Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File:                     QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier:          BZfcbUqSDPCysaCkiLACIIZe7KrdY2vViYnbhOeN5IM=
Subject key identifier:   D3:68:A5:90:8E:3B:FD:9B:E7:15:3D:BD:DD:C9:E6:FA:D2:19:65:82
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer:       /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial:       019846D2577DB6FF73711A801E7BCE4D51CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number:          1609
Signing time:             Sat 26 Jul 2025 13:00:46 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:46 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:46 +0000
Files and hashes:         1: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=)
                          2: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: SaUNGE/vC6MDYzOjHeyTh/I5dDBtG2ewQTGU0GAmIwg=)
                          3: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=)
                          4: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=)
                          5: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=)
                          6: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=)
                          7: tRjkLyLC--HaV6NcWuFGLxVHLUQ.roa (hash: W6/eiMbwnnO5tx0lNIccNziZp4esvsx84586cppqO84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:57:7d:b6:ff:73:71:1a:80:1e:7b:ce:4d:51:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
        Validity
            Not Before: Jul 26 13:00:46 2025 GMT
            Not After : Jul 27 13:00:46 2025 GMT
        Subject: CN=d368a5908e3bfd9be7153dbdddc9e6fad2196582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:38:e3:0b:54:51:5e:e2:b4:1b:a9:04:99:
                    73:70:29:1e:2b:7d:42:13:27:0b:c1:0b:2c:94:2c:
                    be:46:86:fc:c6:45:7e:22:ab:a4:0f:74:ad:c8:5e:
                    c3:47:56:54:a6:39:42:c7:96:dd:ec:cd:44:d7:82:
                    88:ef:44:f4:ea:61:6c:83:87:a7:1b:fd:b8:a7:d0:
                    ec:e6:aa:c0:43:d3:ef:ed:d8:e8:9b:03:e4:e3:06:
                    74:6e:29:06:cf:2d:dd:48:84:bf:3f:08:da:b5:30:
                    92:91:2a:40:00:96:24:cb:95:9f:e3:2a:43:f5:2d:
                    6c:a5:c1:30:41:8c:5c:a3:29:5c:64:80:a8:a5:9f:
                    5b:3c:dc:8d:96:5a:e8:7e:8e:a1:c7:5f:66:80:d4:
                    ca:d3:25:53:97:62:49:45:91:8d:64:45:ea:73:4b:
                    36:8b:50:a4:c5:e4:f9:24:53:12:20:7a:03:f0:f5:
                    b9:4b:29:f0:b8:2c:8d:df:d1:14:63:d8:a3:3b:cb:
                    0e:9d:e1:b5:0c:ef:97:da:e2:3d:8a:e6:90:f3:3f:
                    b3:62:fc:7c:7b:30:c6:dd:c2:40:35:07:2f:3b:62:
                    1e:64:21:5c:39:40:12:41:1f:47:ad:96:92:c5:c9:
                    ef:db:80:0b:60:34:a0:42:6c:b8:73:7b:84:b8:ee:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:68:A5:90:8E:3B:FD:9B:E7:15:3D:BD:DD:C9:E6:FA:D2:19:65:82
            X509v3 Authority Key Identifier:
                keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:69:2c:ef:ea:5e:97:0d:7b:7b:02:f4:64:6f:fe:07:23:
         c2:87:10:fb:20:1b:8b:be:0d:e6:f0:ee:21:99:8c:51:27:f8:
         0e:95:3f:40:30:d2:37:b6:90:a7:52:3b:38:8b:9b:0e:d0:3a:
         e4:57:b3:2e:46:38:53:18:93:13:fc:97:94:b6:d2:07:90:71:
         44:49:13:d6:bb:b3:39:8f:4e:41:d3:0a:05:11:b9:51:54:dc:
         c9:4a:14:2c:97:9d:5f:01:c6:3d:f5:39:73:e1:80:b7:a3:69:
         41:60:c6:31:33:1f:5e:37:f6:35:7e:97:16:c0:4d:0b:22:b3:
         2d:46:97:15:71:69:28:78:c3:08:1e:7b:d8:a6:7a:c7:e5:f9:
         86:4a:7e:28:bc:6a:43:c2:6a:05:d1:4c:b5:ea:17:67:80:3a:
         fb:1a:b7:5c:34:c1:40:cb:1a:63:06:16:59:fa:e2:01:84:d4:
         1d:bf:5b:2f:e2:9c:c7:80:bb:7c:4e:be:7c:ea:0d:f2:99:7f:
         31:c3:c0:8b:36:6b:39:74:41:3d:ba:bc:47:65:dd:0f:53:ba:
         ef:8c:39:e5:66:7e:4d:44:9d:1e:18:b2:1a:a6:b8:ab:1c:c9:
         6f:b1:b4:bc:9a:06:d4:42:8e:09:37:72:be:4f:45:73:e3:8b:
         08:71:20:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:20:33 2025 by rpki-client