Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          BZukkJHkAovSIUcjALdpoWwVH5jmBro+ynWxpRDl3kI=
Subject key identifier:   D6:C2:8A:57:02:C0:6E:BF:D3:2D:DF:AD:FE:2A:1A:EB:ED:E3:AE:D6
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       0198D65F7D4115A3F10BC2EF3C64AF9DC0FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          05AD
Signing time:             Sat 23 Aug 2025 10:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:38 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: /KnVleWh7d+IAFN/EmDpxXi6pHU0/wAeRYE42kQeffk=)
                          2: 3DdGyZ0sJgCFJ_ULmwJJ2lo2rx0.roa (hash: 5TUTGezCbgzJ7wN19EdaLXS+J99Zo28HoH4eIqxrvxk=)
                          3: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (hash: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=)
                          4: 9B7naTDbTfBC3f0Su46QWyrhOAU.roa (hash: EuLTR97eLUOnyJBm+T95P0s0ZZVOErLTXd4saTTHgqg=)
                          5: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (hash: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=)
                          6: F3TFrLyovb8XvAopBK7JOYa2mwI.roa (hash: pEvX4onxvm1t0Llqu8JqybLkNG3FnmVsK+ePV2bdtbk=)
                          7: LZcNgygFBKx2IuLtD2ktQpXW4Ps.roa (hash: I7tPfrwHzB0UAJOseFDltlGuyXCQ69zHCcehJNGrXZI=)
                          8: M9m5ciKZUlugxrd6zs79XHL4dD4.roa (hash: 5TehzUmwbp1N2JUN9csCq1NNReNAH4jUA6HYU4FBVG0=)
                          9: OEVx3wt-afSCjQoq4CCBGEYZ0-0.roa (hash: RZxMVkxGx/ioX0a/f6t/tDg0YGbR5g3ZOXjOM4aJF6g=)
                          10: TN5asrP-O_svuOzye5lJGogWzMo.roa (hash: rh9STD4IRIWTtIYMAcynIA4v5v5kpJ3eCDcSGZQerzs=)
                          11: V0NyGBzeNeiAwnkgDdus_1vA7a8.roa (hash: RKgBfoEec6XrdZ6UCnyyORQQ1M5776wgDHM2EvtO4bU=)
                          12: VEzRmKCthg0N9znr0nEC6lBX2SE.roa (hash: uFDhugUUw1ANaPXsl+IH/rhPDlcZVp0gQ5Plq/UIw9k=)
                          13: XnSGdaCJ3eKb4i-6Nu6dhvAlrx4.roa (hash: wQcutn0UQG9+UbR3j8U6CVNcG7YhBuHIXfvYXpQN+ao=)
                          14: Yw1DL4n3FWC67KL8P9tumDcnyZE.roa (hash: kPAh3h9z93w4ldeG3DZ18aXthzPwd8/sa1w8KSR09RU=)
                          15: im8w3Xx-iUAQD6wX6N09-EJJW8c.roa (hash: /qbFQ2xM1Cro7Sw3CCIT5woLdLgqxh07N/rM/Vszw70=)
                          16: krwPzjnTtCEOQgP9EXp1WO-kgx0.roa (hash: Jq2f8YMj3fJWLcxBtjZ9CHuZ6W1PxUoBmS3CD2sax2Q=)
                          17: uJPBnwCQe4pWBPSakttM1tJFVcw.roa (hash: SlkGHJE+y8/3ykMchDghQk+vAt9Ko0/kJI2Pi7OwLbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:7d:41:15:a3:f1:0b:c2:ef:3c:64:af:9d:c0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Aug 23 10:00:38 2025 GMT
            Not After : Aug 24 10:00:38 2025 GMT
        Subject: CN=d6c28a5702c06ebfd32ddfadfe2a1aebede3aed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:07:23:2a:7d:26:2d:9e:e9:30:a4:83:b6:
                    b9:fe:9a:9a:ea:7f:b9:d0:0c:cd:79:aa:7c:95:ac:
                    17:a3:9e:95:c5:17:d5:18:95:d8:e0:b7:c0:70:a4:
                    7f:9f:a4:ae:d4:00:c6:08:18:a2:60:9c:bc:87:0b:
                    ed:1f:ed:ff:80:ab:8d:2e:09:7f:4a:a3:ef:44:1b:
                    17:69:0a:8a:59:16:24:87:9b:e3:c2:c1:6c:a0:12:
                    b8:5c:1f:c0:95:bd:f6:a0:90:28:63:e2:93:30:e3:
                    71:2f:5a:a8:bc:c2:4f:f3:e9:2a:3e:a8:c6:4f:9a:
                    73:33:31:f9:72:33:0b:cf:f5:7a:5a:ea:17:3d:3c:
                    f8:49:2a:30:1c:d8:84:8d:b7:0a:d1:8f:7c:9f:dd:
                    00:51:c7:35:4c:08:68:f4:67:a2:6f:cc:92:d5:e4:
                    8d:f8:7c:cc:5b:77:93:b7:eb:e4:1f:ed:0e:f1:10:
                    79:06:43:2d:1b:ef:ee:99:dd:e5:83:c6:56:37:ca:
                    be:53:66:9e:68:70:fb:3b:8c:bf:ca:11:91:1c:c0:
                    3c:49:53:9e:c6:82:19:e0:69:42:6c:b1:5a:e2:a9:
                    14:ed:b1:29:15:f1:29:a4:11:45:13:74:60:3a:08:
                    50:9b:72:29:5d:91:93:c9:c7:d0:03:c3:8e:68:3b:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C2:8A:57:02:C0:6E:BF:D3:2D:DF:AD:FE:2A:1A:EB:ED:E3:AE:D6
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:6b:55:b7:93:95:63:ac:58:1b:e2:b1:49:fd:d4:75:4d:c9:
         d0:63:51:c1:a6:30:bf:2c:25:17:72:31:25:b1:95:0e:0a:9e:
         88:25:da:64:be:c6:d5:74:4d:3e:e6:10:58:51:60:7c:6f:be:
         a9:d3:72:94:28:e5:eb:b4:61:43:3f:b3:40:75:1c:8c:f1:ac:
         bf:4c:a5:7c:64:af:ea:7f:fe:32:f7:95:d1:31:54:50:2d:89:
         de:cc:d6:72:55:94:7c:17:d2:1d:b7:14:8e:35:6d:8c:9d:b1:
         b9:66:c4:79:5c:5f:4f:f5:6c:d7:4b:64:69:12:cb:97:67:62:
         a5:94:13:f0:eb:71:02:8e:55:1e:77:a8:a2:99:51:a2:3b:0c:
         a5:44:a1:3d:16:3f:e5:ef:eb:10:13:a3:59:01:89:ee:1d:d4:
         8d:3a:e4:d1:88:cd:f3:9c:65:5c:00:39:76:10:40:f5:ee:25:
         86:d9:8e:35:41:01:0f:72:5e:60:59:99:a8:48:10:ce:d6:01:
         12:17:06:2b:29:4b:37:c6:1a:db:62:03:c4:03:34:b7:b7:73:
         b0:fe:51:8d:b1:0d:ae:c9:96:48:b1:cb:c9:d6:b1:0b:ff:ff:
         53:81:4c:c9:86:d0:ae:d0:b3:87:7b:db:0f:e5:ec:b0:82:be:
         57:51:ac:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:01 2025 by rpki-client