Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File:                     QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier:          IyIop0GBPhGEM9iw2DCvi144cFE8kM/tRjTtxfOpY7U=
Subject key identifier:   6B:7F:7B:3E:96:50:3B:07:55:46:4C:2D:51:50:18:B9:49:2E:FB:15
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer:       /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial:       019847E51B91C257867E4D94ADB0ACF53B1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number:          0738
Signing time:             Sat 26 Jul 2025 18:00:53 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:53 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:53 +0000
Files and hashes:         1: HF0LqW6Nn7yrC4zWZGNegGbZJQI.roa (hash: ZufShUH8VmdZ1SaW4ZA1zfhMayCSiwCUVqOn6kPrIf0=)
                          2: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: RklKc0dPwRnSgiHuZnUoso46kfKAzIFyP8m//j4hDn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e5:1b:91:c2:57:86:7e:4d:94:ad:b0:ac:f5:3b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
        Validity
            Not Before: Jul 26 18:00:53 2025 GMT
            Not After : Jul 27 18:00:53 2025 GMT
        Subject: CN=6b7f7b3e96503b0755464c2d515018b9492efb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:90:33:dd:3d:60:84:53:a6:47:71:99:9a:
                    88:76:18:48:97:d7:5e:85:d3:f1:44:d5:8a:80:11:
                    96:36:a8:af:aa:92:73:91:ae:c5:4e:22:23:1f:0b:
                    5f:81:cd:9a:d3:c9:8f:e7:e0:8f:28:3e:24:4b:1f:
                    20:fa:f4:41:3b:ea:3a:3e:9c:aa:0b:20:a9:37:4a:
                    96:af:31:38:3a:cd:5f:b8:fa:37:40:97:62:21:41:
                    10:c0:d4:bf:4a:9d:f8:d7:8b:cc:78:b5:8e:8d:86:
                    ee:99:e2:9a:4a:95:b4:a0:45:f2:bf:20:dd:7e:2c:
                    c7:22:ec:ec:b7:2e:75:e0:fb:c9:67:f9:03:d8:81:
                    a6:e7:d7:f5:4a:16:8e:1b:1b:7b:25:bf:2c:19:81:
                    48:63:62:c0:c2:56:72:62:af:8b:4f:6c:a0:1b:4d:
                    b6:ac:b2:ef:09:08:80:92:92:e8:e8:c3:a4:bd:7f:
                    34:95:08:03:8c:00:60:f8:d4:b0:fb:0c:d7:bb:6f:
                    99:49:9e:bf:ca:d9:13:d6:1c:90:5a:c1:5a:6d:ef:
                    d1:39:7f:8f:ad:3a:9b:3f:c5:03:14:7c:10:a0:ff:
                    76:ed:57:a4:c4:d1:bd:28:5e:ae:bc:18:cb:1d:53:
                    69:f2:50:e0:43:5d:e1:38:9f:c3:5d:13:54:a2:22:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7F:7B:3E:96:50:3B:07:55:46:4C:2D:51:50:18:B9:49:2E:FB:15
            X509v3 Authority Key Identifier:
                keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:49:4d:7c:68:2e:25:aa:32:dc:a7:f7:31:78:05:e8:48:52:
         1d:00:1d:28:e2:c6:b8:b2:9c:15:ae:a3:f0:18:a3:2c:97:a2:
         dd:62:5a:66:08:29:89:6e:34:10:10:81:9f:fd:d7:e6:62:c3:
         5e:ed:bf:70:8e:c9:52:f1:3d:ba:74:2b:00:e6:10:30:13:81:
         3f:75:bb:62:11:80:b4:64:ab:20:6d:61:ae:e1:ed:21:36:94:
         6f:41:4a:3a:52:23:c5:cf:11:6e:0c:b6:28:b3:1e:c7:01:dd:
         fd:f0:ab:3b:6b:b4:58:49:e2:7f:be:03:d3:8d:64:6f:7e:3d:
         0e:54:cd:a5:45:e7:84:9a:d3:79:67:f0:d0:a5:49:44:c1:3c:
         78:03:b1:5f:e3:68:b1:f3:1c:d3:56:65:ae:ec:58:8f:e1:69:
         98:f5:94:42:43:86:31:b7:ba:54:58:79:5e:3f:6b:d1:34:87:
         ca:47:54:aa:e1:7a:6e:18:ec:c7:98:f3:d2:67:72:c2:7b:2b:
         83:17:72:f6:f5:f4:d7:bc:cb:0a:95:f2:e8:bf:cd:ca:e9:93:
         26:dc:7d:94:d6:60:9e:e3:ce:2c:6d:0c:6c:eb:98:54:77:36:
         bd:9a:0c:c3:21:15:2a:6f:1d:f7:03:48:24:ef:4d:36:0a:dc:
         69:6d:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:15:19 2025 by rpki-client