Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
File:                     QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json)
Hash identifier:          NXmNLyZup6gEjWLZBIiYbz4DzFhbX6MrdxQFTiRvpGw=
Subject key identifier:   E6:9E:0A:E0:8B:DB:15:E0:0F:3E:B6:07:CF:D4:41:57:B7:D8:FA:B0
Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B
Certificate issuer:       /CN=41b290053245b112a58a6d5894dfdc7f67422e8b
Certificate serial:       0199FBEC1849207BF7A4170430E555340FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
Manifest number:          0ACE
Signing time:             Sun 19 Oct 2025 10:02:57 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:57 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:57 +0000
Files and hashes:         1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: m5xisnDkSZfUZbpyI6shJ6IrSlIdFDP3ypDWUXOy5AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:18:49:20:7b:f7:a4:17:04:30:e5:55:34:0f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b
        Validity
            Not Before: Oct 19 10:02:57 2025 GMT
            Not After : Oct 20 10:02:57 2025 GMT
        Subject: CN=e69e0ae08bdb15e00f3eb607cfd44157b7d8fab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:ab:a9:51:e2:db:ef:ed:7d:be:4f:49:1f:
                    86:6f:b3:37:51:67:a5:e8:02:07:17:15:6f:eb:58:
                    b8:38:79:64:fe:98:64:ea:6c:3c:27:7c:a3:e4:fa:
                    85:27:e6:e5:dd:32:15:16:c8:91:c0:9b:32:cd:3b:
                    86:4c:f1:98:73:50:e2:05:72:37:3c:38:36:a8:50:
                    5e:d5:8f:ca:44:ac:01:70:ab:f6:53:ec:ba:26:2f:
                    e8:a0:f7:3f:03:24:87:3d:36:56:f1:cc:39:c2:90:
                    89:0f:7d:51:7c:c7:ea:ef:93:28:8e:73:24:79:f7:
                    43:4f:12:bb:b9:59:fc:7d:5b:c0:9a:f2:49:48:9e:
                    17:f4:ef:54:97:8c:b0:2d:99:97:b2:78:7f:bc:74:
                    b0:0e:c2:a4:fc:49:38:59:19:d2:8e:a2:e0:a4:7c:
                    16:15:91:e6:a0:6b:2c:6f:77:cf:e6:f7:b1:fd:b4:
                    c0:ae:69:31:b3:86:45:17:dd:d1:3a:c8:40:1a:3e:
                    5e:bc:82:99:49:1d:df:fd:b1:9b:da:32:ad:b5:c4:
                    34:15:ff:cb:ed:09:bd:09:f2:c4:6d:d6:85:ba:a3:
                    ed:54:1f:ff:30:a1:39:91:49:26:3b:71:f9:97:97:
                    c8:f4:af:3b:47:7c:2d:aa:34:28:fb:26:5d:a7:20:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9E:0A:E0:8B:DB:15:E0:0F:3E:B6:07:CF:D4:41:57:B7:D8:FA:B0
            X509v3 Authority Key Identifier:
                keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:15:73:11:2f:d1:f3:00:17:5b:b7:10:90:40:9b:c6:e5:
         ec:04:52:52:b8:89:4d:e0:57:de:5a:f3:59:1c:2f:6b:57:99:
         0b:34:90:ec:1d:ec:ac:79:28:c7:da:85:a1:7f:55:07:1a:d0:
         97:5e:38:8f:4a:ae:46:b6:b4:62:03:5d:fc:6e:ba:91:de:37:
         69:2c:77:dc:4e:6e:62:11:c7:6c:b7:3d:fd:63:09:5b:79:8f:
         2a:4d:18:6d:f3:91:9a:97:74:1c:94:6b:d3:bd:14:37:27:b9:
         ba:b2:6d:3d:e7:12:a6:44:1c:75:fb:e6:13:51:b0:da:a1:a0:
         b7:f9:13:d0:4e:e9:1b:f6:09:0c:1d:4a:06:34:f5:bb:21:fe:
         ad:ea:91:5e:ba:62:46:be:e8:4b:10:46:ff:dc:45:ad:33:34:
         e6:61:40:41:4c:7a:0c:50:2d:3b:ef:fd:c7:90:90:f7:cd:e5:
         84:ef:95:d5:e5:47:a3:c5:c2:1b:5e:68:a8:e8:f3:e4:76:01:
         ed:80:8e:ba:70:58:3a:f4:6f:59:1d:3e:ef:01:b1:25:dc:1a:
         17:1e:0a:21:1a:f0:33:2d:c9:10:f7:1f:8c:18:7f:7e:f6:63:
         a6:a8:be:72:7e:fe:01:fe:3d:6c:12:e7:a8:25:9c:ec:53:c6:
         11:76:db:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:10 2025 by rpki-client