Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          HKX33cVCPS7//8iLfS3TmF6+PYgZxGd/fL54u/CFgxw=
Subject key identifier:   DD:3F:18:18:55:44:BE:43:B7:BF:C8:2A:32:69:1E:51:D1:34:1D:42
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       019848F7A31D7FACF76ADC17144FB19086B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          1610
Signing time:             Sat 26 Jul 2025 23:00:45 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:45 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:45 +0000
Files and hashes:         1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
                          2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
                          3: RXbwxnxv5i77bPKXOPNg3gLHQ2Q.roa (hash: Hb7ewCgNUReilTcVx5Y6r0li4yOFHBvAH9Jj35wZEN0=)
                          4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
                          5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
                          6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: 4VyS6hrYrDnFHwa7nORad8IW/VZwjsnCC5rkp9ZvkJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:a3:1d:7f:ac:f7:6a:dc:17:14:4f:b1:90:86:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Jul 26 23:00:45 2025 GMT
            Not After : Jul 27 23:00:45 2025 GMT
        Subject: CN=dd3f18185544be43b7bfc82a32691e51d1341d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:08:09:46:0a:c8:5a:05:3b:f9:eb:bc:c0:
                    51:5c:76:18:9e:77:fc:a7:a7:ac:76:bf:1f:46:d8:
                    f1:cc:91:79:05:19:b1:c4:a6:38:7d:b4:74:6c:c9:
                    ed:3e:47:4d:22:58:20:04:77:d7:22:ed:f7:4d:c1:
                    08:c2:f4:2b:a4:0a:2f:6c:a9:71:7d:eb:a2:e8:e9:
                    6b:4d:09:7d:94:d1:07:45:a0:e7:3c:33:e0:2c:81:
                    09:f9:f8:06:aa:06:00:f5:3c:81:54:99:18:97:da:
                    48:00:b1:70:79:5e:27:52:be:bd:e4:cf:07:5f:ff:
                    49:c7:6d:f1:08:77:1b:2e:8a:40:b1:f8:2b:96:d1:
                    06:8c:fc:b4:fe:19:1d:45:5f:1d:9a:da:70:4a:de:
                    42:17:1c:64:4b:24:73:1b:20:37:36:14:13:b1:87:
                    dd:dc:1f:5f:62:a0:9d:d4:e5:02:dd:cd:ee:fe:2a:
                    46:b5:bd:c5:93:83:f8:6d:cb:c2:0b:a2:ff:3f:2d:
                    3f:a2:2a:8f:86:2e:f3:e0:bc:d7:19:93:ec:cd:39:
                    33:79:17:b9:b0:a1:19:12:d5:ee:d3:6d:3f:ac:ab:
                    1c:91:52:45:03:10:ad:27:11:86:1f:ba:c5:21:65:
                    a3:11:ba:d0:8f:3c:90:0d:b0:75:94:c8:44:db:52:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3F:18:18:55:44:BE:43:B7:BF:C8:2A:32:69:1E:51:D1:34:1D:42
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5e:7a:7c:d2:ef:ef:b1:c8:bb:59:06:12:e4:f3:ab:85:3a:
         58:6c:0f:e6:0c:46:d2:3a:eb:bb:1a:c0:0e:6b:68:1b:da:5c:
         44:80:04:8b:70:af:d5:52:63:3a:a3:0b:09:d0:a0:c6:76:0b:
         f8:2a:1e:47:26:69:34:b2:55:b3:14:9b:40:26:71:d3:8d:89:
         7a:d1:09:8f:50:84:a5:0a:db:32:a0:e3:88:d1:f7:a2:3a:ae:
         52:64:f4:bd:19:11:c8:5f:75:e4:fa:e4:7a:9f:33:f3:ea:d2:
         58:0c:05:74:9e:19:5a:42:93:ad:bc:35:2c:68:fd:45:45:e0:
         49:d2:8e:2c:ad:96:48:3f:64:69:0e:cf:ba:5f:ab:f7:6c:38:
         80:53:34:1c:b8:05:d7:3b:aa:9a:2d:ef:b4:63:8d:f3:85:67:
         07:25:eb:60:85:7e:11:29:fd:bc:8f:7c:d2:52:ed:9d:ad:ad:
         fd:a6:5c:e1:7d:88:a6:0d:33:11:ed:96:f3:a2:9d:6d:ae:06:
         80:ed:6d:24:f0:57:71:30:e5:26:fa:64:7f:51:4f:7b:57:58:
         a2:cb:57:13:c8:37:b4:bf:c8:78:88:81:ca:48:80:26:62:ba:
         c6:0b:d9:b0:70:98:16:5b:6c:1f:0e:d3:32:71:3d:84:45:ee:
         01:01:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:43:11 2025 by rpki-client