Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File:                     cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier:          fu63EbWzXHdG9X3PPB4UIGyO65T0hDYV9/ifBQM4OVQ=
Subject key identifier:   49:FD:DB:ED:5E:7D:AE:C1:24:F1:DF:F0:43:40:6B:36:FC:49:A3:ED
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       0199301131087CA883675C0DBE2A150EF98C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number:          100E
Signing time:             Tue 09 Sep 2025 20:00:56 +0000
Manifest this update:     Tue 09 Sep 2025 20:00:56 +0000
Manifest next update:     Wed 10 Sep 2025 20:00:56 +0000
Files and hashes:         1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=)
                          2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: qNXV1eWea33WelFT4Nr5ldqEERXx6nuLk1y5+He1pqI=)
                          3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=)
                          4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:11:31:08:7c:a8:83:67:5c:0d:be:2a:15:0e:f9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: Sep  9 20:00:56 2025 GMT
            Not After : Sep 10 20:00:56 2025 GMT
        Subject: CN=49fddbed5e7daec124f1dff043406b36fc49a3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d2:b6:8b:a0:0c:a0:82:66:c4:d7:c9:44:0a:
                    80:fb:fb:f6:15:40:1f:c3:6a:16:25:47:b7:b6:6c:
                    e6:15:a4:8a:05:fe:34:6c:50:27:bd:a1:de:65:e3:
                    12:a2:12:79:c1:be:e1:96:6b:ca:cc:0f:37:21:f1:
                    6f:cc:23:8f:95:09:ba:6b:fa:49:37:fa:4d:f8:72:
                    59:52:e3:fd:3b:73:7c:79:58:c1:d9:63:b0:7c:9e:
                    9d:70:98:ea:41:38:66:8b:2f:11:e5:3c:12:98:f1:
                    70:2a:af:16:ee:e4:ca:51:ba:95:c8:8e:0b:9e:d5:
                    cf:41:27:4b:f0:9b:77:cf:cc:03:91:86:21:63:63:
                    9d:a2:e1:9a:2b:2d:11:50:0f:7d:c1:53:ce:32:74:
                    79:31:7d:17:16:71:2a:57:d7:a8:85:4c:3e:2e:9d:
                    78:d2:4d:3d:a8:a8:36:48:24:d0:4f:bf:25:7b:b8:
                    66:de:08:83:86:8f:3a:d9:39:11:20:79:c3:00:20:
                    db:e3:1d:55:59:60:88:66:e0:f4:03:89:d0:37:65:
                    fc:86:d0:d8:b0:57:df:aa:4e:1a:30:c7:d3:bc:d1:
                    8a:9c:52:32:7e:d2:3f:ae:18:7a:9f:4b:97:e9:76:
                    b5:18:46:6d:a4:b3:f8:de:85:27:ee:7f:a1:f2:92:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FD:DB:ED:5E:7D:AE:C1:24:F1:DF:F0:43:40:6B:36:FC:49:A3:ED
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a4:9e:f4:f6:87:ae:b1:d9:94:c3:a1:aa:4a:5b:58:56:12:
         ac:80:52:09:88:e9:23:22:73:fb:13:39:4d:6c:2c:4d:98:9e:
         83:95:d2:07:a9:a3:a2:29:11:36:d3:b0:59:b7:fe:0d:36:85:
         43:e1:cf:3e:86:99:72:6c:47:41:34:5e:5f:fd:4f:54:e7:68:
         fa:d3:2b:35:83:bb:24:c9:3c:69:f0:29:ef:28:c8:c9:e9:af:
         d2:54:4b:21:f9:58:b1:f1:36:a0:a4:1f:6e:11:70:13:6e:bc:
         fd:1e:73:86:81:26:d6:95:37:fc:60:b5:ed:98:f1:11:a2:59:
         96:1c:ea:42:f9:99:d5:5d:d4:ff:96:75:08:44:e5:25:36:00:
         34:6c:90:11:5f:57:94:ae:02:84:59:7e:8b:71:39:d0:f9:6f:
         9f:99:bc:96:06:d7:47:16:11:2b:1b:9c:8c:c2:63:25:ed:0e:
         56:0a:0e:d4:24:52:7e:c9:13:90:75:0a:a4:48:8d:9a:e4:4a:
         55:19:d5:f1:24:f4:72:4d:48:24:66:2d:e4:e9:b0:bf:1f:d9:
         45:dc:e0:c2:a0:fc:bb:41:61:f1:13:fe:1c:06:a3:b8:25:3f:
         6b:a4:bc:db:7e:f5:d3:d4:4c:d7:2f:83:c6:5b:65:bf:7a:a7:
         f9:3c:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:41:07 2025 by rpki-client