Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File:                     QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier:          1FDTY+mimApHJdyL2Ovhq1uMaDxzjXsrMTnoWOVuhYo=
Subject key identifier:   6D:E4:2E:B4:01:98:A8:48:90:21:78:3E:68:CF:B2:7F:3F:6B:58:04
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer:       /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial:       01984664BBE421F46FD662EC3A3005646059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number:          1608
Signing time:             Sat 26 Jul 2025 11:01:03 +0000
Manifest this update:     Sat 26 Jul 2025 11:01:03 +0000
Manifest next update:     Sun 27 Jul 2025 11:01:03 +0000
Files and hashes:         1: OYOpNeEVsu0T0BbvhmHIdNFIT_o.roa (hash: 5OjFPxxmaTIrwXXRizdKgOIFQoKouBwpJLlgwAhC1mU=)
                          2: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: 92WCn/1+HsCqRm3chumE2GQ1yzYOCf2uc9S92GkEx+w=)
                          3: YdfGaXHdTb-LYhTs_wz6s9gnwBM.roa (hash: gNJt9eBEIblRu0IFOMH1K6y+ICB3kC1BNK9Q6bATMgc=)
                          4: q9jElUrbhazQFMEmmCOsDeqbLJA.roa (hash: RedQ+QOQuI2x8mkKA1C82rnZg776YlWDZwTviJY79bo=)
                          5: sJO10EU5Nx8_dkPBaPnnB2dtYNM.roa (hash: XB5B7Wmp004sDj3pl5z8PdpWXfh6a+r4ST0GRlHwVWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:bb:e4:21:f4:6f:d6:62:ec:3a:30:05:64:60:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
        Validity
            Not Before: Jul 26 11:01:03 2025 GMT
            Not After : Jul 27 11:01:03 2025 GMT
        Subject: CN=6de42eb40198a8489021783e68cfb27f3f6b5804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:37:5e:e6:3c:33:da:63:22:20:e0:06:95:
                    fc:fc:b4:80:2d:33:9d:73:36:e5:60:1c:26:72:02:
                    f0:a3:7b:d3:c6:81:f3:61:e0:f2:c1:05:aa:9b:b4:
                    6a:b8:9d:ab:af:3e:73:2d:21:d2:c0:e8:68:79:fd:
                    9c:ec:97:11:c3:a2:fc:38:5b:50:f5:0e:3c:a8:96:
                    98:99:47:23:9f:27:f8:48:85:8a:a2:4f:bc:b5:f9:
                    3d:27:d4:6c:39:8e:64:e9:db:af:15:39:76:9c:d2:
                    81:7d:da:49:61:4c:c1:b8:fa:56:96:0d:c6:9a:10:
                    91:1c:6f:25:bf:aa:5c:54:d9:7a:ac:0c:80:cb:03:
                    df:68:89:d0:f5:a6:6e:13:0d:f5:74:33:02:2f:f5:
                    3a:3b:97:55:9a:53:66:9a:c3:48:8d:72:31:f5:74:
                    21:76:82:6a:c4:28:f3:4a:90:11:1c:42:89:fc:6d:
                    4e:5b:7d:50:2c:8c:47:96:35:51:d3:91:2f:1c:20:
                    09:90:91:78:f9:21:84:15:36:30:f9:38:01:6b:3a:
                    e7:d7:91:85:14:4e:f3:32:90:43:77:0b:21:1c:06:
                    d4:e0:ea:8a:da:c2:f4:41:b4:1d:8d:03:86:53:2b:
                    42:a4:d2:3a:ab:2c:c1:34:aa:f0:03:00:80:b8:99:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E4:2E:B4:01:98:A8:48:90:21:78:3E:68:CF:B2:7F:3F:6B:58:04
            X509v3 Authority Key Identifier:
                keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:05:9c:79:66:8a:57:37:9c:4c:c1:03:eb:57:b2:7d:31:0d:
         7c:e3:f7:1c:d7:8a:55:c5:fb:5b:5c:5a:f7:1f:f9:56:13:7a:
         9f:21:8d:cc:12:f1:1b:1b:42:4b:41:dc:47:a6:1b:bf:03:6f:
         cd:6a:2b:c6:1c:51:99:32:2f:52:e0:1a:4a:b2:29:98:84:9c:
         0d:56:91:21:34:12:b6:e4:93:fd:35:f9:2f:51:ea:5e:8d:6d:
         74:ae:49:b8:2f:51:20:ee:8b:42:77:d6:80:47:24:2b:9a:fb:
         c2:80:ba:67:bf:af:31:c0:b3:c9:04:66:0f:46:76:e2:e6:7f:
         fa:43:66:cb:bd:43:d0:7a:ff:24:50:71:0e:b3:1c:d9:83:16:
         5c:b4:10:4d:d6:4b:17:ae:cf:97:48:3a:7e:00:94:2e:31:ba:
         14:12:5f:e0:7a:2e:b4:39:19:52:0d:eb:cc:0c:9d:b3:86:c1:
         12:9c:5f:6e:76:92:d6:2f:e0:2c:5d:0f:0d:82:ed:cf:0f:4c:
         d7:c3:64:be:7f:50:d1:36:48:7b:05:57:de:11:72:f0:91:ad:
         0a:96:b2:0f:0e:77:7f:f1:5f:be:09:60:cd:91:22:1a:12:da:
         cf:ab:6f:8f:6f:f4:de:08:b3:04:27:d3:bd:92:66:2d:8a:73:
         8f:02:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:44:47 2025 by rpki-client