Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File:                     QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier:          tQBk6V0uTG5G/PqdDPC6xClAWwfbhf+MpJzVGYkNLk0=
Subject key identifier:   FB:D4:37:F5:4E:49:BD:90:71:3F:62:13:F3:8C:7B:6F:23:0E:55:56
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer:       /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial:       01992632395CCD7F517A0E597F076CE3F199
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number:          1676
Signing time:             Sun 07 Sep 2025 22:00:49 +0000
Manifest this update:     Sun 07 Sep 2025 22:00:49 +0000
Manifest next update:     Mon 08 Sep 2025 22:00:49 +0000
Files and hashes:         1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=)
                          2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: bhe20n0rTiTRFMYYqGTPSIcX8e5SDfk8luP7xt+cpN8=)
                          3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=)
                          4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:26:32:39:5c:cd:7f:51:7a:0e:59:7f:07:6c:e3:f1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
        Validity
            Not Before: Sep  7 22:00:49 2025 GMT
            Not After : Sep  8 22:00:49 2025 GMT
        Subject: CN=fbd437f54e49bd90713f6213f38c7b6f230e5556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:48:25:e3:48:9a:36:2a:40:6e:2b:b4:d1:
                    49:06:47:19:f4:86:5c:eb:f0:ea:b9:4d:56:0f:fa:
                    58:db:d8:16:09:c7:be:2f:30:56:f9:97:f9:cf:97:
                    41:72:40:8c:c3:5a:92:b6:c1:d9:90:79:69:fa:82:
                    da:d1:bc:19:ab:32:50:e3:ce:4e:a3:88:4c:ad:5f:
                    bd:40:ac:da:ea:52:b9:64:67:6a:2d:ab:23:4e:06:
                    08:da:4c:dc:f3:ab:9c:81:2e:03:e7:ab:4b:d1:7b:
                    7b:4e:79:e5:fb:d7:66:3e:f1:03:39:82:dd:22:ce:
                    46:8b:2a:11:09:96:86:79:1c:c0:99:12:b5:5b:db:
                    e0:74:20:77:c7:ff:76:f9:ef:2c:d4:bd:17:ee:b6:
                    ca:31:37:f0:dd:10:57:8f:06:43:c1:16:4f:59:43:
                    bc:f2:31:42:e7:35:ab:ce:bd:56:b3:c6:07:7d:40:
                    fe:bd:b0:15:91:2a:40:ec:2e:03:63:27:5b:2d:66:
                    ac:c0:6b:4e:fd:84:e9:55:07:0b:23:18:9a:90:cd:
                    e4:f8:92:d4:7d:e4:12:00:b9:e9:ab:ca:de:31:59:
                    ef:a0:6e:3f:1d:7b:24:0c:fc:83:fc:a9:e2:c4:7a:
                    bf:5b:25:2c:c8:5d:05:f5:6e:d3:aa:96:9d:d9:4f:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D4:37:F5:4E:49:BD:90:71:3F:62:13:F3:8C:7B:6F:23:0E:55:56
            X509v3 Authority Key Identifier:
                keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7b:0f:2a:34:6a:1b:0a:a2:7e:01:d8:99:23:2c:03:e6:e0:
         0f:07:c3:fe:66:63:82:3a:71:47:d4:4c:e3:f5:48:2a:68:a1:
         26:34:bb:ce:ff:ae:2e:c7:66:7a:b1:19:b9:26:c8:42:9c:66:
         d6:d2:46:6a:51:cd:4c:c2:97:5d:08:c0:65:86:0c:49:10:eb:
         c2:7d:4d:7b:52:78:c1:39:68:7f:5b:a1:06:3c:f6:67:ba:1f:
         9f:3d:80:91:e9:f3:26:31:1a:6c:2f:db:a8:90:ee:6e:06:1b:
         9b:5e:af:f0:0d:77:6c:7e:2c:b6:0a:3a:b4:d3:db:a7:1d:b4:
         2f:2a:47:9c:db:07:b4:6c:3e:d7:c2:96:90:dd:c4:ef:97:45:
         b7:da:e5:94:9a:33:9c:d9:2a:3b:5f:bd:f1:2f:d4:eb:2f:5c:
         10:f9:25:0f:d6:2e:d0:62:46:34:51:0a:80:50:89:6e:60:b1:
         74:cd:c0:68:bc:6e:8b:7b:65:bd:6c:0e:a7:ed:b9:11:1e:7c:
         e4:72:4f:58:05:32:f5:b5:16:95:8b:0c:03:a3:fa:7a:bc:a8:
         93:9f:a9:3c:5f:7a:f8:3b:c0:24:12:7b:ef:af:74:9e:98:6c:
         9b:93:47:b9:f2:a4:78:b9:66:d6:ce:b6:6e:d0:8f:63:17:67:
         20:5b:40:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkmMjlczX9Reg5Zfwds4/GZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzYzZGIxZWQzMzRhN2M1MjgwYWI5ODU0NzQyOTE0YWUw
YzRjNTIwHhcNMjUwOTA3MjIwMDQ5WhcNMjUwOTA4MjIwMDQ5WjAzMTEwLwYDVQQD
EyhmYmQ0MzdmNTRlNDliZDkwNzEzZjYyMTNmMzhjN2I2ZjIzMGU1NTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi45IJeNImjYqQG4rtNFJBkcZ9IZc
6/DquU1WD/pY29gWCce+LzBW+Zf5z5dBckCMw1qStsHZkHlp+oLa0bwZqzJQ485O
o4hMrV+9QKza6lK5ZGdqLasjTgYI2kzc86ucgS4D56tL0Xt7Tnnl+9dmPvEDOYLd
Is5GiyoRCZaGeRzAmRK1W9vgdCB3x/92+e8s1L0X7rbKMTfw3RBXjwZDwRZPWUO8
8jFC5zWrzr1Ws8YHfUD+vbAVkSpA7C4DYydbLWaswGtO/YTpVQcLIxiakM3k+JLU
feQSALnpq8reMVnvoG4/HXskDPyD/KnixHq/WyUsyF0F9W7Tqpad2U/tLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvUN/VOSb2QcT9iE/OMe28jDlVWMB8GA1UdIwQY
MBaAFEF2PbHtM0p8UoCrmFR0KRSuDExSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMt
NDljOTVlZWFjODEyLzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMtNDljOTVlZWFjODEy
LzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3sPKjRq
GwqifgHYmSMsA+bgDwfD/mZjgjpxR9RM4/VIKmihJjS7zv+uLsdmerEZuSbIQpxm
1tJGalHNTMKXXQjAZYYMSRDrwn1Ne1J4wTlof1uhBjz2Z7ofnz2AkenzJjEabC/b
qJDubgYbm16v8A13bH4stgo6tNPbpx20LypHnNsHtGw+18KWkN3E75dFt9rllJoz
nNkqO1+98S/U6y9cEPklD9Yu0GJGNFEKgFCJbmCxdM3AaLxui3tlvWwOp+25ER58
5HJPWAUy9bUWlYsMA6P6eryok5+pPF96+DvAJBJ77690nphsm5NHufKkeLlm1s62
btCPYxdnIFtADQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 03:21:14 2025 by rpki-client