Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
File:                     q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json)
Hash identifier:          gIj5dlVjqQfcduhgg1DSNG4DeDGh5eilOYz5E93k5CM=
Subject key identifier:   78:4B:D6:FB:80:FE:67:F8:E1:B7:30:BA:06:3B:B9:D6:A0:ED:E9:25
Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
Certificate issuer:       /CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Certificate serial:       019874500ED0219993E31A44AA7F8DBEB750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
Manifest number:          087B
Signing time:             Mon 04 Aug 2025 09:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:00 +0000
Files and hashes:         1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: ewsCxJrCMUDTgyOJvoLRpQFM3YLqCwOxHRVjWWTZrSA=)
                          2: sV9tAEvP7CI_ytsSrwY5KYVQ0uo.roa (hash: z6QhtjWTggxEC3vWBAoujIqlOU7iqRgtEA7A/CNef2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:0e:d0:21:99:93:e3:1a:44:aa:7f:8d:be:b7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d
        Validity
            Not Before: Aug  4 09:01:00 2025 GMT
            Not After : Aug  5 09:01:00 2025 GMT
        Subject: CN=784bd6fb80fe67f8e1b730ba063bb9d6a0ede925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:e6:b3:ee:74:1c:cd:91:dc:e7:20:99:ef:
                    9b:6a:05:5d:6e:16:85:1c:b2:d8:b2:a0:8f:4b:ad:
                    4d:e9:c7:4d:bf:6a:e4:2f:13:8d:07:38:70:56:00:
                    b4:c1:5f:0d:48:f5:ab:16:94:58:4f:c0:ca:b8:6a:
                    22:9d:64:e0:bd:fc:f4:a5:c5:47:54:88:48:e8:0c:
                    8f:52:00:95:ae:ea:83:43:f8:aa:e1:0c:7a:b9:8e:
                    4d:bf:39:3b:30:a3:45:97:a1:eb:ba:02:8b:a7:4f:
                    88:4f:cd:9c:50:8d:0d:b5:0d:d0:65:40:43:ea:78:
                    09:80:a7:4b:79:89:83:f1:6c:38:99:b5:36:41:40:
                    b8:e1:6f:05:fa:be:d3:f5:01:3a:c0:26:18:01:5e:
                    6f:ec:78:20:f1:02:86:00:f6:17:d7:e0:96:30:8b:
                    89:4c:36:e7:80:e0:4e:83:41:35:a3:c1:d3:f3:4f:
                    4a:9a:4a:fe:52:bc:7c:b0:6b:d6:26:44:78:52:32:
                    0e:88:b7:4d:ff:d4:8d:6f:d6:c2:9c:1b:38:9d:a1:
                    a0:83:38:24:63:82:4d:23:db:1a:49:76:99:11:04:
                    33:bd:da:da:ff:2a:63:1d:59:22:55:93:db:31:2e:
                    f5:27:f4:6f:b8:48:34:c8:e0:fb:8b:b6:e9:fc:92:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4B:D6:FB:80:FE:67:F8:E1:B7:30:BA:06:3B:B9:D6:A0:ED:E9:25
            X509v3 Authority Key Identifier:
                keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a4:4e:25:7d:72:8f:5f:dd:6c:56:53:74:2b:cc:b5:67:f5:
         4b:53:81:2e:a7:59:ac:09:a5:62:86:c3:c2:40:aa:87:bf:3d:
         c1:5b:1a:dd:ef:f0:78:a3:16:86:70:d1:b6:71:81:bf:b3:93:
         f7:b1:7a:29:63:6b:fd:57:e7:c2:4b:bc:15:20:d2:83:1c:ca:
         d5:1d:86:72:8b:07:f4:f3:b5:c9:a9:59:da:bb:7c:35:48:fc:
         d3:db:b3:1e:52:09:9a:95:9a:d2:d9:68:d6:af:eb:1d:7b:6c:
         85:a5:df:75:82:7f:66:f4:78:ff:f9:ee:7d:42:85:37:b6:29:
         9d:4d:11:1f:57:52:0b:ec:c7:6e:d2:df:df:bd:66:e3:52:c3:
         a4:80:c6:2e:11:bb:e3:ae:f9:27:71:d8:60:1f:f1:e3:3c:4e:
         61:33:31:99:b9:78:c2:92:30:ce:69:b6:88:c2:90:0c:c6:33:
         ac:4f:87:27:63:5d:2a:dc:ce:a3:6d:3e:d8:0e:ed:01:50:24:
         33:09:a4:5d:12:c6:0a:e9:d3:a4:0f:da:97:8b:47:28:9b:16:
         c9:17:cb:be:93:e7:c5:2a:53:66:b0:37:61:4c:d2:64:d3:fe:
         7d:81:e3:88:94:2e:44:4c:9f:04:4d:72:60:be:67:0a:98:17:
         91:10:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:52 2025 by rpki-client