Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File:                     qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier:          PkTf/brf61HM+X6sWu6mt/2DzkmjRhjXnf+RYQnIkTA=
Subject key identifier:   E4:45:65:7C:BE:A9:DA:9F:5B:F6:BC:8E:F6:27:72:61:8D:C0:0F:DA
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer:       /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial:       019849667699F7DE671F575C45833CC94A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 01:01:48 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:48 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:48 +0000
Files and hashes:         1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=)
                          2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: pi1N2G8it3QmlY284OAvOYSIgEjNb9WQ08QagZiZpOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:76:99:f7:de:67:1f:57:5c:45:83:3c:c9:4a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
        Validity
            Not Before: Jul 27 01:01:48 2025 GMT
            Not After : Jul 28 01:01:48 2025 GMT
        Subject: CN=e445657cbea9da9f5bf6bc8ef62772618dc00fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:a6:10:ba:21:42:c5:05:10:a7:03:d2:99:
                    c3:2a:37:43:38:cc:be:df:57:46:97:f7:a6:4f:94:
                    da:3f:3c:e0:4c:2b:5b:6b:c5:52:24:42:5b:06:ed:
                    f6:14:48:5f:dd:46:03:77:02:21:bf:92:31:52:ba:
                    5a:0e:c5:18:3f:bc:07:9f:c9:b1:9d:ad:ee:03:71:
                    64:97:33:df:95:a1:91:c1:eb:d1:aa:e8:c5:d4:57:
                    dd:19:f9:c3:7c:5d:fc:fd:9a:5d:29:4c:00:d2:cb:
                    50:ba:d6:12:9e:4e:06:bb:bd:06:b2:cd:d9:7c:83:
                    d4:67:b6:e0:34:d4:04:c7:01:b7:68:35:6a:84:cf:
                    cf:92:32:a0:9b:fe:42:95:8f:ea:43:0e:ad:a6:ba:
                    e5:be:49:88:d4:a4:16:bd:46:b1:c0:da:7e:bc:fe:
                    ea:3e:2b:25:0e:75:7a:50:ac:30:ff:86:8c:61:25:
                    26:b4:e4:de:70:d8:c2:9e:f7:b7:bf:e3:75:9a:d6:
                    a1:22:7c:da:f4:8d:7c:3d:d2:7c:fc:8a:d7:e6:06:
                    11:c1:18:21:a2:73:ae:43:89:a9:9a:96:88:6d:af:
                    d8:8e:59:ae:ee:a8:97:a5:48:d0:72:cd:7c:39:62:
                    30:db:4b:4b:65:3a:04:a0:07:ce:18:b9:ed:07:5e:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:45:65:7C:BE:A9:DA:9F:5B:F6:BC:8E:F6:27:72:61:8D:C0:0F:DA
            X509v3 Authority Key Identifier:
                keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b4:8e:35:90:94:69:fc:a3:34:85:89:98:75:73:87:87:29:
         bc:17:00:d8:7b:8f:cf:a0:b2:8e:94:56:6b:b8:1b:b7:32:2e:
         a5:af:28:ca:b9:38:01:8a:f0:e3:23:40:2c:27:8d:99:00:89:
         b2:4b:23:3a:f6:6f:8b:9f:56:20:15:52:82:00:3e:4e:34:00:
         f2:71:40:8a:4d:dd:e5:5a:e9:d5:59:96:14:6c:20:a3:31:b6:
         70:d0:83:78:9d:a9:89:d5:35:d7:72:4c:2a:97:d8:ff:de:30:
         e7:86:2d:70:71:cb:50:76:0e:8e:2a:d7:a0:f7:fd:f8:aa:c4:
         b2:55:1f:ea:99:ad:2e:0f:0d:2a:c9:e6:e1:b2:83:c3:0a:51:
         1a:8b:55:2c:80:b1:07:e7:49:ae:24:d9:aa:03:07:78:31:70:
         86:6b:6f:01:87:dd:b7:85:20:e5:c3:5b:f4:da:6c:ae:00:bb:
         4b:9b:4d:3d:23:97:49:aa:26:e4:0b:48:36:c2:b3:ff:38:d7:
         d5:c8:4e:12:80:ff:a2:27:2e:82:f2:9b:4f:8b:90:d2:77:6d:
         3a:25:de:80:9b:f6:8e:b8:f7:98:c4:4d:0c:95:ce:cd:c3:d0:
         30:d1:dd:48:7f:0b:39:ac:b2:a5:65:f1:44:7b:0b:5b:61:00:
         4a:69:b4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:07:42 2025 by rpki-client