Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File:                     QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier:          M6QXeNd6nEqgpurY4V3aX3BgoY+vARUpfwsUBczSxlw=
Subject key identifier:   EC:5A:55:A0:08:5C:20:D2:A0:A7:0F:60:8D:94:1E:A2:5C:CD:9A:5F
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer:       /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial:       0199522EEF7DCC6B901E5C33CB2851F19510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number:          0F4C
Signing time:             Tue 16 Sep 2025 11:00:31 +0000
Manifest this update:     Tue 16 Sep 2025 11:00:31 +0000
Manifest next update:     Wed 17 Sep 2025 11:00:31 +0000
Files and hashes:         1: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (hash: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=)
                          2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: bvSQ9cYj9+k9olJ5olJfWvu4nKI4UKAY+kUjNQlhY10=)
                          3: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (hash: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=)
                          4: d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa (hash: eCiVHw72+bTZlv8fotK++2o6VMWQ+UX2AuVuNcdkIqk=)
                          5: iXw_41SDwVWtAf5ihJuQUw9Lk8I.roa (hash: IeaHE4eJJAlQPpX43/jtDGK9a0UQu+G72Lz6Qc9LhBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:52:2e:ef:7d:cc:6b:90:1e:5c:33:cb:28:51:f1:95:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
        Validity
            Not Before: Sep 16 11:00:31 2025 GMT
            Not After : Sep 17 11:00:31 2025 GMT
        Subject: CN=ec5a55a0085c20d2a0a70f608d941ea25ccd9a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:d4:49:d2:12:db:2a:3c:ce:50:25:a8:75:
                    d4:f9:a4:8b:56:28:00:0c:ae:a0:ec:2b:ab:7b:e8:
                    fe:55:a3:13:94:9c:8d:1d:b3:cc:f7:bd:76:99:27:
                    d3:ac:d1:3c:6b:3c:99:86:ca:60:f0:31:17:57:af:
                    fc:c0:50:ab:8c:10:6a:1f:90:ae:f7:f0:8f:5d:1c:
                    66:eb:46:c6:07:76:e4:89:5b:59:d5:2b:7f:df:7e:
                    1f:0f:79:88:31:82:7c:11:4b:08:e2:34:2c:c9:ff:
                    54:d3:e8:8c:2a:c4:cb:c9:5c:2a:55:ab:3e:ef:f2:
                    40:aa:6e:cd:83:a2:a3:a7:a1:07:55:2e:c5:20:cb:
                    15:55:bb:65:5a:9b:f6:be:5b:0c:81:64:6e:ca:4d:
                    db:82:72:ed:a8:2e:2a:99:a2:f2:b5:dd:ec:45:43:
                    f4:b8:52:56:91:d1:46:b5:81:87:1c:86:64:0e:b1:
                    ff:32:a8:fa:8f:11:da:52:19:78:56:f8:43:1b:44:
                    ad:4a:83:23:51:74:c7:ed:c9:bd:ac:ba:25:2e:fc:
                    ea:35:94:35:44:30:a7:d5:50:b1:49:8c:6f:3c:92:
                    60:b7:98:2c:ec:0f:22:98:86:39:ea:78:2c:63:87:
                    6c:b8:34:fd:d5:02:15:bd:41:e3:b5:57:fc:23:af:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5A:55:A0:08:5C:20:D2:A0:A7:0F:60:8D:94:1E:A2:5C:CD:9A:5F
            X509v3 Authority Key Identifier:
                keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:dd:e3:cb:e9:ea:eb:c5:ae:39:69:93:b4:f6:fe:4e:0b:52:
         2a:a5:88:e6:57:16:4a:e6:7b:ae:67:28:c6:fc:5a:1c:bb:cd:
         3e:3f:8f:65:72:bd:1c:43:98:c7:9e:38:22:15:40:1e:01:b3:
         f7:0d:f2:9a:e3:c0:d6:db:8a:dd:17:e2:d4:ba:0d:45:db:22:
         96:c9:6c:36:b8:b6:49:f1:3e:27:4d:ed:77:15:77:d4:10:10:
         51:d5:85:78:89:7c:99:0f:e9:37:0e:26:6e:82:ab:1f:b7:44:
         6b:e8:4e:87:86:04:77:7e:94:4c:f5:0a:1d:82:9c:19:e6:dd:
         eb:75:21:20:52:7f:ea:f5:04:36:64:70:57:5b:b9:4a:80:3e:
         bf:16:93:6b:72:fd:e1:f7:c6:a1:60:8b:b6:6e:ff:7b:dd:9d:
         88:57:65:b2:19:96:9c:0b:c9:fa:a5:3d:15:8c:64:f0:e1:f5:
         da:54:b6:eb:c4:d7:b5:91:ef:69:bd:17:ab:d0:33:69:87:cd:
         89:55:ce:70:04:3d:24:45:31:37:34:d5:92:cb:8f:19:ad:c7:
         6f:5c:80:d6:50:d4:7f:bb:c1:57:e5:fe:81:61:dc:88:e8:fa:
         73:89:cb:22:66:83:4f:7d:98:f3:95:11:11:78:ac:87:3a:94:
         27:b9:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 15:44:36 2025 by rpki-client