Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File:                     qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier:          Xji0StcmuALtJ3Fn1JUNBtk5yAvzyY97m1GnnFjvmDA=
Subject key identifier:   80:8B:38:27:FB:DE:FA:7E:D7:66:16:9E:48:8A:A9:D0:E6:40:DB:93
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer:       /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial:       019931246D73660F39529CCF7186CBDF6C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number:          1679
Signing time:             Wed 10 Sep 2025 01:01:34 +0000
Manifest this update:     Wed 10 Sep 2025 01:01:34 +0000
Manifest next update:     Thu 11 Sep 2025 01:01:34 +0000
Files and hashes:         1: USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa (hash: W3xrS1zgc7QMM+ux8ilDAtn6lUWxhEYKoHwrzSB4Kb8=)
                          2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: ZOFPKHzSKG/atH5aljh63ihBm7OCeoD9Y3hv/NXlcHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:24:6d:73:66:0f:39:52:9c:cf:71:86:cb:df:6c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
        Validity
            Not Before: Sep 10 01:01:34 2025 GMT
            Not After : Sep 11 01:01:34 2025 GMT
        Subject: CN=808b3827fbdefa7ed766169e488aa9d0e640db93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:cc:37:5c:fd:ae:83:be:23:e1:f6:0c:c9:
                    fc:59:28:4d:ac:93:b4:0e:2a:3a:ee:88:23:5f:71:
                    d0:85:0c:80:cd:6b:f9:cc:90:75:44:80:78:1d:80:
                    71:a2:89:86:af:2f:67:8b:2a:9c:07:6e:f2:16:24:
                    55:02:78:90:75:79:35:cc:06:b5:ac:0f:88:2f:0e:
                    87:69:59:b6:e8:9b:34:97:8a:a8:91:c3:8a:af:f7:
                    44:58:5b:8a:c8:f9:ea:c5:4d:31:c3:4e:1a:57:c8:
                    ad:09:b0:4d:22:66:54:2c:8f:03:64:7d:b2:fa:8f:
                    d3:a9:77:45:58:69:99:b6:a5:f1:14:99:ec:bd:8b:
                    49:75:4b:4e:b5:07:15:07:88:39:bb:bf:ee:cd:fe:
                    99:38:b8:ac:c0:35:a6:f9:7f:61:d0:b4:59:c3:bd:
                    50:8c:56:07:6b:9b:3d:2c:d4:d8:78:f2:1f:3a:8f:
                    d5:23:08:e5:b6:d4:65:f9:3c:df:e4:08:a6:77:0d:
                    54:93:0d:ea:9a:a1:6f:49:2b:cd:b6:9f:5f:4b:63:
                    82:85:57:21:2b:89:ed:34:8d:5b:a8:93:3a:07:d4:
                    b2:d3:92:8c:bf:4a:38:c2:84:b7:c0:73:44:69:cc:
                    58:4f:ee:11:ea:24:bb:e4:2b:f6:88:07:0b:9b:92:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8B:38:27:FB:DE:FA:7E:D7:66:16:9E:48:8A:A9:D0:E6:40:DB:93
            X509v3 Authority Key Identifier:
                keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:35:fd:1d:e0:d0:4f:de:35:7f:09:90:10:86:6c:b7:c4:
         99:23:94:2d:09:7e:76:e6:53:8b:20:4e:41:ab:b8:a2:25:be:
         62:68:8c:45:17:47:11:93:d3:39:a0:4f:d0:6a:ab:d2:9b:42:
         75:8e:3d:0a:3c:69:8e:6c:3f:94:3e:fc:33:ca:0e:f1:36:52:
         6c:23:13:1a:e1:fb:d7:ba:80:df:b1:4b:61:49:5a:11:cd:00:
         6f:9c:41:f5:55:5a:51:27:c3:0e:cb:59:29:c0:ca:d4:49:f9:
         6e:de:c4:c4:e2:bd:c7:a1:15:8d:8f:c2:14:0c:24:3f:96:c8:
         ef:07:77:ba:ee:e3:d1:9f:e4:c6:a7:91:e6:05:5a:04:79:e7:
         73:e9:e2:b3:51:45:9c:f2:0b:8c:fa:49:62:98:c2:2a:47:3a:
         bb:78:aa:30:ac:d6:67:32:12:1a:37:da:bd:d4:f3:b6:da:1f:
         46:97:f9:e8:44:2b:f9:ef:33:a4:42:87:c6:e9:58:9c:58:aa:
         54:4f:a8:1a:a7:54:f8:88:68:6e:80:fd:a0:83:01:96:92:86:
         bb:31:52:1c:c5:e6:a5:52:9c:58:52:a2:86:6f:b7:ad:66:48:
         0a:bf:b9:14:c0:ce:b5:18:f8:93:67:f4:9e:4c:c9:da:1b:96:
         ed:59:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:42:01 2025 by rpki-client