Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File:                     4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier:          TQzCi/R9eySaJ/DdfxmCt2j7QPoNydwSxq/IZ7EuW5M=
Subject key identifier:   9B:05:F7:52:52:3C:0F:73:51:33:60:BD:83:59:87:5C:45:FE:3F:9C
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer:       /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial:       01989F7111748981ED641B8C11C29277F4A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number:          0B85
Signing time:             Tue 12 Aug 2025 18:00:44 +0000
Manifest this update:     Tue 12 Aug 2025 18:00:44 +0000
Manifest next update:     Wed 13 Aug 2025 18:00:44 +0000
Files and hashes:         1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: aNlzP7B2t7bU9g2R0rLbQz21Pc6aAdomycmpHgcxizs=)
                          2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:71:11:74:89:81:ed:64:1b:8c:11:c2:92:77:f4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
        Validity
            Not Before: Aug 12 18:00:44 2025 GMT
            Not After : Aug 13 18:00:44 2025 GMT
        Subject: CN=9b05f752523c0f73513360bd8359875c45fe3f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:37:2e:65:ad:f4:81:50:0d:69:52:87:30:
                    52:4a:71:01:01:e2:f2:98:60:a7:6a:c6:ee:37:68:
                    d1:6f:21:77:a3:ff:c1:7b:2f:06:c1:c0:12:3e:75:
                    4f:62:c9:53:02:28:35:a1:10:26:5e:0f:d7:5d:da:
                    cd:f6:31:14:e0:02:7e:32:b3:2f:94:1c:ac:6b:6c:
                    58:ff:fb:e2:99:d4:6b:c8:62:a5:e9:6c:3a:cc:bb:
                    18:58:63:3a:e9:bf:0f:2c:40:15:f7:84:64:d6:dd:
                    d8:06:bd:66:af:9d:d0:53:bc:bb:b1:2f:0c:a4:c1:
                    13:17:c0:8b:40:9b:36:da:ba:69:82:66:62:a2:e3:
                    98:b1:05:6c:a7:7d:fe:b5:df:d9:8f:e6:27:76:aa:
                    4b:74:14:16:1d:27:95:ea:e4:ef:a9:b0:5c:a8:62:
                    85:14:ba:2e:f2:b6:d2:df:5d:70:b7:54:31:d1:44:
                    fb:81:a3:05:fe:e8:1b:3c:a1:86:5c:b9:3a:a6:43:
                    cf:09:2d:e9:da:da:d1:74:c3:da:18:60:8f:73:26:
                    cf:f5:2e:8f:3e:27:48:16:e9:d7:72:39:68:28:63:
                    b4:57:7e:7c:84:05:a8:a8:53:39:62:72:e8:51:c1:
                    11:c4:7a:37:2f:6d:fd:e4:3d:26:f1:d7:da:57:5a:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:05:F7:52:52:3C:0F:73:51:33:60:BD:83:59:87:5C:45:FE:3F:9C
            X509v3 Authority Key Identifier:
                keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d1:0b:12:b0:83:bd:0a:c5:96:4c:8c:f5:66:3f:f6:00:40:
         ed:6e:3e:ef:28:a7:87:44:57:17:43:d6:07:9f:d4:86:56:cf:
         cc:f3:29:ea:0c:a3:b5:e0:a1:0f:0e:9f:7c:93:01:da:f8:a7:
         07:67:84:a7:19:58:d6:bf:8d:77:10:f6:65:ac:a4:d3:98:7d:
         6a:7f:25:0c:4a:88:fe:ad:86:87:8d:8d:da:87:29:85:60:9b:
         2c:6b:97:2c:4f:ff:88:9e:91:f2:57:93:22:e1:a6:fc:43:fa:
         f0:71:2e:06:6e:52:bf:02:cf:52:fe:a7:35:f7:31:d1:f5:be:
         59:d6:07:00:bf:ad:e8:08:c3:a0:6a:28:c9:6e:dd:0e:52:44:
         a3:a6:b8:50:ab:41:18:a3:36:16:a1:5b:46:af:49:64:a6:8f:
         d0:73:6a:26:c4:77:ff:84:77:fa:5b:18:32:5d:11:b4:09:42:
         1f:56:1c:43:63:d0:9e:a8:07:8c:80:3d:47:ac:68:3e:d4:d7:
         61:c3:61:bb:d5:0b:b5:d0:65:bc:6a:3e:ce:18:82:35:0d:ac:
         4c:8f:e3:ba:82:bc:92:82:e4:bf:bf:f9:7f:5d:84:65:1f:7d:
         ff:15:30:de:c2:59:c7:0f:28:ed:b8:6d:6e:ff:e7:6a:73:82:
         a6:d3:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:41:56 2025 by rpki-client