Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
File:                     qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json)
Hash identifier:          L0Ke8zYlomy33xTbPF8wqr5MzsSrHjYXOOVdiNECx4U=
Subject key identifier:   7D:D8:6D:87:E6:36:FC:9B:E9:37:85:97:5F:0F:13:B4:F4:DD:0A:47
Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
Certificate issuer:       /CN=ab19000781c183366cba55416fd75b57dba0e4bb
Certificate serial:       019881D47B2DC967327664273DFDB6BC92D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
Manifest number:          02ED
Signing time:             Thu 07 Aug 2025 00:00:42 +0000
Manifest this update:     Thu 07 Aug 2025 00:00:42 +0000
Manifest next update:     Fri 08 Aug 2025 00:00:42 +0000
Files and hashes:         1: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: sFiIAxnW8p+XWND3lJJQKRT8MpTRnGdwxzCNtxscNHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d4:7b:2d:c9:67:32:76:64:27:3d:fd:b6:bc:92:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb
        Validity
            Not Before: Aug  7 00:00:42 2025 GMT
            Not After : Aug  8 00:00:42 2025 GMT
        Subject: CN=7dd86d87e636fc9be93785975f0f13b4f4dd0a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:55:84:6a:02:65:b1:c6:08:bd:57:9f:07:
                    79:19:36:32:ca:85:fa:9b:10:e0:ed:c5:a1:dc:8c:
                    77:eb:9b:e9:38:f9:9d:20:50:82:fe:38:30:27:10:
                    80:67:0e:65:9a:6c:ca:6e:ad:ce:f7:ef:4d:33:02:
                    7f:d0:1b:b9:f3:0e:9f:f3:8a:ef:06:6d:b0:69:ff:
                    30:ad:a3:ca:85:2f:f1:29:f5:e1:7a:2f:c6:f6:05:
                    82:81:56:b2:dc:c7:ca:b5:62:21:6d:e9:24:d9:01:
                    7f:78:6f:a2:20:84:de:69:17:92:6a:d1:28:08:66:
                    a0:89:46:a5:07:96:c5:13:6a:c8:97:54:b6:e7:8a:
                    29:ad:54:ae:3c:74:2f:62:97:c3:98:b9:23:ef:d5:
                    7f:24:00:fd:a3:10:68:bf:29:a7:9d:a7:ca:69:00:
                    76:32:e5:3d:9f:03:3b:e5:01:c9:fc:98:c0:73:87:
                    be:a8:4b:56:c3:17:97:5c:ef:78:ed:df:63:04:6a:
                    46:ae:a9:c8:a3:7e:8f:2e:d0:a1:32:82:ca:0a:37:
                    ab:37:69:18:9b:5e:bf:8f:43:05:f6:b4:91:02:40:
                    84:75:0c:cb:d9:8b:74:72:9a:7e:fb:69:68:33:4f:
                    dc:85:cb:be:3d:cb:91:11:d5:fd:fc:8a:43:3f:79:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D8:6D:87:E6:36:FC:9B:E9:37:85:97:5F:0F:13:B4:F4:DD:0A:47
            X509v3 Authority Key Identifier:
                keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:38:56:22:ba:9c:44:81:c1:7c:6a:5b:87:44:a2:62:5a:
         85:09:03:47:0f:94:9f:1f:f3:8d:54:16:06:a1:3b:3b:e1:32:
         7b:c0:ba:ef:06:84:83:87:f7:0e:50:bf:af:62:b4:4f:fb:11:
         47:4b:36:19:e2:fb:4a:77:23:3e:a1:22:59:ad:b3:51:69:45:
         ad:7f:fb:7a:06:af:a2:3d:d9:f9:64:f5:93:12:09:ab:97:aa:
         27:35:4b:d2:cd:fb:f3:2e:37:d6:2b:d4:6e:df:c9:0d:2b:72:
         12:96:4f:05:e3:57:d2:0a:9b:d9:17:f3:4a:a1:15:35:0a:7f:
         c6:6f:ba:f8:d0:24:8e:b5:af:c2:1a:9a:18:ac:c8:8b:bc:3f:
         39:4b:e8:46:42:9c:a7:c5:7e:bb:4f:0e:22:f5:58:64:6c:f5:
         d2:9c:00:f9:6b:de:49:ec:d8:4f:7d:13:f1:0b:8a:47:a7:42:
         f1:21:f3:8e:00:00:17:24:8a:8c:41:87:ea:f9:d4:9c:15:ce:
         64:43:09:00:7c:8a:ac:44:35:0a:83:7c:d3:5d:d2:6a:cb:73:
         3b:77:65:50:30:2c:73:62:3e:97:5a:e1:f6:36:40:5e:9c:3c:
         91:3b:14:b7:6a:7c:49:51:de:f6:f6:1f:e7:08:bf:d5:28:4d:
         fc:c4:85:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1HstyWcydmQnPf22vJLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMTkwMDA3ODFjMTgzMzY2Y2JhNTU0MTZmZDc1YjU3ZGJh
MGU0YmIwHhcNMjUwODA3MDAwMDQyWhcNMjUwODA4MDAwMDQyWjAzMTEwLwYDVQQD
Eyg3ZGQ4NmQ4N2U2MzZmYzliZTkzNzg1OTc1ZjBmMTNiNGY0ZGQwYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskVVhGoCZbHGCL1Xnwd5GTYyyoX6
mxDg7cWh3Ix365vpOPmdIFCC/jgwJxCAZw5lmmzKbq3O9+9NMwJ/0Bu58w6f84rv
Bm2waf8wraPKhS/xKfXhei/G9gWCgVay3MfKtWIhbekk2QF/eG+iIITeaReSatEo
CGagiUalB5bFE2rIl1S254oprVSuPHQvYpfDmLkj79V/JAD9oxBovymnnafKaQB2
MuU9nwM75QHJ/JjAc4e+qEtWwxeXXO947d9jBGpGrqnIo36PLtChMoLKCjerN2kY
m16/j0MF9rSRAkCEdQzL2Yt0cpp++2loM0/chcu+PcuREdX9/IpDP3mV5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3YbYfmNvyb6TeFl18PE7T03QpHMB8GA1UdIwQY
MBaAFKsZAAeBwYM2bLpVQW/XW1fboOS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmI1M2YtOTBjMC00YTM1LWJmMjMt
ZmYyZGZkNjJkMzc2LzEvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NmI1M2YtOTBjMC00YTM1LWJmMjMtZmYyZGZkNjJkMzc2
LzEvcXhrQUI0SEJnelpzdWxWQmI5ZGJWOXVnNUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1g4ViK6
nESBwXxqW4dEomJahQkDRw+Unx/zjVQWBqE7O+Eye8C67waEg4f3DlC/r2K0T/sR
R0s2GeL7SncjPqEiWa2zUWlFrX/7egavoj3Z+WT1kxIJq5eqJzVL0s378y431ivU
bt/JDStyEpZPBeNX0gqb2RfzSqEVNQp/xm+6+NAkjrWvwhqaGKzIi7w/OUvoRkKc
p8V+u08OIvVYZGz10pwA+WveSezYT30T8QuKR6dC8SHzjgAAFySKjEGH6vnUnBXO
ZEMJAHyKrEQ1CoN8013SastzO3dlUDAsc2I+l1rh9jZAXpw8kTsUt2p8SVHe9vYf
5wi/1ShN/MSF5A==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:48 2025 by rpki-client