Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
File:                     AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json)
Hash identifier:          C3rRnc5z7N8wulypEFjj1zd/btlP6bNUwYtNu9U/aL8=
Subject key identifier:   A9:B6:9A:02:93:1A:C5:3F:12:8B:F1:B1:09:1C:BD:AD:4D:2D:B6:53
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Certificate issuer:       /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial:       0198529F36DDE6EB343127CD3CFF8B1B25EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
Manifest number:          0FDA
Signing time:             Mon 28 Jul 2025 20:00:22 +0000
Manifest this update:     Mon 28 Jul 2025 20:00:22 +0000
Manifest next update:     Tue 29 Jul 2025 20:00:22 +0000
Files and hashes:         1: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: O5BbavtkVYDc7E3g36ER/XUZnN2MWXBZNKXVsAFnV+I=)
                          2: UacNCcU_KJUFuUVDMacLGTYRt1Y.roa (hash: UmEeKvj5iTGiHz9n8Csi6f4hgPZD+m1pw3SMg/RgUMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:9f:36:dd:e6:eb:34:31:27:cd:3c:ff:8b:1b:25:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
        Validity
            Not Before: Jul 28 20:00:22 2025 GMT
            Not After : Jul 29 20:00:22 2025 GMT
        Subject: CN=a9b69a02931ac53f128bf1b1091cbdad4d2db653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:43:ee:55:6b:e8:92:d9:9f:5a:1d:74:08:
                    85:2b:87:8c:2d:a2:10:b9:c7:db:cb:15:56:72:7b:
                    b4:10:aa:01:7a:cc:8e:70:cc:93:8f:0a:2b:43:81:
                    48:5a:3b:75:e6:1c:e4:22:ac:36:51:2f:14:3c:c6:
                    86:66:78:20:16:42:34:f5:bd:06:b5:f0:91:f0:dd:
                    e2:0f:7d:09:bd:20:9b:03:f8:bd:9a:fc:a4:4f:f1:
                    f5:e6:bf:38:95:80:fb:9d:c6:94:63:06:2a:7d:92:
                    68:40:70:a8:ff:0b:1a:85:62:0d:8a:b5:71:be:e9:
                    d1:e8:a6:0d:b0:b9:b3:16:9c:1a:8e:44:5a:e2:a5:
                    d5:56:c2:b4:8b:45:ed:91:cc:c1:18:37:02:c4:6b:
                    ec:60:73:4a:40:c0:be:88:70:38:05:21:c7:50:54:
                    9e:a2:1d:2d:2e:6a:19:3f:2a:91:72:90:2f:f7:6b:
                    e3:ff:4d:c2:aa:42:48:2a:64:c6:eb:6e:86:97:48:
                    1b:4f:40:bf:68:08:84:b3:a7:ff:53:cd:38:ff:cf:
                    4a:b4:e9:ee:1e:de:49:79:24:a3:ea:ee:44:e4:ff:
                    c6:bc:2a:46:8d:72:84:15:27:66:35:71:0b:61:f8:
                    d6:a5:50:6b:5f:af:5e:e8:bc:95:24:d3:4f:a4:a0:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:9A:02:93:1A:C5:3F:12:8B:F1:B1:09:1C:BD:AD:4D:2D:B6:53
            X509v3 Authority Key Identifier:
                keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:23:20:16:4e:9a:de:18:8f:20:89:d1:6e:24:f1:de:85:
         05:76:16:1e:28:ba:ca:f5:ac:cc:60:7f:63:3b:ca:1d:d5:40:
         ac:ad:3e:5f:a2:fa:6f:3e:4e:65:80:4a:68:4a:15:4b:5f:2a:
         51:4d:59:c6:2e:ea:64:52:07:e7:60:41:85:43:eb:2c:6d:09:
         df:30:59:65:1a:1d:d3:74:51:d4:92:62:ad:b4:db:b9:02:bf:
         a0:61:49:91:25:b0:6f:c6:ae:97:11:85:59:04:1b:3f:5c:aa:
         2e:ad:28:e8:91:ee:90:8e:62:90:b3:b4:a0:61:2a:97:88:fb:
         b6:1e:f6:a2:3c:ba:23:f0:b7:ba:8b:58:8e:90:b1:78:dd:02:
         0b:04:5f:37:99:e9:89:7e:5a:e3:16:c8:b7:89:02:d2:db:aa:
         4f:53:a5:43:2c:e3:46:21:76:fc:61:33:c1:09:90:ec:1a:fb:
         9f:7c:9c:f6:bf:d0:54:db:f1:fd:34:3a:d1:7f:c5:c1:7d:fc:
         53:e5:1b:8a:7b:f7:46:09:77:46:d8:3f:3e:c8:a0:97:1a:c4:
         8a:be:74:9a:fc:a2:8b:ae:b9:7c:aa:2f:8f:09:b7:4f:04:f2:
         aa:b6:59:71:27:ce:75:9f:77:8d:fe:0d:16:c7:4a:a3:30:cf:
         72:f5:4c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:40 2025 by rpki-client