Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
File:                     qwJca7PczxsWUUnChzwEsabH2no.mft (raw, json)
Hash identifier:          yDp8bEcywPe6Hr1q/hJCEGS9EBs+lu1u8qAE+91VBaw=
Subject key identifier:   44:E6:64:5B:64:AF:05:BD:4C:3E:B6:5D:4E:D0:C1:A2:4B:F8:51:06
Authority key identifier: AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
Certificate issuer:       /CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Certificate serial:       019883561BBE5211F81DDA79E10D5E215031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
Manifest number:          0ADB
Signing time:             Thu 07 Aug 2025 07:01:55 +0000
Manifest this update:     Thu 07 Aug 2025 07:01:55 +0000
Manifest next update:     Fri 08 Aug 2025 07:01:55 +0000
Files and hashes:         1: qwJca7PczxsWUUnChzwEsabH2no.crl (hash: A7BxesX1qjUP/PEFyUCgNI/M5C+9tmxeZtZJ5oNMt7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:56:1b:be:52:11:f8:1d:da:79:e1:0d:5e:21:50:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
        Validity
            Not Before: Aug  7 07:01:55 2025 GMT
            Not After : Aug  8 07:01:55 2025 GMT
        Subject: CN=44e6645b64af05bd4c3eb65d4ed0c1a24bf85106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:b0:86:34:11:11:d7:8a:c7:4b:e1:12:b4:
                    7a:3a:9a:5c:53:c4:e1:e8:5f:22:f4:48:e7:60:2e:
                    3f:1f:6a:a2:40:f4:58:75:c4:b4:f3:54:6b:1e:5a:
                    28:66:2a:ca:52:c2:74:e0:e9:9a:eb:6f:f6:24:b3:
                    95:a9:93:54:1a:aa:60:d4:42:e6:eb:dd:4e:07:aa:
                    a0:ca:48:88:50:3f:09:dd:65:1d:cd:d8:8c:8f:5a:
                    be:ad:69:3b:5d:1c:99:dd:7a:9f:3e:ef:ba:74:4a:
                    8b:04:d2:a2:f8:c3:e1:2d:56:f0:71:78:65:14:cc:
                    fd:aa:2b:2e:21:c9:21:65:4a:a4:f3:ed:e3:60:52:
                    af:4e:1b:7d:f6:f7:9f:4d:6d:df:bc:85:e1:21:a5:
                    88:73:44:f3:f1:37:08:06:2a:da:d6:d5:89:47:b0:
                    8e:bd:fa:2a:c2:05:7a:db:2d:11:42:52:de:eb:c3:
                    54:f9:00:b7:15:97:bd:3f:da:09:26:d8:b7:9c:6c:
                    5c:6c:bd:c0:bd:8e:91:21:af:96:1c:28:d1:b5:9f:
                    6a:19:69:78:2c:4b:56:7a:fd:49:b2:b5:0e:96:4a:
                    1b:c6:2b:75:e1:1d:90:eb:58:5a:b6:62:f9:e5:39:
                    41:7c:53:d8:3f:65:ad:0b:cc:75:68:08:50:ae:42:
                    bc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E6:64:5B:64:AF:05:BD:4C:3E:B6:5D:4E:D0:C1:A2:4B:F8:51:06
            X509v3 Authority Key Identifier:
                keyid:AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d6:f7:51:28:e8:3d:19:62:eb:b0:dc:00:6c:52:38:81:32:
         27:0c:4b:9c:89:ab:c6:df:02:9c:bf:c0:3f:3b:47:76:c0:0c:
         89:a4:48:06:5a:4a:7a:c1:94:22:33:20:49:ab:17:f2:9b:d0:
         61:24:68:01:72:07:5d:95:db:80:e0:0b:3f:cd:a5:d0:fc:4b:
         8d:42:a7:3c:86:55:62:81:9f:c6:81:3c:e2:6f:c9:a3:5c:0e:
         7c:19:52:13:03:10:01:60:6d:7d:3c:49:57:69:4f:f9:02:13:
         2b:6a:98:29:73:4c:e4:df:17:62:ed:4e:de:ee:e7:b6:20:c2:
         26:0b:59:ab:09:90:42:84:91:4a:f0:4c:f8:7b:e7:3c:7b:05:
         72:4b:a2:9f:0f:19:c1:7f:9a:ed:ba:91:28:22:10:12:7e:8b:
         44:87:75:03:ca:f5:1b:ab:c4:50:b9:43:55:71:fb:3e:e9:c9:
         83:20:30:46:38:2f:e6:2e:4c:29:cb:28:5b:c9:4c:16:bb:2d:
         1f:d1:fa:29:c1:05:04:a3:e3:6a:47:83:67:3d:06:0b:26:b2:
         ad:6d:ef:c4:e7:4f:f3:33:71:af:3c:f7:49:72:94:11:b4:88:
         4b:8f:ac:49:da:49:31:0b:3e:5d:bd:c3:f7:07:4a:cd:79:24:
         7e:5a:d1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:18:45 2025 by rpki-client