Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File:                     qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier:          P4+2P4iILW0zb6gVW+yuwLnLwJqvPHKUX/R/NSEpnhQ=
Subject key identifier:   70:74:46:BA:B3:4B:1E:69:88:0C:0B:2E:53:9F:48:1C:AF:B4:DF:97
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer:       /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial:       019931241B17CA35816651A45E8426969F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number:          122E
Signing time:             Wed 10 Sep 2025 01:01:13 +0000
Manifest this update:     Wed 10 Sep 2025 01:01:13 +0000
Manifest next update:     Thu 11 Sep 2025 01:01:13 +0000
Files and hashes:         1: 1-9PbJd606SAcljFaDXOqMtimHsk.roa (hash: KXw8kntxbx0A19gUTumtpNuhW4BHiQmmsQFSl5B6ZYs=)
                          2: 2-vgpJwDsEY_VoNu8cnFA12khB8.roa (hash: iUnRP/l7HzWTkjMJX+R7OEZ9+tX6NbtdM3UPohuBzqw=)
                          3: 8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa (hash: g6jDxz/UxGzzizwSc5CDzUUAAjalGAWQr2yYfR64f7Y=)
                          4: Egh3cL0v2_H-TY-QEmnrWnX0arg.roa (hash: uAUHTXbdFEHAhORw9S54HkonrjueALJUqc4yeHLWHu8=)
                          5: TvcD9AMtT0yWtHonps0hocI3dlg.roa (hash: fuU4HZNYKHN5G71TXaO9NMKHsWQTf51zKQ44BmOWV1o=)
                          6: nSrKwFeL2JWJX-O6yRsJjMyenO4.roa (hash: T5rsVBpHF0FkBvtcb+csX6yuqxHhug7dklzF66IL7J0=)
                          7: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: YchQMnCAqhc5tKE2+YXghSpz/hAmtv68KKugQ4BSk5A=)
                          8: vEaBzwoEAwzosXDFzJLUwLp5Y64.roa (hash: P0SFRAVbYdQfuoozG6LdZarwkxJX0gGTe/XAuMu2MyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:24:1b:17:ca:35:81:66:51:a4:5e:84:26:96:9f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
        Validity
            Not Before: Sep 10 01:01:13 2025 GMT
            Not After : Sep 11 01:01:13 2025 GMT
        Subject: CN=707446bab34b1e69880c0b2e539f481cafb4df97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:5a:ae:ee:f2:4b:c8:30:fe:88:b4:ee:8e:
                    07:a9:b1:e5:02:5c:f2:34:81:38:13:04:a5:21:96:
                    18:5a:ea:5e:b7:f3:9d:1a:22:71:4f:e2:a0:fb:e2:
                    80:5b:0f:d7:72:69:85:43:1a:56:58:5e:61:c0:3c:
                    d8:08:f6:16:84:07:dc:66:fd:0a:15:e1:16:87:e5:
                    cd:f5:68:4c:8e:b7:0d:aa:84:3c:ab:5e:b0:89:06:
                    c9:fb:92:8d:9c:b4:6c:18:33:e7:d9:d2:79:a5:a1:
                    77:0b:ea:62:ba:45:e4:af:4b:1f:e1:13:96:1a:90:
                    41:37:57:2a:14:5a:f1:ae:51:4f:a9:21:03:e1:c7:
                    19:e6:f3:4f:b6:5e:27:d2:d1:17:25:ee:51:92:72:
                    55:34:89:c6:84:ee:4a:e4:63:29:e0:bc:ee:b7:25:
                    f3:3f:78:70:b7:d1:79:84:c4:fd:8a:af:b0:b0:ec:
                    72:ff:6b:6d:f3:66:2d:52:b5:2b:b5:6c:4c:93:68:
                    c6:6a:74:9d:5b:ca:cc:e1:a3:25:12:88:8f:ae:1f:
                    8c:33:dd:fd:07:1d:06:58:46:de:83:77:77:35:d0:
                    f5:73:1d:6b:69:76:75:23:6a:00:77:09:6f:c5:a3:
                    fe:82:ba:1f:6a:e4:77:17:2b:f4:ce:1d:26:ec:4b:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:74:46:BA:B3:4B:1E:69:88:0C:0B:2E:53:9F:48:1C:AF:B4:DF:97
            X509v3 Authority Key Identifier:
                keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:1c:e7:34:06:05:c8:d2:ce:37:2f:81:f3:ad:50:8e:48:e6:
         ae:b2:54:f4:6d:42:8f:d1:10:67:bb:2b:7c:b7:a7:18:ce:37:
         03:85:e1:66:0a:22:13:da:18:b5:0e:90:33:80:1c:e0:4c:c4:
         6c:34:3d:57:ee:66:bc:c8:77:b6:aa:d3:b2:bf:6c:6b:0c:3d:
         c3:6e:ec:7f:f0:38:c3:fa:08:f1:58:c1:32:76:5c:71:0d:07:
         05:35:0d:53:31:3c:c2:9a:f4:5e:30:c0:86:fd:2d:4c:64:67:
         1b:b7:58:a5:95:9e:d4:9a:79:c9:46:33:9f:fc:66:8e:95:a6:
         9b:4e:2e:78:d6:1b:eb:c0:88:c6:4d:42:2c:67:cf:18:14:9c:
         5a:4b:e8:33:91:c4:00:9c:a3:15:32:e7:eb:0c:f2:5f:c3:d2:
         a5:59:77:c6:fd:3a:d5:35:b1:55:88:32:a8:ec:3a:c7:5a:78:
         7f:d2:d4:f7:eb:dc:08:25:ff:87:6f:bd:44:a0:ce:cc:d0:81:
         42:72:21:49:3f:5f:28:d4:55:6e:a8:7e:41:b9:f2:4e:3c:6c:
         0d:77:c8:19:35:fc:78:54:fc:cf:e2:3f:5d:ce:4f:15:15:8d:
         56:7f:66:61:a8:bb:22:7b:da:94:8d:cc:00:17:e1:63:34:e9:
         66:4a:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:47:45 2025 by rpki-client