Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
File:                     1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json)
Hash identifier:          Sl5/NugpLGCFYTX8g57XbmwAsHXQgVxjKkHtmG9xly0=
Subject key identifier:   E9:66:5B:D8:8F:12:86:BB:4D:30:84:46:02:E3:D3:BC:5B:38:A6:CB
Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1
Certificate issuer:       /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
Certificate serial:       0199FE4761EB57F85BB2281238DF8F04CE16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
Manifest number:          06B7
Signing time:             Sun 19 Oct 2025 21:01:54 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:54 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:54 +0000
Files and hashes:         1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: m3YC3y8qHpXb6gI8jfLbSAPsVJQrAjUBJ+wWhfuMFMA=)
                          2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:61:eb:57:f8:5b:b2:28:12:38:df:8f:04:ce:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1
        Validity
            Not Before: Oct 19 21:01:54 2025 GMT
            Not After : Oct 20 21:01:54 2025 GMT
        Subject: CN=e9665bd88f1286bb4d30844602e3d3bc5b38a6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:9a:f2:27:19:1d:e7:18:8d:94:90:e6:c6:
                    03:03:de:3a:32:7f:a5:94:06:f9:36:c6:73:93:a0:
                    6d:ad:38:d5:0e:78:5f:d1:12:89:ca:40:9e:ab:f9:
                    66:93:35:fe:82:da:f1:f8:28:d6:64:75:d0:67:1c:
                    06:f3:7e:9c:c4:b4:a5:5d:85:21:f5:18:ed:ad:9e:
                    e5:7b:84:98:e7:3e:32:c9:de:09:e7:e8:e3:58:50:
                    73:41:66:8d:11:f6:cb:25:96:c4:02:1c:7d:6c:04:
                    5a:ff:a9:79:be:39:b1:39:cc:f3:2c:64:23:5d:bc:
                    58:cf:1a:33:b5:a9:f2:09:77:4d:6c:32:20:f2:15:
                    4a:ff:b8:0a:ea:99:34:df:b0:a6:1e:ec:8d:27:f9:
                    27:c3:00:dc:8f:87:a2:1b:93:09:3a:fd:10:bd:61:
                    dd:25:61:ea:5b:df:ed:94:27:31:73:3c:08:6b:9d:
                    c7:e3:2a:65:e0:04:c2:66:fb:79:c9:ed:63:cd:cd:
                    99:44:49:60:17:37:46:44:2f:0f:ce:7c:97:41:d1:
                    39:71:89:14:64:e5:f1:f3:da:81:c0:b2:4a:1b:4a:
                    a3:a4:01:43:61:23:17:90:c5:42:d7:d2:cf:8e:51:
                    59:f0:70:18:20:ab:68:dc:89:29:78:a7:92:c9:34:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:5B:D8:8F:12:86:BB:4D:30:84:46:02:E3:D3:BC:5B:38:A6:CB
            X509v3 Authority Key Identifier:
                keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:91:a4:62:a6:08:7a:f8:42:20:b5:78:0a:32:e9:70:ae:ad:
         36:84:46:a5:58:93:9b:05:2e:61:49:24:6b:4b:70:78:e6:eb:
         f7:0c:ef:43:66:64:87:af:70:7d:e0:ce:4b:95:96:29:5b:40:
         44:e4:ad:f7:1d:38:85:d0:94:b5:1b:5a:12:a2:68:64:cc:4b:
         c3:a0:c1:10:f9:fd:ad:e9:8e:d6:8c:10:ad:6d:bf:4c:d2:f8:
         43:f9:bc:06:49:8d:8a:9a:15:f4:76:4c:c6:4b:25:12:bd:0e:
         6f:73:30:d1:de:72:b7:d2:3e:db:55:da:60:fb:0f:f9:a3:02:
         89:61:9b:2b:08:6c:50:77:9f:4c:0f:82:ac:fe:e1:dc:ba:3f:
         fa:23:8f:18:44:9e:06:57:d2:da:3e:50:19:70:ca:d1:54:bb:
         77:2e:cb:f6:e8:78:ce:4f:13:ac:e8:f3:0b:ba:60:50:8b:ff:
         9a:30:a5:d7:7e:c4:cd:28:27:20:4f:4e:9c:8c:35:67:1c:30:
         56:9d:2d:87:53:44:ae:b6:54:66:e4:c0:03:82:4d:b7:3b:92:
         59:af:d9:6a:7f:23:d1:60:76:b3:d8:d7:96:ca:98:30:e5:c0:
         a9:ec:17:b6:7a:85:ca:e7:cd:bf:e1:cd:85:19:2f:2d:33:96:
         71:22:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:08 2025 by rpki-client