:f6:c4:d4:2a:
                    16:91:5c:82:ab:f5:e7:39:b0:f0:81:bf:26:5f:aa:
                    07:22:fc:b7:9a:ab:53:de:73:8c:ef:a2:41:43:73:
                    1b:68:e7:29:4d:55:4e:90:41:83:b1:2c:33:61:ac:
                    f1:aa:7c:86:eb:8a:f0:b6:30:49:69:1a:f4:56:4d:
                    ab:93:92:51:6e:58:a4:d4:b2:b4:88:61:f2:6d:3d:
                    02:7c:9b:96:55:31:22:ae:5f:11:8f:b7:c6:48:8a:
                    ab:33:c7:67:6a:f0:0e:f3:24:1f:4c:20:90:03:9f:
                    d2:47:35:d3:83:b1:4a:61:1a:ff:1a:65:99:19:c0:
                    b5:2f:ec:7c:95:d8:cc:12:48:57:7e:b7:94:cf:3a:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1C:E3:B9:23:B6:26:86:0B:FF:59:C4:3C:82:8F:E3:6E:98:65:84
            X509v3 Authority Key Identifier:
                keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:63:9b:e8:c3:6a:b3:d3:1b:c0:65:5b:b0:31:dc:79:d2:5a:
         13:2a:fa:93:bb:29:b0:5d:9f:d2:9b:ef:f7:61:b0:15:90:5f:
         03:d8:ef:0f:b2:d8:23:5e:fe:c1:46:99:c5:06:5c:60:a4:01:
         97:4c:2c:51:19:2d:ff:58:38:aa:7a:64:a2:ec:19:94:08:d0:
         7a:61:6d:a5:12:99:f1:27:9e:da:df:99:af:5e:ac:32:61:87:
         91:ad:a8:a8:61:77:d8:34:3d:a2:0c:84:0f:c6:13:18:ba:13:
         dd:6a:bc:47:48:03:e0:41:68:66:dc:5c:3a:af:26:c5:b7:fc:
         23:96:39:ee:a3:3e:d8:a2:e3:62:34:04:9d:50:dc:2f:54:45:
         1e:f6:0f:18:32:65:10:ff:6f:bd:d5:12:db:d0:ca:6c:a3:62:
         8d:f7:e5:6a:51:1f:00:23:80:9e:b1:37:38:ac:95:06:be:6f:
         6d:76:7d:34:13:c1:58:94:75:a8:ab:7c:5b:94:6c:eb:c7:f4:
         98:3c:bc:d1:91:8d:e7:0c:8e:23:7f:ae:28:0c:b7:98:ae:91:
         a3:58:9c:28:76:0d:0a:75:a0:41:72:ed:d4:c3:9f:c8:71:83:
         46:c9:12:00:d5:f2:c9:98:46:e8:90:d5:db:5d:42:be:dc:9f:
         ff:72:1c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:49 2025 by rpki-client