Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          90vnosP2hvK5Wfn8tEdKu8RtLcV9tYm3lcaqM8gQXds=
Subject key identifier:   BF:07:02:F5:69:A7:9F:73:68:C8:07:A0:A7:5B:27:D2:82:8D:9F:FB
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       01984588E20599C97DDABFA6E09E0B386C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 07:00:55 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:55 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:55 +0000
Files and hashes:         1: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=)
                          2: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=)
                          3: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: 6l66AkFPsOO5yWsm653CY2pVyTA9JWeyS09fwGtZJQ0=)
                          4: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=)
                          5: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=)
                          6: mFp3zFR1T75g9VSJshunQuImDjc.roa (hash: BipTnfO1xsn174nFqReyWGJxlVEfgezqCBk9woA8CoY=)
                          7: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:e2:05:99:c9:7d:da:bf:a6:e0:9e:0b:38:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Jul 26 07:00:55 2025 GMT
            Not After : Jul 27 07:00:55 2025 GMT
        Subject: CN=bf0702f569a79f7368c807a0a75b27d2828d9ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:b2:f3:bb:e1:90:49:a1:ae:8e:71:97:a5:
                    48:94:9b:28:b8:ad:08:76:68:94:3f:7e:d6:d8:c5:
                    e3:5b:17:32:e8:8c:62:af:97:74:80:89:00:34:b9:
                    49:b3:e5:75:61:d7:bd:df:cd:ea:d2:bc:89:b9:51:
                    ad:5b:99:5e:cd:07:fe:0d:36:65:bb:ad:4c:d4:08:
                    70:9b:51:3b:71:ea:a2:7c:9d:53:00:d9:91:ab:28:
                    d0:fc:8b:55:de:85:8d:22:d8:29:f6:5d:0f:39:0b:
                    1f:6c:4e:25:0f:59:d6:20:7e:b0:9d:1b:04:f5:5f:
                    e6:0e:b8:38:e0:df:b2:bb:50:ed:e0:4d:b6:5d:52:
                    71:f3:41:bb:6d:07:2c:31:4e:d6:d6:99:41:8f:fe:
                    68:42:66:e5:f8:84:2a:5a:60:7b:a2:c8:63:4b:2f:
                    d5:52:07:f6:16:dd:1e:32:34:a5:0e:8c:5b:60:8f:
                    37:9a:0a:13:2e:f4:de:c7:e0:8f:5c:fc:e9:89:20:
                    91:cf:f2:25:08:66:47:47:63:13:b8:ec:31:09:cd:
                    cd:b2:7b:e4:b7:49:51:5a:34:6f:e1:39:25:7d:4c:
                    fb:80:3a:40:6d:2b:81:95:f4:42:17:9e:54:12:c2:
                    8f:2d:f9:4b:31:84:b9:b7:1a:53:41:a1:5a:44:52:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:07:02:F5:69:A7:9F:73:68:C8:07:A0:A7:5B:27:D2:82:8D:9F:FB
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:30:07:59:7f:d5:44:62:77:21:d6:ff:15:7e:6c:e0:77:07:
         e7:80:36:b7:be:32:71:36:a7:ed:b1:9b:23:ca:c2:ad:46:89:
         97:bb:2c:da:4e:7a:ff:53:f8:7e:2e:d5:0c:2b:4b:1a:a5:d9:
         83:8a:4b:52:a8:12:01:11:db:2a:1a:ae:44:d7:74:f9:03:d5:
         58:85:8b:47:52:98:2a:ce:ec:cc:f4:05:1e:da:3e:66:90:e5:
         b6:87:43:d5:1f:27:fa:af:f7:88:d9:ef:85:1e:27:3c:61:16:
         c9:61:a6:de:20:43:32:c4:a6:c1:58:cb:4a:4e:fe:f8:88:0a:
         2d:92:79:86:d3:0c:ec:ec:7d:37:f2:19:a2:8f:66:3d:4f:c3:
         cd:42:ca:b0:88:ae:df:5c:d0:06:a8:74:50:5a:4f:5f:5f:8b:
         93:11:c7:40:56:2c:ca:2d:9a:45:6a:d7:12:96:fd:89:ad:fc:
         8e:ab:24:61:ba:55:f1:b4:03:ce:e3:4f:2f:bb:c7:a2:97:d0:
         22:9b:9e:bc:3d:06:a2:75:4b:d3:07:0e:45:85:7f:2a:ed:52:
         90:63:cb:da:63:71:fd:a3:1b:d9:d4:f6:53:d9:79:85:fa:e3:
         3d:18:9c:61:d6:cb:b2:b6:59:0d:17:3a:f8:b0:67:c2:2d:f3:
         65:14:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:50 2025 by rpki-client