Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File:                     QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier:          kzdHltTVieYYGjm9YZJGopZQ3gFk/LDgnYZpmoDeQmQ=
Subject key identifier:   C5:E0:75:5D:DF:64:21:5E:38:13:C4:9C:D7:4D:35:9A:66:D9:53:0D
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer:       /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial:       0199FD6AD48BA8ABF0DD254C7F940FA922FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number:          11B8
Signing time:             Sun 19 Oct 2025 17:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:00 +0000
Files and hashes:         1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: 63r9itaOF7v9lu91LAxWtRU1M3lSSu0Su8hzcuvEAuY=)
                          2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:d4:8b:a8:ab:f0:dd:25:4c:7f:94:0f:a9:22:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Validity
            Not Before: Oct 19 17:01:00 2025 GMT
            Not After : Oct 20 17:01:00 2025 GMT
        Subject: CN=c5e0755ddf64215e3813c49cd74d359a66d9530d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:b4:14:fd:63:7d:b8:8b:28:40:d8:ef:ad:
                    73:a8:dd:d0:4e:5b:0a:63:40:bb:76:ca:74:5c:1f:
                    ef:b4:ba:13:57:72:75:8d:b0:e8:9e:72:ba:90:75:
                    02:c7:95:5c:36:38:31:93:14:2f:2a:9a:08:9c:8e:
                    89:8d:b2:92:86:19:a8:a4:43:ae:7d:f3:7b:eb:b1:
                    ad:5a:fb:64:0a:13:c1:ea:33:5c:81:56:b8:2e:ee:
                    f6:50:91:1d:65:50:f8:22:6f:29:d6:e5:46:fe:42:
                    38:76:48:55:9c:1b:73:86:37:cd:d9:3d:e7:2c:0d:
                    c1:db:25:42:3c:a1:33:d0:37:7f:7f:b5:0d:88:16:
                    6e:9a:88:d4:75:47:5a:1c:97:58:7a:42:c5:06:ce:
                    8f:fa:50:13:fa:63:01:5e:b0:bc:a4:69:cb:b9:3b:
                    c9:7e:c6:9c:d3:70:be:ca:80:42:91:4a:53:47:e4:
                    40:00:11:6f:76:db:7a:f2:83:e9:ef:33:e9:15:08:
                    90:31:68:a5:68:0f:63:99:07:02:19:7a:e7:0e:45:
                    08:53:8b:ae:8c:a5:df:94:f4:04:8f:7d:b0:55:4b:
                    45:be:f0:43:4a:9c:37:72:70:11:77:3e:56:31:e8:
                    f3:07:f7:d6:ee:ea:b4:d8:7a:61:05:98:b3:91:a9:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:75:5D:DF:64:21:5E:38:13:C4:9C:D7:4D:35:9A:66:D9:53:0D
            X509v3 Authority Key Identifier:
                keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3b:5b:5d:30:7f:32:b9:c8:43:86:bc:89:60:76:c2:71:6f:
         f0:9c:54:0c:c2:93:2a:f0:21:c9:8f:8b:4c:4c:41:f7:c4:6c:
         73:08:36:aa:c2:6a:8f:d9:88:0d:af:f2:f8:6e:ea:5e:ba:60:
         bd:22:67:a9:f7:70:0e:95:29:9a:11:61:de:78:3f:e2:81:fc:
         dd:0f:2f:c0:a4:f6:30:04:1d:a1:5b:b5:01:c9:62:68:99:38:
         8a:37:e4:9b:b9:a2:77:0b:a3:e0:6f:28:e1:0e:de:dd:c1:61:
         47:59:c4:2a:e4:ec:3e:ae:a2:18:a1:3f:29:01:a2:00:df:e2:
         7a:ef:09:f6:e4:18:ee:3d:c9:c0:b6:50:13:a2:8b:cc:e6:09:
         84:82:b1:7e:8a:56:49:a0:52:05:68:7a:3b:39:93:6d:6d:dd:
         f0:0f:4c:ba:d5:f6:04:d5:6f:b3:a3:0c:b0:a7:6b:08:78:70:
         46:eb:91:17:ac:2f:8f:65:b9:cb:f1:bc:14:26:7a:f0:7d:b1:
         66:5e:89:e2:ed:58:91:24:f8:54:7d:58:b3:e2:0d:b5:fe:27:
         95:a1:44:85:92:39:51:cd:29:a3:87:55:71:84:57:9f:06:8b:
         53:ff:e4:62:8f:d2:b5:7b:d3:63:b9:0c:47:f9:f0:5a:94:33:
         07:95:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:03 2025 by rpki-client