Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          3SMW1kGNnDkKp+d0eSMraqQH6KFnaRSBK7a61zOr96k=
Subject key identifier:   D7:38:4A:67:3A:3F:68:03:B0:77:B3:DF:75:2E:A9:3B:84:EC:F1:DD
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       01984BC21BD52E68D66B2C00442496B954AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          1633
Signing time:             Sun 27 Jul 2025 12:01:09 +0000
Manifest this update:     Sun 27 Jul 2025 12:01:09 +0000
Manifest next update:     Mon 28 Jul 2025 12:01:09 +0000
Files and hashes:         1: 1-C7o4Sg1w_tMM8v1-Zzbx0qKuw4.roa (hash: 5hM/OQJSa5W9fafk6DZMK61IDj/N7aS0aUIw68dp1I0=)
                          2: b_NE7DVIfDXKb-MpYj6nT1XXano.roa (hash: p2sDMI4p8wkfemzISoM/DEW8q7cpoFG20Gw6CbldWQQ=)
                          3: bjYWIiRDJQJHClBhm5lHGbc7p3c.roa (hash: 2CHXRgaX05mE8dTCdvnAxjehUb/UlBCUBvMnngQZ4pY=)
                          4: e9ro14Q2CkVWo9tx9mS_DRjKoG0.roa (hash: hdEGtzXmNsVqaiQbsKpplmaz4uwwkN9r2YZS335CDho=)
                          5: eLM1tMA2-Prx-6AJmPfSxPTQ8ws.roa (hash: x3TEJF+lEhYQXreBGO5p/2V/eqc0Q9Afb2MZe1Qg0wg=)
                          6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: 0D6vBqJMaRVEzo/vCkBwrMmfVtglKwDltF1BtD8oE4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:c2:1b:d5:2e:68:d6:6b:2c:00:44:24:96:b9:54:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Jul 27 12:01:09 2025 GMT
            Not After : Jul 28 12:01:09 2025 GMT
        Subject: CN=d7384a673a3f6803b077b3df752ea93b84ecf1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:c0:b1:cd:75:6f:06:e6:d0:fd:9c:04:9c:
                    74:f5:c1:e0:3f:5d:e9:9d:63:15:2b:c9:44:ff:f8:
                    5b:8a:e9:69:6b:da:da:04:27:f5:2f:5b:00:6b:08:
                    c7:62:6c:d1:d7:fc:10:3c:98:b9:40:49:52:61:25:
                    8f:b7:6f:d1:a2:47:fd:08:6d:e7:57:99:ea:24:3d:
                    7f:ee:63:93:c4:3c:17:38:da:db:62:06:8c:19:f8:
                    ef:08:58:05:9a:98:02:95:4b:1c:16:03:7f:3a:cb:
                    ec:03:47:c2:48:aa:f5:bb:f0:1a:1b:09:c8:d1:92:
                    84:23:5b:2f:59:53:e4:d5:5c:de:31:82:29:4a:e2:
                    bf:ae:43:9c:d9:89:22:bb:d5:11:47:de:d6:c1:19:
                    3d:77:9a:98:f1:50:c6:65:35:8a:48:bf:c1:5c:56:
                    22:24:03:15:35:95:11:99:78:0e:e7:d7:90:20:5b:
                    4d:b6:8b:17:22:4f:54:d7:3c:8c:7c:df:fc:63:0c:
                    60:de:05:fb:7d:f6:c1:bf:fe:46:60:d5:13:d3:f8:
                    b4:dd:53:b3:58:e8:06:f3:be:42:c0:75:37:85:ac:
                    2e:b0:b1:f4:6e:4e:92:d7:af:5f:d1:62:b9:61:95:
                    70:23:09:df:b9:45:0b:e9:5d:51:69:4f:e5:fa:61:
                    c9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:38:4A:67:3A:3F:68:03:B0:77:B3:DF:75:2E:A9:3B:84:EC:F1:DD
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:df:37:da:e5:95:83:f4:f8:45:bd:ef:38:af:94:f3:74:
         d1:85:ae:c2:0d:13:41:b6:f5:fe:6b:e5:20:7d:9f:fd:92:e9:
         c1:7d:16:ae:bc:bc:46:20:ec:75:9e:54:13:1e:05:f0:59:63:
         56:10:28:1f:93:01:46:cd:c8:39:f9:8c:d0:6b:f3:57:14:4c:
         50:d2:bd:0f:be:28:98:5e:33:c3:41:7f:2a:4b:ad:4a:41:5a:
         d7:14:7b:58:e8:7c:a6:a9:5c:7b:63:ca:b0:48:be:c4:e0:75:
         64:11:4c:be:6b:0b:ae:09:38:11:d6:60:07:73:88:b8:3c:ac:
         18:0e:4e:0f:f8:11:b3:9e:3a:8d:8c:57:59:93:ad:13:8d:d9:
         d1:04:5c:09:3b:f6:e6:97:af:0e:94:f0:dc:b4:12:d3:f6:79:
         44:95:97:2d:eb:b2:a3:2b:07:4d:f7:19:4a:b6:e4:06:70:0a:
         43:93:c6:ae:3b:1a:b9:82:d8:ea:d6:b0:83:b4:0d:c1:af:f2:
         a7:25:ed:02:a4:53:5d:9b:1e:6d:2f:fa:22:28:07:f2:5a:f1:
         c9:bf:6f:e8:5a:97:e2:c0:d0:46:29:0a:48:16:70:04:f2:fa:
         51:31:3b:b6:51:e3:4d:50:85:7b:87:43:ab:ea:3a:ff:12:d6:
         31:74:a3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:41:18 2025 by rpki-client