Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File:                     QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier:          HSNzTOiCzbKTpbCFgsGN0must+SLqnwHIM9NpoebPY0=
Subject key identifier:   80:DB:2C:E8:6E:CD:1C:F8:DB:97:F8:49:5E:0E:92:33:B6:D6:1B:C2
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer:       /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial:       019843D0DA7D0439E7B2E8823F43EBF9E4AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number:          0EC0
Signing time:             Fri 25 Jul 2025 23:00:17 +0000
Manifest this update:     Fri 25 Jul 2025 23:00:17 +0000
Manifest next update:     Sat 26 Jul 2025 23:00:17 +0000
Files and hashes:         1: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (hash: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=)
                          2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: B/khw1cnl8tWowKJJsNtsXr0l+HTx/vPIfJNUIzkvYE=)
                          3: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (hash: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=)
                          4: d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa (hash: eCiVHw72+bTZlv8fotK++2o6VMWQ+UX2AuVuNcdkIqk=)
                          5: iXw_41SDwVWtAf5ihJuQUw9Lk8I.roa (hash: IeaHE4eJJAlQPpX43/jtDGK9a0UQu+G72Lz6Qc9LhBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:d0:da:7d:04:39:e7:b2:e8:82:3f:43:eb:f9:e4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
        Validity
            Not Before: Jul 25 23:00:17 2025 GMT
            Not After : Jul 26 23:00:17 2025 GMT
        Subject: CN=80db2ce86ecd1cf8db97f8495e0e9233b6d61bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:45:34:4e:af:dd:f6:49:2e:c3:68:4c:46:36:
                    7f:1d:aa:97:e9:62:48:37:d2:ce:ca:d1:ce:89:ea:
                    c2:cf:c1:e7:e6:f1:c7:57:95:20:78:a2:1b:1d:7f:
                    1b:3a:13:c5:fe:9c:19:d3:d1:8b:1d:03:07:51:50:
                    3c:12:dc:f6:31:fe:52:44:df:ac:2f:47:81:28:9c:
                    e1:45:9f:9a:4c:fc:4f:37:69:20:ba:2c:99:48:2f:
                    49:85:0d:88:19:bd:d3:6d:74:6c:13:e8:46:5e:0c:
                    f0:31:c2:15:51:3d:ae:a9:0c:eb:e2:d9:ec:20:c7:
                    07:77:43:90:ff:f2:5a:7a:15:9a:1f:8a:ba:8e:90:
                    a6:4f:76:8c:89:c8:7c:32:4f:b9:99:be:1a:af:b8:
                    a2:84:b1:81:9b:69:45:da:94:a7:d4:d1:a5:fa:d2:
                    37:ee:c8:23:42:71:10:8c:d3:07:f2:ec:8c:ef:11:
                    cf:c9:26:e7:59:12:37:05:84:60:db:28:45:1a:69:
                    e0:67:f4:23:de:30:8c:c8:2a:6d:af:a7:d2:96:29:
                    1e:bd:f2:86:7f:2e:17:05:84:fa:5b:4b:ae:45:3e:
                    51:0b:5c:17:f1:5f:f7:ed:0f:7a:58:2a:e1:e8:e6:
                    b9:54:63:13:be:47:bd:c5:f3:26:39:57:21:79:a6:
                    6d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DB:2C:E8:6E:CD:1C:F8:DB:97:F8:49:5E:0E:92:33:B6:D6:1B:C2
            X509v3 Authority Key Identifier:
                keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:5b:a1:55:2b:73:77:4b:d0:ad:78:3f:45:86:79:2f:2f:
         0f:b8:84:70:e2:70:14:15:d7:9a:37:0d:27:c9:38:be:c1:a7:
         c5:57:ff:c7:d9:1a:2c:be:5d:1a:32:a2:97:d0:48:0e:d2:42:
         3f:d9:e2:cf:1b:99:ef:8e:a8:6a:f1:3b:de:74:75:99:74:00:
         f2:7e:63:00:c4:fe:ba:c7:54:83:87:fe:e7:90:3a:a4:4b:f7:
         e5:a3:5d:93:e7:b8:60:45:d4:23:2b:ce:6b:70:c0:29:e7:b3:
         1a:6b:db:1f:2a:72:3b:26:d3:6b:12:a3:92:29:8e:8c:ca:fa:
         0b:c8:c8:8d:b4:01:91:b4:30:98:0c:4f:d3:b2:c3:2a:ef:ee:
         e8:bb:f4:d8:2d:f3:73:d0:6a:e3:12:03:67:70:b8:42:44:40:
         d3:99:7f:7c:62:bc:ef:e1:79:b7:7a:c3:91:d8:27:75:67:ce:
         a0:82:45:28:35:58:ba:56:b2:16:09:b5:ce:c3:5f:92:83:48:
         82:79:29:55:06:3e:e3:76:44:d2:10:b3:4a:0c:77:09:01:86:
         ef:c6:3e:dc:cb:3a:28:4b:33:fb:ca:33:e5:31:05:c6:92:fc:
         e2:67:a7:9b:e1:dd:ff:5f:69:01:7c:61:76:d9:20:04:ae:9d:
         20:fc:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:57 2025 by rpki-client