Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File:                     uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier:          7SZcRfMsOIx2YC2TTQZbjGUWO+caKbS0nd5NxPmA4wk=
Subject key identifier:   87:73:BD:FA:2D:93:81:33:4D:E1:0F:30:3C:77:11:0F:6E:88:C3:8F
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer:       /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial:       01992BFD92E0E805155629DD9246BEFBFB37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number:          1677
Signing time:             Tue 09 Sep 2025 01:01:02 +0000
Manifest this update:     Tue 09 Sep 2025 01:01:02 +0000
Manifest next update:     Wed 10 Sep 2025 01:01:02 +0000
Files and hashes:         1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
                          2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: 7M1G1UjLhW5HmXxVWaYGcuzMRPvdA7Qu/U/ao19HATw=)
                          3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:fd:92:e0:e8:05:15:56:29:dd:92:46:be:fb:fb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
        Validity
            Not Before: Sep  9 01:01:02 2025 GMT
            Not After : Sep 10 01:01:02 2025 GMT
        Subject: CN=8773bdfa2d9381334de10f303c77110f6e88c38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:c2:e3:d7:2a:4f:35:f7:c3:ba:d6:ea:a3:
                    9b:4d:48:c3:68:c5:4f:5c:7a:00:8c:13:f5:76:ff:
                    4e:b2:c7:62:4f:e6:97:e3:9b:ca:4b:ae:d6:ec:a6:
                    8c:27:cc:24:99:a1:cd:ca:67:1a:7f:52:49:d8:f6:
                    b6:2b:f6:ab:15:ee:d1:0a:df:24:a5:40:9d:13:1e:
                    98:e1:3f:69:1e:36:e7:3c:1b:69:35:0d:13:06:f8:
                    78:1e:c1:84:65:14:de:29:96:fe:cc:92:01:9b:6b:
                    10:5a:c2:75:6d:fb:fd:58:30:5c:0c:d1:90:d5:c8:
                    b5:8f:bb:d4:99:3a:1e:c1:4f:1a:68:87:95:93:a2:
                    63:fb:99:7c:df:99:9a:2f:90:01:72:a4:74:da:45:
                    00:f7:b7:bb:16:17:0b:fd:c2:34:87:49:a6:d9:3c:
                    26:a0:cb:fe:09:1f:0f:b1:ce:8e:46:55:20:5a:4a:
                    8f:cd:a7:8f:18:ea:d8:e9:6d:d5:e2:5b:b9:46:1f:
                    ff:7b:9f:98:db:03:d5:41:89:e0:56:88:45:c7:3d:
                    cc:19:94:86:e5:53:49:ca:89:55:bd:ef:89:f1:e0:
                    4d:83:b8:5c:4d:ba:65:e0:e2:7c:61:f7:67:5d:7b:
                    f6:41:8c:4d:da:8d:82:6c:1c:f5:f2:50:a5:ea:a3:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:73:BD:FA:2D:93:81:33:4D:E1:0F:30:3C:77:11:0F:6E:88:C3:8F
            X509v3 Authority Key Identifier:
                keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:c5:8f:19:a4:1d:b5:cf:c6:0d:47:10:83:34:1f:d2:ad:
         59:89:fe:f2:25:2b:2f:b9:9a:c3:e9:a1:99:47:ba:d2:7f:4a:
         86:99:2a:9a:39:16:fc:d6:cf:ce:75:3b:6c:1f:f8:37:fb:d4:
         86:d0:cf:40:d1:2a:0e:87:96:83:95:26:fd:92:62:bc:5a:3b:
         ca:14:34:21:5e:cb:8c:99:5d:77:3b:0a:5a:14:99:1c:80:78:
         d0:ab:89:32:82:f7:57:b5:4b:26:73:be:4b:15:65:7b:f7:6c:
         00:e8:d9:8a:98:9b:33:97:5f:75:e1:d0:6e:8c:91:8d:69:37:
         36:78:82:59:39:75:2b:21:0a:ab:fa:b5:12:5e:12:5a:fc:07:
         34:f9:2b:6e:47:d9:5a:19:fd:bc:9c:ce:dd:bb:3a:23:e1:85:
         b2:7a:b0:59:13:2e:c6:fc:75:8d:b0:8f:2f:b4:8e:c6:3a:20:
         35:4d:e5:76:39:5b:09:44:14:b9:79:2c:af:42:c8:4c:c5:50:
         a9:83:c7:7a:c4:b5:e5:30:56:86:5e:94:43:d8:cd:48:a1:bc:
         3d:1f:d4:df:1a:7e:7c:cd:4d:ed:99:48:93:a3:fe:b5:53:8f:
         92:7c:e7:68:f5:b3:89:c4:90:18:ce:d1:56:e7:f8:6f:d2:aa:
         e6:a3:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:12:44 2025 by rpki-client