Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File:                     QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier:          GJoF6JxqHluxsoxLYKjfe0Nw9oYdAHLUZw3nFlPy0u4=
Subject key identifier:   6C:E8:C4:E9:87:D9:14:C4:95:4F:BB:2A:09:BB:10:0D:A4:35:10:34
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer:       /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial:       01987ED3A594A0F49FA53DAD14786C7A2668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number:          0A18
Signing time:             Wed 06 Aug 2025 10:00:56 +0000
Manifest this update:     Wed 06 Aug 2025 10:00:56 +0000
Manifest next update:     Thu 07 Aug 2025 10:00:56 +0000
Files and hashes:         1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
                          2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: FGbhZ6Bi+aOSQmoL6NYRK8pQINud6r/c2g+JBfFLpgM=)
                          3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:a5:94:a0:f4:9f:a5:3d:ad:14:78:6c:7a:26:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
        Validity
            Not Before: Aug  6 10:00:56 2025 GMT
            Not After : Aug  7 10:00:56 2025 GMT
        Subject: CN=6ce8c4e987d914c4954fbb2a09bb100da4351034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:68:d2:5c:27:4a:33:f1:bf:80:80:0f:5b:
                    09:e5:b4:07:a6:c8:36:cd:5b:aa:e3:ab:61:d5:9f:
                    fa:9a:60:50:45:4f:96:43:74:cd:ca:a1:8b:a4:da:
                    29:ad:1f:3e:1a:ad:a4:e8:6a:2d:c3:9f:85:d9:9e:
                    a8:4b:fd:e6:fb:b0:51:7f:ab:81:72:05:37:18:fb:
                    4a:a7:fc:73:ce:27:0a:00:bf:b6:33:a6:aa:30:09:
                    72:73:cc:20:cb:d6:02:07:eb:1d:2c:a8:4c:67:9b:
                    94:23:ef:24:ee:2e:be:03:38:05:58:77:a0:94:01:
                    c9:63:5d:cb:03:13:91:1f:75:c2:44:ea:49:d7:dd:
                    a9:9a:44:81:74:da:38:d1:7d:ae:cd:b6:11:ea:4d:
                    b9:a8:55:51:98:aa:75:69:cc:71:52:5d:f9:f5:7c:
                    e2:b7:b5:ff:b0:3b:00:bb:73:b4:b6:4f:dc:38:e4:
                    f1:7e:51:7b:8e:5d:fb:66:23:b6:b6:d3:34:9e:4a:
                    c0:0f:5c:4b:53:c4:a4:2c:4d:28:df:a0:b0:3c:7a:
                    11:da:f3:35:06:37:94:69:7e:4b:10:38:11:68:c9:
                    fa:1f:51:55:e0:86:9e:ac:ae:6d:9e:df:7b:5d:ca:
                    82:88:66:6f:fb:52:be:0f:41:e7:bd:33:0b:f6:f5:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E8:C4:E9:87:D9:14:C4:95:4F:BB:2A:09:BB:10:0D:A4:35:10:34
            X509v3 Authority Key Identifier:
                keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e1:84:e3:38:fd:e2:1e:a3:39:32:10:ea:26:0e:da:9d:f4:
         ae:5f:8c:15:d0:21:0e:2a:be:1b:0f:49:a5:4a:30:16:de:34:
         f7:46:ae:6c:c9:f9:5d:f4:50:67:7b:0f:fa:a1:bb:14:ed:64:
         fe:31:0d:8d:6e:a0:65:14:d7:ed:b2:e7:0a:7d:f5:8e:b1:bd:
         bc:1b:eb:85:0e:50:5b:6b:49:11:1c:88:81:85:77:dc:f0:a0:
         b0:2f:96:4d:8d:ba:ba:18:33:61:ce:6a:bd:f3:c2:e5:e2:6b:
         54:e3:2e:ca:66:47:78:70:e2:2c:68:81:d2:33:f0:35:f3:b0:
         4b:a9:5f:ec:70:e4:36:0f:f4:5f:99:e2:44:88:1c:33:c6:ce:
         58:60:dd:b7:a9:d4:9e:2f:e7:00:39:fe:b3:dc:21:28:22:d6:
         e2:43:9b:56:a7:8e:64:b2:e9:d0:d3:a7:b9:49:37:85:ee:c2:
         a0:fa:e4:d1:30:c9:6e:95:b6:92:10:80:21:a8:a6:c0:9e:2a:
         38:95:29:24:55:e6:91:f2:50:01:a9:e6:8a:08:c4:72:79:e8:
         2d:f5:6d:34:50:e7:10:ab:0b:72:bf:41:4e:12:cd:0e:77:9f:
         85:38:85:9e:51:22:fe:21:05:68:eb:5b:da:99:3f:61:77:a1:
         77:d2:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:23:38 2025 by rpki-client