Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File:                     dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier:          eahAb4qiH8vvAlSvo3OOAi6GYuQE9H1nRbsxC3rerrs=
Subject key identifier:   FF:F8:C3:C8:69:C6:C5:9A:D4:3E:6C:BF:AA:46:67:6B:AC:B6:7B:B2
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer:       /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial:       019849660DA6BD9151680EC4E8FE5C14717C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number:          1593
Signing time:             Sun 27 Jul 2025 01:01:21 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:21 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:21 +0000
Files and hashes:         1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=)
                          2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: 8lDRRj46JB1Vi7G8yvncpXyczAwmwBXewu8hgHqsF2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:0d:a6:bd:91:51:68:0e:c4:e8:fe:5c:14:71:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
        Validity
            Not Before: Jul 27 01:01:21 2025 GMT
            Not After : Jul 28 01:01:21 2025 GMT
        Subject: CN=fff8c3c869c6c59ad43e6cbfaa46676bacb67bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:c8:a7:ed:8f:f1:8f:25:08:42:ec:b9:d7:
                    75:c0:cd:f4:93:dc:30:86:73:a7:1c:6a:cb:e1:2a:
                    30:1f:9d:08:13:24:ef:1c:41:d5:b8:fc:a7:80:c5:
                    03:62:c6:0c:46:3a:f2:82:c9:08:e2:5c:78:c5:47:
                    b7:37:e5:ba:44:2f:7d:95:08:92:26:78:d4:82:67:
                    29:8d:bf:55:05:d2:55:2a:de:ee:d0:bb:1a:19:2c:
                    a6:eb:9b:33:2d:1a:62:d2:ad:b1:d6:e2:b7:2b:11:
                    d4:98:08:a9:ec:a3:97:c0:8a:31:19:fc:8b:9f:46:
                    c4:d1:f8:b4:17:a8:44:54:17:5c:3e:0d:85:23:42:
                    9d:e5:61:40:79:a5:e7:65:8f:f3:b8:f4:91:36:74:
                    79:e1:9d:64:2e:83:81:5e:ed:23:59:61:9c:f6:43:
                    5c:08:b3:ef:1a:ea:78:89:32:0e:e7:0c:4a:41:91:
                    ab:76:da:0d:a2:d5:aa:8c:40:b2:96:ef:18:4d:66:
                    2d:68:6c:3c:67:a6:20:89:5d:0d:38:9b:32:86:e1:
                    d5:89:19:eb:41:30:53:b7:1d:fe:a0:c6:e3:7b:5e:
                    14:10:87:c2:cd:1b:dd:97:e7:3d:ea:e3:97:a2:e3:
                    44:7c:eb:45:55:03:6f:ef:a3:7d:c4:de:57:b0:2c:
                    e7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F8:C3:C8:69:C6:C5:9A:D4:3E:6C:BF:AA:46:67:6B:AC:B6:7B:B2
            X509v3 Authority Key Identifier:
                keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:56:24:de:e2:7b:77:f2:b3:f9:02:df:0e:ec:8d:cc:2a:
         49:63:ed:55:64:de:c2:2e:a5:15:7a:b1:0d:81:2b:d8:6f:22:
         fc:7b:22:ca:62:b7:e2:24:98:c1:6f:bc:a8:61:80:80:56:39:
         88:89:13:74:93:af:94:3f:a2:33:b8:c2:a1:25:3f:37:ab:60:
         2e:5f:3a:c7:27:b2:37:a9:39:69:1c:85:96:b2:03:02:b7:eb:
         87:1b:07:81:fa:50:d3:88:0b:07:01:ea:6b:15:d4:77:2b:e1:
         77:aa:f4:3c:de:be:b1:67:e6:65:30:ec:27:0c:f4:c9:4d:72:
         24:b6:54:41:73:8c:20:77:e2:92:96:be:dc:7d:f0:ea:ca:a9:
         ea:24:08:ea:83:90:89:da:dd:75:40:e5:c9:23:3a:e3:fe:a1:
         8f:21:3e:0a:29:58:1e:6e:59:07:4f:a5:00:8d:49:d1:86:2d:
         04:60:fb:a6:69:c4:f9:13:5d:f2:a2:88:0f:ea:76:85:75:1b:
         0a:38:a5:64:89:2c:3e:67:d6:2a:c8:fa:ba:c7:b1:b2:a7:a6:
         a8:49:89:ae:e7:2a:df:8f:ee:99:53:9c:2a:70:da:24:87:69:
         8d:8b:99:8e:c1:92:7a:bc:6b:e1:50:24:8c:12:1c:87:e0:36:
         f3:52:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:55 2025 by rpki-client