Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File:                     qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier:          rpRdyf2AnQ95JWiHzv1+E7pZoCiENrQRa/iLhcEdjJ4=
Subject key identifier:   BA:43:6A:26:9D:ED:A5:34:2A:48:89:20:82:9A:08:91:DD:EB:1A:91
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer:       /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial:       019845F677AD7D62E8EE7CAAA08461DC237D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number:          0F1C
Signing time:             Sat 26 Jul 2025 09:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:36 +0000
Files and hashes:         1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
                          2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
                          3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
                          4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: SdPvgAjx5OUkAYvGZ6xL15dkmU181d+X8+ko2+32+BI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:77:ad:7d:62:e8:ee:7c:aa:a0:84:61:dc:23:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
        Validity
            Not Before: Jul 26 09:00:36 2025 GMT
            Not After : Jul 27 09:00:36 2025 GMT
        Subject: CN=ba436a269deda5342a488920829a0891ddeb1a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:e4:14:d9:14:4e:bd:57:7f:97:d7:92:59:
                    62:b8:0f:7b:3f:45:83:4c:4a:a5:da:f6:52:48:e7:
                    c5:6b:92:e0:ab:82:98:40:d8:04:29:bb:fa:c8:8e:
                    48:fa:d2:ff:cc:8e:96:26:d6:d2:53:0a:aa:68:75:
                    8f:5b:66:63:2f:16:e8:dc:94:62:25:b0:ba:99:16:
                    3f:15:18:89:6d:46:78:4d:b1:72:86:ba:18:a3:67:
                    fc:55:66:83:71:08:0e:5d:96:0f:4f:d0:54:ba:b3:
                    8c:55:29:17:4f:86:80:1c:1d:3f:14:3e:17:7e:38:
                    1c:f1:d1:7b:fe:93:94:51:10:fa:6b:07:78:84:30:
                    b4:f8:44:a6:39:84:72:46:38:01:97:5e:1d:65:1f:
                    1d:60:2d:64:80:86:b5:cc:35:28:d0:bb:da:fd:6d:
                    46:a4:5e:6b:e8:eb:34:38:a8:ec:73:91:1b:88:7a:
                    90:7b:e1:17:a4:8e:19:ae:8f:3e:9b:39:2e:39:92:
                    b1:74:4e:7b:4c:10:2c:50:04:f9:ba:ed:89:7f:7a:
                    ee:4a:5c:71:83:6c:cd:aa:e8:6e:bb:52:cd:84:36:
                    11:5c:7e:aa:e6:68:33:33:b5:0d:15:89:3b:45:5a:
                    1c:25:36:22:90:ab:82:79:0a:a8:bd:59:72:8c:16:
                    0d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:43:6A:26:9D:ED:A5:34:2A:48:89:20:82:9A:08:91:DD:EB:1A:91
            X509v3 Authority Key Identifier:
                keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:88:b8:c2:90:42:5b:9a:26:38:67:f1:46:77:33:02:a7:
         6b:97:63:93:75:88:d6:a5:04:f9:21:18:af:09:d2:be:3f:05:
         0e:2b:53:07:08:5e:a6:66:b9:1c:5f:24:95:76:05:ab:11:35:
         6c:8d:12:ab:38:fd:3d:2f:7a:db:49:ef:3b:86:23:af:67:3a:
         b9:ed:62:b0:47:2a:42:8e:c7:4a:ab:58:c1:90:92:b0:85:14:
         99:bc:e2:bd:7c:1c:96:88:24:57:90:12:66:91:56:1e:b9:ac:
         dc:db:71:68:a9:f2:1f:af:4d:8b:bb:d4:d9:82:80:42:4f:fb:
         35:b9:84:09:3a:84:76:44:1a:c7:d0:de:d9:fc:dd:5e:84:00:
         0d:40:ff:f4:5f:54:c2:a1:cb:45:43:ca:94:ec:9a:3c:76:b2:
         70:37:af:f1:75:ba:f6:db:86:6b:a4:bb:36:03:d1:48:b2:8a:
         ac:fb:2d:13:ec:a1:e4:4a:de:bd:0a:73:68:49:b2:ea:6e:83:
         4a:2e:a3:b9:aa:87:d1:d1:10:99:9d:67:c4:63:c2:a4:00:50:
         15:3c:06:b5:61:7a:ed:77:6c:2d:74:91:e0:c5:32:a1:0d:5c:
         97:5d:69:17:7f:74:8c:fa:09:4a:ed:40:4e:25:cd:a2:a1:ad:
         26:de:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:52:02 2025 by rpki-client