Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          Tkk4oyRkIA/zWWkCY0ClYD2SWroR4TZ4007j8cglINk=
Subject key identifier:   C9:A2:8F:0A:05:70:AD:A5:DC:FF:19:4F:E6:37:10:96:B9:5F:9A:B7
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       019845BF3FEC76446CCACBDD70D123ED1FD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          0A91
Signing time:             Sat 26 Jul 2025 08:00:18 +0000
Manifest this update:     Sat 26 Jul 2025 08:00:18 +0000
Manifest next update:     Sun 27 Jul 2025 08:00:18 +0000
Files and hashes:         1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: +j8oXoCIfkGZdqQtZ1JVUw2+r0gjIX8960Z0j187Au8=)
                          2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:bf:3f:ec:76:44:6c:ca:cb:dd:70:d1:23:ed:1f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: Jul 26 08:00:18 2025 GMT
            Not After : Jul 27 08:00:18 2025 GMT
        Subject: CN=c9a28f0a0570ada5dcff194fe6371096b95f9ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:5f:7c:c1:78:d3:e7:39:1c:00:02:c6:ee:
                    f4:2c:00:2b:4d:b0:d1:aa:f7:f7:72:42:e6:13:dd:
                    c8:d1:de:e6:26:4e:89:19:46:c2:0c:c9:9d:73:42:
                    39:1e:e1:b5:85:13:29:af:41:c8:e3:93:68:ee:b5:
                    0a:33:d4:7a:f9:49:3e:14:95:b9:b5:12:d8:7f:4b:
                    8e:8c:72:85:11:21:0e:a4:1f:c4:70:7c:fd:f1:1b:
                    52:8a:d3:0c:a5:9c:ec:46:bd:da:fa:35:a8:e7:6b:
                    43:34:ab:d9:77:d1:c5:ab:3f:5d:dd:3b:b2:fe:e1:
                    78:df:f8:59:7b:e8:67:e9:57:44:3a:6f:65:9a:e6:
                    f6:52:93:86:f7:7a:5a:2c:de:e7:67:95:c5:63:25:
                    26:08:89:31:f8:9e:a4:c7:66:32:42:bf:aa:a8:de:
                    d8:85:cf:05:21:8d:3b:24:76:e0:4e:15:3b:ca:be:
                    91:87:da:70:44:fd:6c:61:a8:7c:2e:cf:5c:c2:d1:
                    26:7b:b1:17:20:f4:39:ef:ab:50:dd:bb:41:1f:74:
                    6f:86:58:d4:17:d4:ce:3a:9b:8a:fe:ff:7f:70:99:
                    b4:58:96:a8:d5:79:2d:2b:ab:7a:e3:4a:2b:94:c7:
                    a8:eb:39:1f:52:dd:2e:a7:8c:d2:ad:f7:e1:b4:10:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A2:8F:0A:05:70:AD:A5:DC:FF:19:4F:E6:37:10:96:B9:5F:9A:B7
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:e8:bc:65:3e:84:18:b7:14:1f:7f:d7:55:fb:5c:69:02:
         0a:db:8b:58:3a:88:ee:3b:c4:4c:ab:a4:fe:ca:ab:d2:d6:39:
         4b:b4:ec:9c:14:1a:91:9c:18:45:ec:41:f7:33:92:2f:7d:be:
         06:be:7f:be:05:a1:80:5a:15:35:6b:a9:a4:8d:0e:19:d3:65:
         1f:cb:91:ef:d7:1e:c6:4d:e8:88:9a:f7:02:6f:e9:0a:70:6a:
         75:ed:e1:21:d6:70:74:0f:b5:fc:08:dd:08:38:db:d8:d1:e8:
         68:8e:d9:c2:3c:6e:43:86:6e:7e:be:75:07:e3:fa:29:32:a5:
         5d:7a:39:b7:e8:29:72:d6:d7:3d:4e:65:ed:fa:95:0c:5c:63:
         92:0f:7d:dc:de:cb:74:a3:38:3b:fc:71:2b:23:37:4e:d1:5a:
         71:35:a9:86:1a:7b:e3:dc:11:3f:d1:2e:95:19:da:f6:50:61:
         af:56:7c:8b:37:c4:1b:6b:29:fd:3f:97:93:6a:bd:04:af:bb:
         c0:ac:ce:c2:69:ba:b1:1b:64:ac:5f:d3:93:f2:c5:c2:f5:61:
         a4:14:81:d4:10:63:c8:16:b4:c1:45:69:b1:07:b9:8f:87:ba:
         67:3f:50:df:f1:87:67:b1:89:11:94:ef:2b:bf:6d:22:39:b9:
         aa:e4:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:53:23 2025 by rpki-client