Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File:                     1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier:          I/SMta+8UvmFTvOloT7f9O8F9XECE4TY3/ZQfmsxRqo=
Subject key identifier:   4D:82:91:29:05:D8:04:20:0A:D7:6C:D9:43:3A:07:7E:40:86:A1:5E
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer:       /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial:       0198D4E0764C9893DAC66E7D17C52EB17D2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number:          061D
Signing time:             Sat 23 Aug 2025 03:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:16 +0000
Files and hashes:         1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: aXxjS76hgFG71kXzdJF5Fxr3MW7XyQ7ymiAcQhXPY/Q=)
                          2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:76:4c:98:93:da:c6:6e:7d:17:c5:2e:b1:7d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
        Validity
            Not Before: Aug 23 03:02:16 2025 GMT
            Not After : Aug 24 03:02:16 2025 GMT
        Subject: CN=4d82912905d804200ad76cd9433a077e4086a15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:04:75:96:d7:cb:da:79:ff:e7:d9:57:f3:64:
                    1b:8b:c1:a8:dc:a7:d1:c3:9f:44:d6:74:30:5c:0e:
                    d0:44:16:2c:8b:2e:05:96:40:8a:32:f1:44:6e:22:
                    46:37:01:48:03:a1:77:41:43:92:b1:41:ef:c1:21:
                    3b:c7:d1:29:60:c9:7b:69:6d:66:42:06:95:09:3b:
                    21:05:e5:0d:27:4a:89:5e:88:29:8f:a9:40:df:c6:
                    35:25:9d:cd:1f:59:48:d5:b5:54:39:5e:e7:7e:28:
                    02:4f:e1:f1:54:50:64:3e:7c:12:61:b9:39:75:9f:
                    80:2d:8c:a0:9a:6b:c4:94:d8:fd:b2:6b:ce:09:6e:
                    b1:99:af:da:2d:9e:ae:17:c0:44:94:b6:aa:cd:ee:
                    0e:f1:60:73:8d:c3:92:97:f4:89:7a:a4:b6:25:14:
                    82:e0:02:44:9b:51:b4:6b:bb:1f:d4:88:62:a1:a5:
                    24:d2:23:2f:08:0d:47:c9:68:cd:de:93:52:27:dd:
                    97:6c:d0:03:5b:59:b8:f9:42:f5:55:6c:a1:02:b3:
                    70:b1:ab:50:c3:42:d3:e3:78:0f:e0:e6:f8:bf:9a:
                    56:8f:1c:25:d0:6d:4f:33:af:08:fd:e2:f7:e1:ed:
                    36:76:08:a4:95:45:b0:09:b9:b6:e4:21:a2:fe:06:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:82:91:29:05:D8:04:20:0A:D7:6C:D9:43:3A:07:7E:40:86:A1:5E
            X509v3 Authority Key Identifier:
                keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:66:ff:10:12:ca:bd:55:9b:11:2e:2d:b5:73:8e:0f:0a:88:
         10:98:da:c3:f5:f9:a5:3a:d3:53:73:41:a1:66:5d:dd:af:5b:
         33:8d:0a:7c:80:a1:33:85:1d:59:7f:2b:ff:5b:9b:34:c0:01:
         ff:6b:d0:77:dd:d2:a3:99:ea:9e:06:38:29:5c:75:ce:20:32:
         b1:9f:96:cf:93:82:4f:68:ef:bb:35:e9:81:49:85:56:18:9c:
         8b:eb:ca:01:97:53:27:6b:f8:3a:af:e9:ef:cd:f7:7c:67:c8:
         e1:53:ff:2d:7f:9c:40:d3:8b:3b:9a:1b:01:29:f9:e7:e5:04:
         50:32:5e:fc:a4:ad:cf:31:44:9c:b3:4e:f9:dc:14:01:27:55:
         de:40:37:24:56:7b:9e:65:21:7f:62:8d:17:69:fd:7c:46:dc:
         4d:b5:3d:76:d2:a5:14:04:08:48:f7:a2:e7:af:a3:cf:c9:6e:
         52:aa:bc:a0:29:b7:5f:7e:80:ed:64:de:1c:a3:d6:5f:5a:34:
         fd:3f:fb:15:ed:d0:78:4c:74:db:b4:26:50:b1:b3:c6:cd:30:
         fc:ed:ff:b5:97:7a:8c:aa:7c:11:51:b4:c6:c1:9a:cf:ef:6c:
         77:c3:f1:4e:58:df:27:9d:3f:a1:65:b6:8e:04:5f:2e:af:aa:
         e5:28:d8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:47 2025 by rpki-client