Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          V5s4QDCR+9VuLIg7sbQ8ie9LSG48lpmtBdHjB05Ebw8=
Subject key identifier:   17:A5:69:26:93:B2:16:89:98:01:60:58:44:18:63:CC:C8:C0:D0:C0
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       01984889BEF0189B6BDC5300E8FD52334843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          0773
Signing time:             Sat 26 Jul 2025 21:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:43 +0000
Files and hashes:         1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: kGXykTYx6g1U91qAu5tFEobd1Ai+LPaYe56/07QAddw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:be:f0:18:9b:6b:dc:53:00:e8:fd:52:33:48:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Jul 26 21:00:43 2025 GMT
            Not After : Jul 27 21:00:43 2025 GMT
        Subject: CN=17a5692693b2168998016058441863ccc8c0d0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f4:e9:ee:ca:34:14:00:2c:e3:ad:0f:3b:f3:
                    34:14:53:79:98:34:5d:d3:6f:75:21:23:6e:a7:50:
                    b0:f0:aa:91:38:54:4d:49:ac:0a:e6:99:0c:ef:86:
                    36:29:5d:7d:9a:11:2e:a4:ea:71:cf:f0:5b:f7:fd:
                    d6:66:7c:b4:35:fa:92:86:0c:be:03:58:26:97:c1:
                    b0:42:1e:8b:01:fd:0d:15:b2:3b:37:75:46:c3:94:
                    7d:b6:0d:20:83:5f:c9:21:2e:91:cb:bf:c0:5b:df:
                    89:dd:46:aa:cd:5f:ec:ff:5a:62:9b:d3:6a:a4:7b:
                    af:a7:f0:d1:e0:da:b6:49:d8:9b:c0:8d:9b:72:29:
                    f7:23:5f:03:8f:0b:0d:ec:9a:aa:ca:af:ab:81:d8:
                    f9:69:02:7d:27:94:d5:6c:b5:73:bd:15:72:86:ea:
                    08:69:bd:ab:92:85:e7:53:3b:63:b5:99:14:75:02:
                    9b:d7:2a:d6:39:48:7f:74:c0:66:fe:6b:e9:c7:e3:
                    1f:6b:13:cd:62:b8:5a:e4:a1:77:3a:85:de:8f:b4:
                    ef:1f:1f:2a:ad:db:54:61:83:a4:fb:b7:07:2a:25:
                    36:56:9d:47:2e:79:4c:22:40:b7:bb:2e:be:d9:70:
                    ff:43:81:0e:1c:46:a7:3a:a6:76:3c:82:40:cf:2b:
                    00:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A5:69:26:93:B2:16:89:98:01:60:58:44:18:63:CC:C8:C0:D0:C0
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:47:7e:eb:7a:52:02:94:7c:f2:04:ff:c0:91:40:b7:96:
         3d:14:62:45:57:47:9a:c4:72:f1:b3:d6:15:1b:20:93:20:76:
         fc:0a:79:17:82:77:f0:d4:88:7b:2d:c6:96:64:ff:98:3f:04:
         70:da:fa:21:49:25:14:62:04:f4:0d:62:ca:df:b3:4e:56:86:
         e7:b3:1b:45:32:e3:fb:cb:fd:a0:b5:d6:7d:32:00:cc:51:19:
         61:fa:a6:d6:b4:b7:09:3f:e9:7a:fb:5f:b5:dd:01:59:69:49:
         47:ab:25:0d:fd:2b:ce:64:67:11:0c:72:7b:14:81:7a:1b:01:
         65:d4:00:7a:b6:7d:02:92:75:74:33:90:77:e4:d5:df:63:ea:
         41:9d:cb:96:6a:e4:47:25:dd:0e:17:1e:27:d4:d9:cd:17:93:
         b4:62:7a:87:d2:51:9e:a1:42:b1:e1:b4:81:f4:da:20:f8:22:
         8b:52:73:37:0e:73:37:ba:ec:e3:e7:13:d5:d4:38:f4:4e:0d:
         55:4b:ba:85:fe:7f:2a:d8:69:06:3f:e2:8b:44:2e:d2:9e:24:
         ea:2c:04:d0:64:be:00:be:3c:dd:f4:f0:0b:4b:e7:0a:87:69:
         13:7b:29:bf:21:35:d0:ea:43:d2:53:a0:06:e6:87:7d:88:56:
         6a:e3:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:26:23 2025 by rpki-client