Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
File:                     qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft (raw, json)
Hash identifier:          nkeUDi1T1GCd932nn8DmADy5jeeuRMj3eal5HZ5piVY=
Subject key identifier:   81:19:6F:55:45:D4:4C:24:E7:54:6D:42:47:D2:1E:BE:55:6E:1F:45
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Certificate issuer:       /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial:       01993BDE8AC1E071BCFFE62681F42247E1AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
Manifest number:          1683
Signing time:             Fri 12 Sep 2025 03:01:04 +0000
Manifest this update:     Fri 12 Sep 2025 03:01:04 +0000
Manifest next update:     Sat 13 Sep 2025 03:01:04 +0000
Files and hashes:         1: 16CgswubAdPMVdO4tgEfY5qKNrs.roa (hash: n5RFNLHwGdJjAY6bUd3g0velwE7SisBVqsbQRj3nQN0=)
                          2: XnHSd3VergE-5i8djUYaPVthHRw.roa (hash: uQ/MzKJnXoMvhw4GTUaONVGqEgrAqEMlJbP8etG5Lic=)
                          3: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl (hash: z2giSFVaISMrdDLkNbFXCAa+QYFL0gwzXT41k2XxSt8=)
                          4: rIq_k7twwBEbcOVYDic1qJC6tII.roa (hash: Tg0LY1U/RM7mfyNDRaQJFL93vVjMEcfzKcJNDGxepYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 21:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:3b:de:8a:c1:e0:71:bc:ff:e6:26:81:f4:22:47:e1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
        Validity
            Not Before: Sep 12 03:01:04 2025 GMT
            Not After : Sep 13 03:01:04 2025 GMT
        Subject: CN=81196f5545d44c24e7546d4247d21ebe556e1f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:8b:a4:cf:c1:f3:9d:fc:14:a1:0d:01:5a:
                    66:b1:8d:a1:f0:b7:af:b3:35:45:46:65:d7:72:40:
                    39:55:00:2f:82:fb:42:cd:55:f0:16:4e:6b:38:fe:
                    41:52:e2:64:ae:91:12:30:2e:06:db:7e:23:23:1a:
                    47:37:7d:07:b6:5f:2c:11:d3:c4:35:a0:15:3a:2a:
                    c9:02:10:85:b2:5f:01:c4:6c:19:86:36:9c:5e:ce:
                    02:f2:67:a2:c7:6b:c7:18:65:a7:ed:c1:9a:4e:90:
                    d2:cd:8f:09:da:e6:d0:01:7b:19:0d:4c:52:41:a8:
                    b2:05:b3:b1:73:04:66:dc:f6:6f:6f:01:fc:0f:00:
                    49:4b:26:ac:5e:a0:51:91:93:e2:0a:d1:15:a4:ae:
                    69:7f:9b:61:38:3a:c7:41:c0:57:c1:ea:c0:77:c6:
                    1e:51:2f:c8:77:2a:f0:00:79:ab:ce:60:0a:86:b4:
                    11:1b:98:75:0d:18:d1:03:94:aa:bd:fe:80:81:4f:
                    99:e1:e8:73:0d:ca:c1:1f:f4:0a:29:fb:39:b3:fd:
                    78:8c:e8:4c:a0:97:62:b3:d1:ee:9a:1d:80:43:9e:
                    0b:b3:a4:6e:6b:d3:ff:84:3f:42:21:3e:c9:f4:f0:
                    af:db:33:22:75:f9:58:7c:82:53:46:9a:8c:36:89:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:6F:55:45:D4:4C:24:E7:54:6D:42:47:D2:1E:BE:55:6E:1F:45
            X509v3 Authority Key Identifier:
                keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7b:0c:ac:88:45:b5:b1:15:54:fc:e0:85:47:a5:79:e1:98:
         73:50:c3:2a:8e:59:ee:8a:6b:5d:1e:a9:78:40:b7:ab:1d:9e:
         89:cf:9e:86:cb:6f:e1:29:00:41:c0:ff:29:e2:f1:8f:e1:be:
         d1:fe:6d:cb:5d:a6:ff:e7:54:70:e1:14:17:9e:bf:9d:26:fa:
         06:6a:f3:ce:16:6b:5c:b7:cb:05:e7:02:11:4c:9c:31:c7:d1:
         f5:d7:81:19:8c:8a:9c:60:1c:49:d0:99:5f:10:6b:79:c4:cc:
         60:f2:ad:76:1e:53:39:a3:01:22:e9:d8:6a:09:ff:20:6b:ee:
         39:22:ce:dd:3e:23:d4:f2:ee:6f:16:64:18:4d:bc:a2:b7:35:
         39:64:4e:e6:98:8c:e7:23:fa:da:10:25:e8:dc:79:9c:c7:5b:
         32:d5:00:65:9a:6d:ed:30:c3:69:5d:23:8e:15:af:ff:c3:8a:
         c1:98:9c:5a:dd:d1:32:e2:c3:fd:cd:4a:a0:0c:03:a0:58:d2:
         44:70:36:f0:75:b9:8f:ac:4a:d1:1c:0f:84:5f:d4:0f:3b:7e:
         9a:4b:a2:e9:4d:48:1f:2a:a7:43:53:b4:66:29:39:5b:af:97:
         ad:9c:eb:1c:29:0a:fc:a2:33:13:fd:f0:6a:8c:66:b2:e1:52:
         4e:4c:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 04:44:44 2025 by rpki-client