Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
File:                     R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json)
Hash identifier:          caYp9gEPRAGQP7M/54b1XpJKIl0eu2MbpT/mWjr51ik=
Subject key identifier:   6C:E0:F5:B8:31:F3:8B:6B:7D:D5:DC:34:D8:E8:DB:25:51:A7:3E:F6
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Certificate issuer:       /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial:       019A047EB376CCCC4C8BCD3E9FA8DA77345F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
Manifest number:          16E6
Signing time:             Tue 21 Oct 2025 02:00:03 +0000
Manifest this update:     Tue 21 Oct 2025 02:00:03 +0000
Manifest next update:     Wed 22 Oct 2025 02:00:03 +0000
Files and hashes:         1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: M9TPszmGeN9VpQk87V9IS/QTgBtoZg+yysly2Wo32rI=)
                          2: UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa (hash: dU40dyYAxG0jUVXRYy3IsfQ8lbv7vAwEo5+BvKJGXqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 02:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:7e:b3:76:cc:cc:4c:8b:cd:3e:9f:a8:da:77:34:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
        Validity
            Not Before: Oct 21 02:00:03 2025 GMT
            Not After : Oct 22 02:00:03 2025 GMT
        Subject: CN=6ce0f5b831f38b6b7dd5dc34d8e8db2551a73ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:46:a8:46:c9:8a:05:43:2e:1c:0b:5b:9e:
                    e3:2f:52:00:b3:48:3c:69:34:22:f4:c8:f3:a4:7f:
                    be:fd:54:0b:12:bf:b7:9c:c8:52:d1:60:d1:0b:13:
                    47:2f:5e:5a:1e:08:05:bc:3c:f0:e4:4c:0a:78:1a:
                    52:8e:93:24:e2:f9:ee:44:4b:cc:cf:56:f8:64:c9:
                    2a:d5:a4:4e:e8:7e:c5:cf:3e:2c:87:b5:0b:e9:68:
                    28:5a:c2:14:e3:9e:04:d8:19:c9:f5:c4:eb:a8:04:
                    78:4d:85:16:86:90:21:6b:58:b2:72:d3:6b:fe:00:
                    36:82:0c:3e:45:6b:e0:6d:42:fd:7a:3e:e7:1e:aa:
                    e6:5f:9c:a8:fe:f8:9d:b0:3a:33:d3:a8:80:33:b3:
                    f5:5d:2c:c5:b7:8d:73:02:eb:7b:6c:fe:bf:b2:72:
                    2e:b7:09:d4:36:15:6a:9c:dd:1d:c3:8d:30:b6:7b:
                    83:4b:78:fb:49:7f:28:af:b3:a2:03:82:c5:5a:a5:
                    35:a1:73:eb:c1:67:de:07:05:d6:0e:cb:9b:b4:43:
                    42:4d:6e:94:31:26:d5:1a:18:f0:b7:69:9a:ba:66:
                    0a:b7:ea:61:61:ec:c6:11:14:3d:1a:32:71:6b:fa:
                    f3:f5:31:91:d2:55:b8:74:07:2e:8b:0f:16:3d:20:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E0:F5:B8:31:F3:8B:6B:7D:D5:DC:34:D8:E8:DB:25:51:A7:3E:F6
            X509v3 Authority Key Identifier:
                keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3b:ad:76:dd:98:24:9d:d6:a7:f6:20:c3:6d:24:92:33:aa:
         3a:20:18:26:16:12:70:d8:c8:56:42:31:f5:05:41:ab:d7:bc:
         86:69:e9:56:8c:64:14:fa:40:77:3b:66:ff:c4:dd:3f:d9:c1:
         b7:1e:67:c3:85:c1:63:49:15:ce:96:b5:b8:58:09:ff:d5:29:
         e8:13:ea:ee:b9:b4:73:10:21:21:3b:90:b9:a5:48:b8:d7:4d:
         93:55:57:22:00:57:9a:58:c8:ac:21:6e:46:99:ee:fb:22:33:
         af:7f:7d:fe:9d:59:2d:bd:61:6a:28:31:cb:16:60:e3:d5:86:
         24:ed:1d:ac:ad:45:8d:40:94:a9:ef:8d:d7:af:de:7a:d3:0b:
         16:b4:7a:9d:ef:a7:15:6f:70:eb:17:c0:21:b9:82:17:22:fe:
         b9:18:f2:55:3c:f4:61:ba:e5:f4:55:aa:44:e0:9a:48:84:1c:
         59:b6:f5:10:4c:2c:85:77:69:a0:bb:0e:95:5f:15:23:1b:ab:
         65:cc:fc:17:31:8e:38:c7:5f:d3:03:07:52:96:6e:01:ff:c9:
         80:14:22:e8:34:7d:27:45:c4:3b:33:1c:86:12:9a:0f:a3:b6:
         81:b6:18:60:85:91:18:f1:9b:96:ad:e0:df:5f:c2:cd:4b:a9:
         b4:6f:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:57:02 2025 by rpki-client