Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
File:                     qPuDH1vWwMILjgm-URwhvn3F3ro.mft (raw, json)
Hash identifier:          r7EiUa5Ff7LZy4iXgLGxRxgrIepWWBMCy6VZ1lJzIuY=
Subject key identifier:   16:84:B2:CD:B5:E7:7D:7D:2C:70:ED:B6:45:46:6D:34:E2:79:53:1F
Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA
Certificate issuer:       /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
Certificate serial:       019A4DE1D53F96270BCCB9C6D10497FBD1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
Manifest number:          06F1
Signing time:             Tue 04 Nov 2025 08:00:37 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:37 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:37 +0000
Files and hashes:         1: eVNnviqiIdPY1BUvp61D_AbFKTc.roa (hash: zPSI/g0bx6X/hvEByyb1M6C4zHIhQAKfdMZa4T5kVWA=)
                          2: qPuDH1vWwMILjgm-URwhvn3F3ro.crl (hash: zK4vZnLoyp3Nh5NyVli5l/5MXe1BtZ2Zwid0EJZMAKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:d5:3f:96:27:0b:cc:b9:c6:d1:04:97:fb:d1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
        Validity
            Not Before: Nov  4 08:00:37 2025 GMT
            Not After : Nov  5 08:00:37 2025 GMT
        Subject: CN=1684b2cdb5e77d7d2c70edb645466d34e279531f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:e7:35:ce:90:f3:17:93:44:75:7e:50:3f:
                    b1:1e:64:5a:21:cb:14:eb:cf:92:fc:41:10:16:00:
                    fc:14:a4:09:d2:6d:8c:41:1b:cc:a8:b6:d9:68:81:
                    2e:a0:ca:15:d2:1a:2f:47:3a:84:16:c2:10:54:7d:
                    d7:08:44:6e:24:10:3c:cf:ce:0a:28:1c:ba:fd:a8:
                    db:9f:22:20:da:49:30:4a:05:69:5c:94:b4:b4:7c:
                    9e:87:a3:bf:42:98:ad:1d:bd:e8:52:73:b5:b7:d2:
                    6b:f6:cb:54:60:fe:12:be:66:e6:b0:b0:13:3c:f4:
                    ab:f8:98:2e:8f:00:d2:11:db:96:fe:20:92:3c:73:
                    34:78:c3:29:6b:cd:c9:f9:7f:72:34:13:07:84:e1:
                    55:c6:5e:53:f4:4c:78:21:6b:21:5c:2a:2b:6b:c4:
                    0d:39:64:ec:fe:b9:70:c3:63:49:a8:d5:d7:e9:10:
                    b2:e4:da:bf:c6:cd:25:5b:30:e3:cf:bb:d2:d4:1a:
                    43:24:43:96:d8:05:60:83:45:37:cd:81:33:1b:5a:
                    e6:e8:0f:05:f0:55:5a:81:8c:fd:52:4a:09:40:1a:
                    08:41:0b:5c:03:54:38:86:88:6f:20:7f:1a:90:e7:
                    44:26:87:2d:0d:90:fb:f4:3a:f1:7a:49:b2:80:44:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:B2:CD:B5:E7:7D:7D:2C:70:ED:B6:45:46:6D:34:E2:79:53:1F
            X509v3 Authority Key Identifier:
                keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:67:3f:a1:62:1e:55:f2:8d:fb:d2:8e:75:2e:4c:fb:5c:37:
         12:d5:bb:a6:71:af:15:f5:f0:d2:82:32:0b:d1:90:40:97:7d:
         ef:bd:29:36:16:e0:ba:1c:3f:68:56:f6:4c:bf:a6:24:ee:e6:
         bc:f7:ce:d8:51:94:4c:d3:b2:10:2e:f1:93:e4:78:fb:7b:df:
         b5:15:e7:56:35:34:51:e7:08:39:c5:bc:54:e8:ff:23:e4:81:
         4d:e7:f6:b1:f8:72:4b:81:88:23:df:a9:94:b2:7a:b4:a4:63:
         d4:5f:79:d1:93:bb:6b:0e:3b:5e:a6:bd:0f:ee:d9:67:66:3d:
         fa:1a:d2:0e:1a:e0:6e:85:d6:9c:1c:06:ee:a5:c4:56:e1:cd:
         1f:cf:d5:a9:dc:67:6d:8d:b6:63:ce:1b:18:ad:55:23:8b:80:
         06:6d:57:c0:f8:0e:f9:ec:53:00:4b:12:ba:74:fa:5d:ef:32:
         af:b3:95:08:66:7f:f9:06:e7:81:7a:ae:aa:e6:41:6f:63:f3:
         83:e7:b8:19:52:41:0e:ea:35:7a:65:c1:03:74:01:a5:92:06:
         9b:f2:29:c1:ef:76:16:91:85:83:ac:3a:ef:48:c6:c5:3c:cc:
         5a:37:7b:91:0d:39:2d:12:56:b3:a4:08:30:db:8f:cc:94:0a:
         51:35:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:43 2025 by rpki-client