Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File:                     QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier:          tgikGArxea7Sx1jndLfF5uwKjSVePiXlF4xbH7EmsG0=
Subject key identifier:   EA:5E:FA:3C:09:01:01:5D:F5:FF:00:88:CC:10:F7:DA:AD:5E:23:EA
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer:       /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial:       0198D4044284AABD130EFF16B4E220C6CF2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number:          111E
Signing time:             Fri 22 Aug 2025 23:01:45 +0000
Manifest this update:     Fri 22 Aug 2025 23:01:45 +0000
Manifest next update:     Sat 23 Aug 2025 23:01:45 +0000
Files and hashes:         1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: RqKcMFqrlke2lzcymY9ExnIBXOOsW7AcaAEsdkle8mg=)
                          2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:42:84:aa:bd:13:0e:ff:16:b4:e2:20:c6:cf:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
        Validity
            Not Before: Aug 22 23:01:45 2025 GMT
            Not After : Aug 23 23:01:45 2025 GMT
        Subject: CN=ea5efa3c0901015df5ff0088cc10f7daad5e23ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:1e:1f:09:ae:d0:a8:f0:51:00:b2:4a:ca:
                    0b:ef:15:5e:40:28:32:59:b0:5f:ce:2b:c3:e6:ce:
                    78:9d:bc:8f:ef:b0:70:75:28:00:18:4b:db:e5:c3:
                    b4:b7:44:58:9c:54:27:e5:cb:fb:91:9b:04:92:78:
                    9b:0b:08:77:d4:1e:d7:ee:14:29:4f:e8:97:8a:02:
                    72:4a:3b:0c:ee:ad:21:53:07:a4:9d:08:85:d6:c1:
                    67:d2:10:2c:7e:a8:9a:bc:70:97:0c:15:a1:dc:54:
                    fb:b0:b0:6e:bc:3b:38:29:1c:ef:6c:fb:0f:19:f3:
                    ea:ce:fc:87:6d:42:aa:f1:d9:e3:58:9c:5a:04:5c:
                    f4:d4:bf:5e:be:07:7a:79:80:dd:9b:36:b3:4b:29:
                    35:8c:92:21:8c:26:bc:cd:78:cb:1f:88:9f:0a:37:
                    5a:03:ca:45:6f:41:5c:5a:93:3d:39:0f:05:76:76:
                    8c:9a:78:3a:a7:10:d7:06:46:e6:69:b7:d6:0b:5b:
                    29:26:60:c0:66:85:7a:8f:a0:a1:87:d4:26:a0:2c:
                    b9:2e:e1:64:be:95:3d:d1:2a:15:fc:a1:c1:43:fc:
                    c0:1d:cb:8e:37:72:8a:2e:3e:93:ec:39:62:01:66:
                    62:32:4c:e8:cd:ab:7c:ea:17:27:67:ba:cf:af:5f:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5E:FA:3C:09:01:01:5D:F5:FF:00:88:CC:10:F7:DA:AD:5E:23:EA
            X509v3 Authority Key Identifier:
                keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:48:3a:82:7a:67:e7:e6:7f:78:f0:e5:62:69:8c:59:a0:c5:
         b1:73:51:bc:86:7e:b0:f9:da:eb:3b:13:9b:80:c3:e3:fd:06:
         88:a6:20:11:e3:07:b4:8d:e3:5f:dc:13:01:1e:d1:0e:da:17:
         2a:6e:8f:93:b8:4f:77:e4:78:97:f7:79:99:24:20:d5:0a:ee:
         31:89:4a:19:98:37:4d:21:e2:11:4c:16:78:da:64:3f:4e:ff:
         39:3c:16:f6:24:86:dd:b2:3f:e7:3b:b6:ba:fd:0c:e2:cc:fd:
         6c:7d:d1:52:22:fc:97:c1:53:dc:bc:79:2d:25:76:11:8c:a4:
         c8:a0:95:16:e5:e3:b4:c3:51:a5:37:d5:2e:12:01:0c:ac:a4:
         cb:19:79:f8:d8:51:94:39:36:9d:7c:a3:31:ee:9f:9a:12:23:
         a4:a4:33:ec:0a:e1:86:69:0d:33:64:b9:a4:7c:d5:67:32:02:
         d8:19:5b:5d:50:6e:f9:df:18:c7:09:0f:c7:31:9a:4f:7b:18:
         30:e9:fa:d4:37:8d:f4:2e:63:6e:9e:19:71:61:cc:61:72:e1:
         75:76:f4:c5:86:29:62:a6:96:4b:3b:81:2c:0a:bd:39:0c:6a:
         9f:ae:3e:df:52:0a:0f:24:a8:df:87:44:8d:53:2a:63:89:6e:
         2b:5b:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:41 2025 by rpki-client