Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
File:                     qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft (raw, json)
Hash identifier:          LlwsV+937usD2/0MFqy8jc8oFwXjSMAPkF8tzK3Sae4=
Subject key identifier:   81:F8:74:85:6D:EC:B5:8E:D1:0E:E7:43:5A:33:86:EF:0B:FA:7D:6E
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Certificate issuer:       /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial:       019885B1018211D8B7F9B0A5ADE5D9769D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
Manifest number:          040C
Signing time:             Thu 07 Aug 2025 18:00:26 +0000
Manifest this update:     Thu 07 Aug 2025 18:00:26 +0000
Manifest next update:     Fri 08 Aug 2025 18:00:26 +0000
Files and hashes:         1: gS2YYEML9M4UNWK3VVDTZTM54bA.roa (hash: mr7+UlZRci6ZTeqcdGCeGzmY9P3YX+uy/+4p1bdlnM4=)
                          2: qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl (hash: IrOuZbrVQ88SNB2JhHdumda3qnceA9dYWHIYIKSfe08=)
                          3: tSdceX3_WKYPOSqNpQt9_4TBFn8.roa (hash: zZjSigYgJ8knWkj4u0ar/HI7QTSKBL8PUuzQf8DJQWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:b1:01:82:11:d8:b7:f9:b0:a5:ad:e5:d9:76:9d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
        Validity
            Not Before: Aug  7 18:00:26 2025 GMT
            Not After : Aug  8 18:00:26 2025 GMT
        Subject: CN=81f874856decb58ed10ee7435a3386ef0bfa7d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:a9:57:14:98:fd:a9:84:1a:1e:c7:9f:6b:
                    0c:9a:de:b8:50:9b:e7:f5:ec:31:58:24:71:86:2a:
                    c8:6c:ff:2f:05:81:26:91:20:f3:4b:54:51:a1:7b:
                    06:61:93:70:11:1a:6b:6a:9c:28:ac:7f:c2:9f:86:
                    e7:1e:73:c0:95:60:53:3a:7e:96:bf:47:cf:fe:fe:
                    2a:ba:ea:8a:0b:3c:42:a9:99:d6:0b:4a:82:c2:ee:
                    b6:23:14:b7:05:ae:ec:4a:c8:e4:38:57:59:4d:f0:
                    52:4e:49:75:9c:10:14:30:6c:43:ae:01:7c:5a:f9:
                    8c:93:6e:aa:c0:dc:c6:14:d0:8d:14:fb:33:46:7a:
                    3d:14:56:fc:7c:aa:7b:59:64:77:09:62:3f:6d:69:
                    a4:99:98:25:0b:c8:0c:c6:12:f0:88:db:1d:77:d1:
                    af:85:d1:42:30:eb:1b:6c:99:3b:a3:88:5d:e2:96:
                    8f:e7:f2:ef:d5:27:4f:9d:a5:09:a1:08:94:a1:fd:
                    13:ac:69:c6:13:dd:98:c6:b3:71:1a:3a:24:a2:bd:
                    42:fd:2d:73:7f:ab:f7:fd:79:f8:fd:07:2b:89:e9:
                    ea:62:8f:1f:85:2b:77:6b:c5:5f:63:01:9b:00:09:
                    04:7b:29:9a:37:82:4a:1f:bb:33:a7:5b:2a:84:3d:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F8:74:85:6D:EC:B5:8E:D1:0E:E7:43:5A:33:86:EF:0B:FA:7D:6E
            X509v3 Authority Key Identifier:
                keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:54:c8:ea:7a:68:7b:ad:a4:18:2f:06:9f:e4:2e:a2:e6:cb:
         97:ca:23:a9:9c:31:e1:fa:8b:6b:13:56:15:d4:91:52:3c:2e:
         72:90:05:ec:67:f2:80:77:4f:89:6f:1f:b8:e9:84:f7:2b:1c:
         5d:e9:e5:ba:60:b6:47:1f:9e:de:fe:ee:ba:64:bd:9d:76:00:
         78:72:73:ff:f1:71:03:a2:f0:a9:2b:f6:9a:d5:1d:c9:55:da:
         28:20:a7:b0:5f:ad:66:0d:81:0e:bd:2e:d5:62:d8:09:26:76:
         e5:21:06:6b:41:f7:a5:ac:c6:f3:f4:39:8b:fe:92:5f:40:48:
         08:8c:a6:c4:21:2b:20:c2:d3:58:61:26:5c:2e:68:d0:4c:cc:
         3d:02:1c:ce:1b:1c:fa:c0:60:b8:a3:b4:a2:53:4b:90:90:7b:
         14:65:5d:7e:dc:f9:60:f1:83:d8:e4:7f:e6:b8:51:1e:29:13:
         46:b9:81:05:de:25:cb:a8:7c:cd:44:43:d0:04:5d:46:b5:bd:
         d6:89:7b:9d:ee:eb:f9:fb:35:7c:c2:7b:1f:aa:0d:bd:31:28:
         de:37:1b:2f:3f:a7:6f:cf:b2:3d:61:78:a7:82:b3:8b:20:13:
         85:c2:53:25:f8:04:37:7c:ea:13:9d:fb:44:d2:b8:1b:0d:a2:
         58:f0:02:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFsQGCEdi3+bClreXZdp1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMzQ0YjMyZjU4YjU2NGM4OTdhMWZmYTY5NjcwODkxOThm
MmM4MjIwHhcNMjUwODA3MTgwMDI2WhcNMjUwODA4MTgwMDI2WjAzMTEwLwYDVQQD
Eyg4MWY4NzQ4NTZkZWNiNThlZDEwZWU3NDM1YTMzODZlZjBiZmE3ZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHOpVxSY/amEGh7Hn2sMmt64UJvn
9ewxWCRxhirIbP8vBYEmkSDzS1RRoXsGYZNwERprapworH/Cn4bnHnPAlWBTOn6W
v0fP/v4quuqKCzxCqZnWC0qCwu62IxS3Ba7sSsjkOFdZTfBSTkl1nBAUMGxDrgF8
WvmMk26qwNzGFNCNFPszRno9FFb8fKp7WWR3CWI/bWmkmZglC8gMxhLwiNsdd9Gv
hdFCMOsbbJk7o4hd4paP5/Lv1SdPnaUJoQiUof0TrGnGE92YxrNxGjokor1C/S1z
f6v3/Xn4/QcrienqYo8fhSt3a8VfYwGbAAkEeymaN4JKH7szp1sqhD2l3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH4dIVt7LWO0Q7nQ1ozhu8L+n1uMB8GA1UdIwQY
MBaAFKs0SzL1i1ZMiXof+mlnCJGY8sgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEt
MDFhZWM5MjBjNzJlLzEvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEtMDFhZWM5MjBjNzJl
LzEvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVTI6npo
e62kGC8Gn+QuoubLl8ojqZwx4fqLaxNWFdSRUjwucpAF7GfygHdPiW8fuOmE9ysc
XenlumC2Rx+e3v7uumS9nXYAeHJz//FxA6LwqSv2mtUdyVXaKCCnsF+tZg2BDr0u
1WLYCSZ25SEGa0H3pazG8/Q5i/6SX0BICIymxCErIMLTWGEmXC5o0EzMPQIczhsc
+sBguKO0olNLkJB7FGVdftz5YPGD2OR/5rhRHikTRrmBBd4ly6h8zURD0ARdRrW9
1ol7ne7r+fs1fMJ7H6oNvTEo3jcbLz+nb8+yPWF4p4KziyAThcJTJfgEN3zqE537
RNK4Gw2iWPAC4Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:38 2025 by rpki-client