Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File:                     QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier:          2fhTS1thEL1BJRpa19tLcX5R3aq1jdz1xKWKJCC7ElM=
Subject key identifier:   00:FC:40:94:C4:76:85:8B:B3:49:2E:1C:05:8F:95:3B:66:BE:D9:E6
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer:       /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial:       019839F269C7A87029BBAE1EA2292395C41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number:          1600
Signing time:             Thu 24 Jul 2025 01:00:44 +0000
Manifest this update:     Thu 24 Jul 2025 01:00:44 +0000
Manifest next update:     Fri 25 Jul 2025 01:00:44 +0000
Files and hashes:         1: 0UiMAD3K1Vd_o1ukey_EamOgfsg.roa (hash: /lgJM2bqi/sUpmdCb7crrQqVayvXqEJ8evDSByU3DJU=)
                          2: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: 8Zz2DTEYM3+Oqy7E6CVCD4EPVmM+GKvWM96VhMyPtAs=)
                          3: aVnXSxl3A9imF58Ni6PA9o97Lt0.roa (hash: 1b03aGZyiDI4vZq8xAQwMk9wWsMeLl0pjrQrWqhenxw=)
                          4: misEsljA75nAA5oIsh_k4GVCg4w.roa (hash: p4BzWp3j9j27Wjuz+V0a+txHqIiOhQ+ybn3eqzzf6rU=)
                          5: ujK7196Gk_c3ddVaz2vNjb1yuKM.roa (hash: oPbTKsm4Ke6sVA27ztN+8OGkGTX5DqK9hqJSWTYFs3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:f2:69:c7:a8:70:29:bb:ae:1e:a2:29:23:95:c4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
        Validity
            Not Before: Jul 24 01:00:44 2025 GMT
            Not After : Jul 25 01:00:44 2025 GMT
        Subject: CN=00fc4094c476858bb3492e1c058f953b66bed9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:cc:a5:68:9f:c3:b0:78:05:11:24:68:e5:
                    6a:1c:1c:a1:d2:a1:6f:f7:11:9e:0b:46:9f:54:89:
                    b2:86:b9:a0:a7:90:01:bb:2e:52:b9:9e:ad:b4:14:
                    6e:2b:51:80:1c:6f:00:6a:9e:8f:c8:5d:3e:3b:08:
                    2e:43:2e:f2:f7:24:99:5c:6e:a8:18:63:d2:c9:a2:
                    5a:e8:0c:e8:d0:30:d9:5c:71:16:b0:12:4c:6f:c2:
                    71:7c:00:5b:fb:a6:d9:81:59:9e:4b:01:19:8b:cc:
                    df:31:ae:b5:91:36:3b:09:0d:ac:16:c9:6f:4d:bd:
                    1e:eb:3a:62:e9:6b:84:0c:81:09:c3:34:b0:b1:41:
                    75:f4:27:b2:d1:db:1a:b1:a0:92:82:7e:1b:10:cf:
                    fe:a3:b3:87:e5:0e:32:d2:93:5e:c4:f4:ca:48:b9:
                    6d:f2:02:09:87:07:11:e1:a2:22:be:3b:51:c9:ec:
                    60:5c:b5:d7:83:05:37:5a:17:7e:eb:46:86:75:8c:
                    50:57:0c:9f:cd:a7:fc:86:c3:7d:46:e8:d2:f4:72:
                    32:18:5c:dd:17:06:65:5d:57:93:a9:02:38:ff:df:
                    bf:8f:5d:23:e7:65:95:f6:86:e1:11:88:3e:38:d7:
                    7c:1f:de:ed:4f:62:21:9b:b8:5c:50:ea:5e:3a:1a:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:40:94:C4:76:85:8B:B3:49:2E:1C:05:8F:95:3B:66:BE:D9:E6
            X509v3 Authority Key Identifier:
                keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:34:9a:67:84:3b:3a:2f:44:6c:c7:39:4f:6e:ca:95:49:e1:
         25:6f:69:92:55:c8:5b:1c:a8:4e:19:d1:8b:48:f8:f3:e7:a5:
         73:af:a5:6d:14:8c:eb:dc:66:dc:a8:2e:67:68:68:50:6d:d3:
         6c:68:51:68:e4:ca:63:5b:2f:be:31:0d:4e:c0:7f:da:5b:a6:
         2b:74:46:ae:f7:52:26:c4:13:b0:44:bc:7e:ae:7f:79:06:d7:
         2a:97:e4:f3:42:45:c4:67:9a:33:73:c9:7c:5b:f9:0b:51:b3:
         b1:06:3e:40:9a:44:96:1f:75:e0:1c:be:9d:98:c6:46:d9:0c:
         86:79:42:e2:e7:88:b5:4b:a8:54:6b:39:2a:a8:38:17:3b:3d:
         ea:70:48:96:e3:60:8c:93:71:40:99:67:ae:cd:ad:cb:1b:dc:
         33:df:9b:9f:22:05:48:c4:9b:89:8f:ac:2c:c5:7f:eb:24:46:
         70:c7:e6:66:eb:6c:3e:45:44:2c:42:5f:e4:ad:cb:0e:ad:c4:
         85:c4:7c:c9:71:9b:09:79:b7:0d:eb:5d:49:6b:06:10:5f:af:
         40:ba:40:1f:c0:ec:bd:f1:39:86:09:ed:c6:dc:cf:3e:23:a7:
         09:13:4d:68:6c:6b:db:ec:8d:b8:0a:4a:4c:a9:b9:aa:1a:c7:
         55:bd:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:15:17 2025 by rpki-client