Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File:                     9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier:          4jQzfrhEQbux/QWJzUw6tRpmBqRGcq/iuqt/tx09PYw=
Subject key identifier:   B7:F2:3E:AF:52:3E:63:09:3C:53:A0:48:52:7C:29:4A:E3:F6:60:68
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       019842BE271402D647F340455357B78738EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number:          0586
Signing time:             Fri 25 Jul 2025 18:00:14 +0000
Manifest this update:     Fri 25 Jul 2025 18:00:14 +0000
Manifest next update:     Sat 26 Jul 2025 18:00:14 +0000
Files and hashes:         1: 1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa (hash: MQY60dXinW2RjKa/YH49asbDcYbOnLmhhQbRiFehf0Q=)
                          2: 9EsFTJPfhrHzuggwv3Tacy86NPc.roa (hash: g+7gpPPFmcqEG/1q7hm3OgzhQxlfCVb68SP9jb1P1Q4=)
                          3: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: vP051WxQfCWVH0hcBYIpQH1obLtJMS5o85w9pGyM+fU=)
                          4: Pam-mYZhUPxumLyTa-d41AOp2eI.roa (hash: aCi8Qzgn/82AxyGXcRCZJe9cgue7YAZPk3yXhgftdGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:be:27:14:02:d6:47:f3:40:45:53:57:b7:87:38:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Jul 25 18:00:14 2025 GMT
            Not After : Jul 26 18:00:14 2025 GMT
        Subject: CN=b7f23eaf523e63093c53a048527c294ae3f66068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:a6:b8:32:6a:e4:83:90:9c:b3:6c:37:24:
                    d1:50:69:c1:af:d1:2b:da:4c:11:b8:37:57:91:eb:
                    5a:da:c2:92:5e:64:86:69:ca:13:0a:e8:74:23:d3:
                    1d:30:05:07:2e:10:df:78:20:45:56:30:46:db:f3:
                    8f:37:2d:88:06:cd:c0:c0:5d:1c:49:3b:91:9f:d5:
                    ed:aa:57:99:6d:d8:b9:94:c4:86:a0:bb:4b:6b:00:
                    8f:79:44:2e:8d:4e:4e:73:a1:39:ec:2e:3d:02:07:
                    69:64:97:e8:82:0d:8d:74:eb:8e:67:f1:64:05:36:
                    d7:c7:4c:a7:3b:4c:25:ea:37:05:40:c4:e6:80:ba:
                    5d:f0:32:d4:06:14:1f:26:ef:21:24:1b:51:37:9d:
                    dc:8c:53:dc:01:f6:7c:1e:bd:e1:d1:a4:f4:77:32:
                    d8:51:c2:0f:8e:67:68:80:c1:9a:cd:53:33:95:52:
                    48:70:89:47:b1:93:8e:d5:3c:f6:f6:07:0b:01:b3:
                    cd:88:79:74:ce:00:67:2a:83:c8:37:e0:50:0e:74:
                    f6:2b:e4:45:e0:39:ee:47:a5:40:d3:5c:03:a8:c7:
                    d3:9b:21:70:7a:03:f3:bf:88:51:c7:4c:c6:07:3f:
                    fa:ff:d6:26:5e:a7:19:f6:d2:eb:55:00:fe:85:4e:
                    21:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F2:3E:AF:52:3E:63:09:3C:53:A0:48:52:7C:29:4A:E3:F6:60:68
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:58:54:72:2c:36:36:43:99:97:5e:83:e0:19:9a:76:3a:ac:
         95:a9:0c:9c:43:64:11:48:4d:32:da:8d:bf:78:e0:66:f3:42:
         40:da:46:e4:34:17:15:45:c0:fc:9e:d5:3e:f0:87:3d:37:e9:
         6a:07:68:e2:76:f8:65:0e:ba:53:a2:51:ed:43:6c:56:90:37:
         23:7d:48:e1:49:ac:92:3f:13:9f:0e:9e:4c:b8:71:c6:09:68:
         57:d9:52:d6:66:aa:eb:25:0f:b3:a1:c7:09:1c:fa:b1:d7:59:
         a4:f3:34:53:44:1d:38:f8:39:29:b8:d1:39:a0:3a:de:0a:ed:
         55:de:06:cb:bc:c4:f4:09:12:21:e8:f6:7c:92:ab:8d:97:e5:
         4a:05:0f:7f:8b:08:20:e5:3d:61:5f:d1:61:13:53:ec:10:be:
         51:33:ef:c2:1b:25:d1:b4:cb:51:0f:c1:b4:a7:1a:6e:73:79:
         02:83:3a:87:fd:cb:34:84:94:8b:e9:8b:e7:09:ea:32:8e:63:
         4f:db:90:a1:6a:04:8e:4e:d9:77:22:3e:56:65:a2:7a:e0:4a:
         17:48:22:98:b5:48:29:bb:3c:79:fb:64:06:4c:fd:f7:1e:ce:
         8f:f9:ba:b2:60:38:07:ff:c4:68:f9:44:2f:9b:ca:e2:29:2b:
         ee:46:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:40:44 2025 by rpki-client