Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
File:                     qqng6Jg9netBVxbWHoyRJRCibCQ.mft (raw, json)
Hash identifier:          Fpf6YdUL/PPiE+66ebMSpAfEKf1WHsX/9O/79cRPclc=
Subject key identifier:   85:00:31:E5:C9:75:0A:8A:F8:F8:BB:B3:6D:54:A0:ED:B3:57:A2:64
Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
Certificate issuer:       /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Certificate serial:       019896A5008E0028FFE2296500892A3FA891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
Manifest number:          016E
Signing time:             Mon 11 Aug 2025 01:00:52 +0000
Manifest this update:     Mon 11 Aug 2025 01:00:52 +0000
Manifest next update:     Tue 12 Aug 2025 01:00:52 +0000
Files and hashes:         1: qqng6Jg9netBVxbWHoyRJRCibCQ.crl (hash: WmOdTPMsr++ZRMWw1+awtpd3LMlckIMWZFHRrgNvprU=)
                          2: wSW6JHry9aEuEbZj9sUvZUmXDYs.roa (hash: chgjDOS+AVkY8OsmOxsnvb6k6+1kPmgvTXMxVKADzP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a5:00:8e:00:28:ff:e2:29:65:00:89:2a:3f:a8:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
        Validity
            Not Before: Aug 11 01:00:52 2025 GMT
            Not After : Aug 12 01:00:52 2025 GMT
        Subject: CN=850031e5c9750a8af8f8bbb36d54a0edb357a264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:29:fb:41:70:79:e9:7b:28:7a:b9:5e:e7:13:
                    c3:99:20:1c:ec:de:87:67:8f:87:05:1e:d6:3c:24:
                    a8:ce:5c:13:3c:08:7a:21:cc:bd:ef:b3:b3:36:32:
                    48:58:d3:77:e7:29:04:df:be:3f:fb:8a:4d:a2:fd:
                    ad:3e:de:19:19:c3:80:7c:3f:74:42:ea:8d:56:ff:
                    5e:ab:bc:31:3e:4f:d8:ca:02:f2:5b:01:f1:25:e5:
                    46:5c:8b:42:5e:ca:95:b5:2d:76:ed:78:91:c5:33:
                    40:ec:d1:4a:d7:46:fe:0b:5b:ba:98:02:39:1b:66:
                    01:2a:17:b2:c3:e7:9a:15:b0:c5:9b:bc:31:59:dd:
                    df:a3:67:cf:52:19:e6:1e:06:bb:3b:af:a7:07:3e:
                    e5:39:c7:c2:30:93:10:61:b4:66:49:fd:52:0d:21:
                    74:c5:b6:01:96:e0:4c:48:02:70:85:7a:fe:f6:3c:
                    dd:33:d1:91:5e:2f:0e:53:af:f2:ac:cd:42:35:ed:
                    f2:7b:7b:36:d9:b3:6c:ff:ff:15:6a:72:a2:c9:cc:
                    7a:f0:a6:ee:f1:05:aa:bc:a1:25:7e:9d:2e:85:41:
                    d9:c8:a3:ba:20:a0:bd:27:60:53:42:d4:05:27:66:
                    58:ed:6f:1e:25:f9:36:e1:40:69:53:48:7d:8e:f7:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:00:31:E5:C9:75:0A:8A:F8:F8:BB:B3:6D:54:A0:ED:B3:57:A2:64
            X509v3 Authority Key Identifier:
                keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5b:19:94:ea:ab:6a:63:a0:b6:0f:cb:2e:a9:9b:df:bb:77:
         cc:8d:c3:f4:f8:df:8e:58:17:28:3a:f1:b5:3f:84:c3:b3:90:
         ba:bd:9e:d0:71:b1:5a:9d:31:4f:48:6b:20:a4:bd:cc:79:91:
         d5:59:cc:5e:ca:15:0f:8b:66:43:48:32:e5:fa:0a:ab:c8:e6:
         71:65:7e:20:70:b5:2b:45:b9:c9:00:b4:92:20:f3:0b:33:32:
         c6:39:34:84:18:d4:4a:92:a9:fd:c6:0c:c6:8a:3e:03:ce:7b:
         95:20:ab:fd:9d:de:7f:cd:6a:dd:f8:58:6e:14:f4:c4:a2:8f:
         d9:18:ba:15:e0:bb:d0:a3:eb:89:c8:3a:a7:b5:1d:a5:f2:18:
         10:06:3d:bd:d3:6d:af:f1:f6:f7:a7:12:91:2a:9f:2d:f9:28:
         f4:4a:c8:b2:c6:dd:ee:9b:f8:16:1b:ab:d7:62:09:ec:90:af:
         aa:5a:56:05:75:72:ef:92:af:72:80:c5:a9:1a:0d:fe:1c:1b:
         6e:7d:d8:d7:80:a9:f0:34:18:f1:79:87:03:68:bb:8d:43:37:
         99:d3:4d:7a:4a:85:8a:3f:23:45:49:e5:6f:b7:45:24:9a:78:
         11:de:e4:21:7d:1e:fd:54:e3:0a:51:45:04:be:30:3f:5e:8d:
         d7:7c:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:01 2025 by rpki-client