Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File:                     qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier:          Lf2Ga5duQcxCOGCuHaBeCKHopz4GlPjNG9cEOC5Aw4U=
Subject key identifier:   7A:AF:9E:A1:0B:82:A9:08:C4:F8:20:E6:8D:E0:8C:0B:10:DF:F5:8D
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer:       /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial:       01995A8D34505E4F9BA8FE7DA8966914A96F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number:          122B
Signing time:             Thu 18 Sep 2025 02:00:27 +0000
Manifest this update:     Thu 18 Sep 2025 02:00:27 +0000
Manifest next update:     Fri 19 Sep 2025 02:00:27 +0000
Files and hashes:         1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
                          2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: qVZ7kkMSrXhtRG1So4GARabuiu5ymSO0HK8AqmJ8Fz4=)
                          3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
                          4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5a:8d:34:50:5e:4f:9b:a8:fe:7d:a8:96:69:14:a9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
        Validity
            Not Before: Sep 18 02:00:27 2025 GMT
            Not After : Sep 19 02:00:27 2025 GMT
        Subject: CN=7aaf9ea10b82a908c4f820e68de08c0b10dff58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:15:3e:63:02:c6:89:de:3f:9b:b8:5a:d8:
                    4b:d5:35:86:0a:5b:03:db:af:09:a0:25:d8:f9:3d:
                    af:1c:43:32:dc:ed:7f:58:32:c3:f5:28:80:9d:ef:
                    e7:a7:69:ac:1f:cf:3a:be:03:01:3d:f7:76:59:b4:
                    7d:eb:af:71:fa:2c:f3:1c:86:60:48:dc:35:05:9c:
                    63:84:09:b9:d3:2e:5a:21:fa:51:29:f4:78:f5:0a:
                    34:d6:6b:43:49:91:98:0a:b2:f2:64:06:c0:f5:43:
                    f4:4d:b0:3d:8f:a2:6e:39:f2:b6:de:6e:1a:0e:d6:
                    c1:2b:5b:45:33:b8:85:e9:08:7d:0f:df:21:a1:45:
                    06:d0:ba:9d:d5:36:08:86:77:69:ef:6c:85:a0:da:
                    37:e3:09:8c:6e:fb:48:cd:2b:20:18:64:88:8e:10:
                    39:ad:c7:2b:7d:52:3f:cf:3d:9d:24:6d:ec:3a:60:
                    56:75:00:c8:a5:35:0e:b4:f5:2c:90:c1:48:e4:e9:
                    43:71:cf:80:83:39:e2:1e:8d:ca:13:8e:79:1e:14:
                    04:ae:44:00:f8:07:66:f4:39:39:57:af:18:b1:9f:
                    db:29:e3:26:4b:05:69:33:0a:56:15:d2:62:e8:5d:
                    a0:ea:21:5f:45:77:06:b2:af:ef:75:88:15:69:8e:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AF:9E:A1:0B:82:A9:08:C4:F8:20:E6:8D:E0:8C:0B:10:DF:F5:8D
            X509v3 Authority Key Identifier:
                keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:67:f8:7d:ef:6d:49:f8:d4:02:09:80:12:a7:f1:cb:46:92:
         7e:35:b1:3c:28:8e:8f:11:3c:06:b0:37:d2:51:24:97:12:96:
         40:99:34:3e:64:6e:f9:80:7e:f8:1a:db:5f:de:a9:01:44:b6:
         d7:12:7b:eb:c4:2b:c0:48:8f:3a:76:05:60:8c:62:4b:f0:aa:
         f1:03:59:c1:9b:bd:01:b2:fe:f4:c5:99:91:af:84:bc:0a:58:
         7e:b7:5d:50:eb:ae:04:13:7b:99:74:9d:4d:95:e4:0e:f6:09:
         25:09:5c:80:40:19:5a:3f:0c:18:6f:f8:aa:89:df:97:14:70:
         09:68:e4:a0:94:f1:be:e4:24:83:69:11:9a:dc:a7:08:e3:16:
         77:fe:a2:38:08:37:1c:e6:fd:e9:a4:e3:35:6b:2d:09:b2:89:
         16:f9:35:b3:6b:63:f8:7c:a9:1b:13:87:05:68:ae:05:16:50:
         3c:97:a9:73:2a:63:cf:ad:0d:19:5d:99:0a:42:c4:67:fc:cd:
         e7:9e:00:04:9e:30:55:bd:7d:5c:e7:78:6b:7c:0f:87:49:5e:
         94:58:4f:75:6a:e4:f6:c7:b2:0f:83:10:5e:a6:11:e6:17:11:
         e1:ad:35:77:87:b1:65:eb:96:a6:da:53:64:8a:7d:03:90:23:
         59:50:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:32:58 2025 by rpki-client