Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
File:                     qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json)
Hash identifier:          sFrW5+Xgx89ulxSshQdcY/WLXpfXQeDldlaR2TWSPfk=
Subject key identifier:   5D:B1:BD:B6:B1:B0:98:6C:CA:04:64:BF:44:E3:75:35:AE:DC:9D:2D
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Certificate issuer:       /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial:       0199161A87D6B3B3682495985F4D298A161A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
Manifest number:          0D7C
Signing time:             Thu 04 Sep 2025 19:01:01 +0000
Manifest this update:     Thu 04 Sep 2025 19:01:01 +0000
Manifest next update:     Fri 05 Sep 2025 19:01:01 +0000
Files and hashes:         1: 3FxUxvyalEPW74QSSmy9O2QWzSA.roa (hash: K7i9DvkPZQGo1B9Tr53E+YnX3gzSBh7iAMkmSak9hOM=)
                          2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: ESal/BilOwJvSWQr1L3r/GOpBVnId0Cdbvg5/h9uLwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:1a:87:d6:b3:b3:68:24:95:98:5f:4d:29:8a:16:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
        Validity
            Not Before: Sep  4 19:01:01 2025 GMT
            Not After : Sep  5 19:01:01 2025 GMT
        Subject: CN=5db1bdb6b1b0986cca0464bf44e37535aedc9d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:85:b6:a3:d1:a1:07:74:02:0d:94:39:90:9c:
                    e2:7e:2f:ec:12:d7:ce:46:29:16:33:9b:77:fd:8d:
                    6c:46:29:ad:62:8f:1d:2d:f5:a0:fe:43:14:c1:2a:
                    af:06:f4:4e:f7:55:09:06:61:5b:be:65:7c:96:35:
                    fd:75:47:36:cd:bd:c9:67:59:f4:ca:a4:88:c8:49:
                    70:a9:11:7e:65:74:6f:d5:72:c4:35:44:65:e5:51:
                    14:a1:ff:78:1b:45:2a:30:65:b2:8b:ca:7c:6a:c7:
                    7b:43:17:d0:39:fa:86:9d:ac:33:4c:aa:bb:8e:17:
                    02:43:e4:72:27:ff:78:ba:57:84:a3:21:46:01:18:
                    70:22:b0:89:bd:2e:a2:a4:c4:9d:a6:ed:2e:1b:51:
                    fd:85:23:ab:40:86:84:33:80:d2:b2:33:3b:fe:f9:
                    53:aa:9d:2b:d5:d0:0b:4c:8c:13:58:78:c8:6b:1e:
                    f5:d5:08:51:a1:ff:56:90:44:d1:a8:2c:4a:1d:2f:
                    3d:54:7c:6e:3d:10:d0:c2:07:e5:08:05:87:9a:38:
                    c3:52:36:ea:b2:c7:57:c9:e2:e5:54:69:15:8c:14:
                    05:06:2b:63:5f:30:39:a5:1d:35:f3:41:b2:60:ec:
                    e7:2c:72:6f:60:ec:ca:8f:18:2a:ed:6b:4e:11:73:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:BD:B6:B1:B0:98:6C:CA:04:64:BF:44:E3:75:35:AE:DC:9D:2D
            X509v3 Authority Key Identifier:
                keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:51:3a:2f:39:dd:76:a2:f8:da:3e:ad:1f:b8:e9:6e:92:e1:
         92:5c:85:96:c0:40:f6:7a:cb:13:1f:52:4f:55:6b:88:0c:fa:
         5f:b6:64:ad:cc:21:5f:20:5b:a1:61:6a:cb:36:4b:31:9a:bb:
         a8:82:4f:b3:bb:4a:21:c2:5c:d5:c0:38:a3:67:04:73:70:88:
         eb:9f:ba:ab:31:ca:5b:65:93:49:9d:33:8f:76:08:e5:8e:70:
         04:96:d2:03:d9:1f:98:3a:42:a4:5f:ae:a9:03:99:bc:0a:61:
         df:d6:10:50:89:a1:1e:8a:06:e5:b5:7a:47:a9:ad:8e:a1:5a:
         ba:5a:82:fb:aa:46:5e:77:73:fb:a4:e6:24:10:9e:af:24:7b:
         da:e8:fc:a0:b4:51:6b:b0:5a:5b:89:cc:a7:74:3c:06:47:4c:
         15:24:ae:af:de:1a:c6:8d:ed:83:32:28:e1:7a:34:2f:5c:b0:
         77:fb:5e:2f:71:50:68:e9:5a:96:39:ec:0d:ed:28:d1:02:b4:
         fd:c6:7e:8a:41:36:6b:65:c0:57:6a:b4:5c:3e:2e:3a:bc:96:
         38:78:d1:b1:0c:d6:38:a2:c1:31:78:6f:3f:c7:04:19:95:b6:
         90:fe:02:c2:e1:cf:46:84:d2:e9:40:47:9f:bd:61:58:9c:13:
         31:d4:90:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWGofWs7NoJJWYX00pihYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhY2E0ZjRhNzM3ZWMwOWYzMzVhYzQwNjMzMTMzMzI4MjEz
ZWZjM2QwHhcNMjUwOTA0MTkwMTAxWhcNMjUwOTA1MTkwMTAxWjAzMTEwLwYDVQQD
Eyg1ZGIxYmRiNmIxYjA5ODZjY2EwNDY0YmY0NGUzNzUzNWFlZGM5ZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34W2o9GhB3QCDZQ5kJzifi/sEtfO
RikWM5t3/Y1sRimtYo8dLfWg/kMUwSqvBvRO91UJBmFbvmV8ljX9dUc2zb3JZ1n0
yqSIyElwqRF+ZXRv1XLENURl5VEUof94G0UqMGWyi8p8asd7QxfQOfqGnawzTKq7
jhcCQ+RyJ/94uleEoyFGARhwIrCJvS6ipMSdpu0uG1H9hSOrQIaEM4DSsjM7/vlT
qp0r1dALTIwTWHjIax711QhRof9WkETRqCxKHS89VHxuPRDQwgflCAWHmjjDUjbq
ssdXyeLlVGkVjBQFBitjXzA5pR0180GyYOznLHJvYOzKjxgq7WtOEXPA0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2xvbaxsJhsygRkv0TjdTWu3J0tMB8GA1UdIwQY
MBaAFKrKT0pzfsCfM1rEBjMTMyghPvw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDct
MzM0ZTZmMzMyMTgwLzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDctMzM0ZTZmMzMyMTgw
LzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFE6Lznd
dqL42j6tH7jpbpLhklyFlsBA9nrLEx9ST1VriAz6X7ZkrcwhXyBboWFqyzZLMZq7
qIJPs7tKIcJc1cA4o2cEc3CI65+6qzHKW2WTSZ0zj3YI5Y5wBJbSA9kfmDpCpF+u
qQOZvAph39YQUImhHooG5bV6R6mtjqFaulqC+6pGXndz+6TmJBCeryR72uj8oLRR
a7BaW4nMp3Q8BkdMFSSur94axo3tgzIo4Xo0L1ywd/teL3FQaOlaljnsDe0o0QK0
/cZ+ikE2a2XAV2q0XD4uOryWOHjRsQzWOKLBMXhvP8cEGZW2kP4CwuHPRoTS6UBH
n71hWJwTMdSQzQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:15 2025 by rpki-client