Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
File:                     q_CoT_j1BX-Ukd775q1V7q6YzAY.mft (raw, json)
Hash identifier:          dm7DfPkyM9nmfiHymlEzPR9T5UmFjFPMn01TzCwxaCI=
Subject key identifier:   0B:93:01:3C:4C:09:02:72:51:45:8E:3A:3D:41:A8:FF:B7:31:DD:6C
Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
Certificate issuer:       /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Certificate serial:       01988B0F4DC0A4FEDDA0908121E8A1BBDCFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
Manifest number:          101C
Signing time:             Fri 08 Aug 2025 19:01:32 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:32 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:32 +0000
Files and hashes:         1: MjzHW04MNpWP93ktfKv3g1wY_yY.roa (hash: sTUqFaDMKCqi+ntmnIAR8vXErg/0YN5V/YZHZNxvcNw=)
                          2: q_CoT_j1BX-Ukd775q1V7q6YzAY.crl (hash: JDAChWEZf38fRNpcrLUw9Bq9+68l3bm4YMslJZZdRTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:4d:c0:a4:fe:dd:a0:90:81:21:e8:a1:bb:dc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
        Validity
            Not Before: Aug  8 19:01:32 2025 GMT
            Not After : Aug  9 19:01:32 2025 GMT
        Subject: CN=0b93013c4c09027251458e3a3d41a8ffb731dd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:e4:c0:f1:4f:cc:6c:44:fd:3b:e8:5a:66:
                    1f:b5:6e:6e:8d:71:61:d6:11:17:be:b9:e8:38:74:
                    2d:a5:ea:c6:12:f7:e2:1a:c9:9f:f7:f7:ca:6a:23:
                    80:44:92:f3:b1:77:29:65:c6:5f:40:23:d6:18:17:
                    ee:06:92:81:a2:aa:f9:95:38:ac:f7:54:fe:9d:70:
                    ec:ad:dc:b2:4b:4e:c2:28:bc:24:01:80:da:b4:7c:
                    9b:e4:5a:b9:de:d9:a9:97:f5:25:e5:b0:ea:54:e0:
                    22:93:08:b8:b8:4f:39:b5:b1:7d:9c:f1:1d:02:c3:
                    1e:9e:11:18:35:bd:8d:51:0e:a0:0f:20:0c:54:24:
                    09:83:8a:eb:ce:01:57:c5:ca:12:64:6b:91:09:35:
                    f5:27:4a:02:96:46:ec:14:f3:aa:b4:0a:a8:c7:6c:
                    64:39:b8:91:2e:56:a8:cf:59:a1:61:7f:7d:17:77:
                    cd:a6:d0:ba:35:a3:c2:1d:f9:42:54:67:ac:fd:c2:
                    28:37:c7:a4:e6:eb:d8:8c:3b:94:f4:85:e6:ad:ef:
                    d6:48:e1:ab:64:c4:30:06:71:84:21:a6:80:80:14:
                    84:40:9c:32:55:88:07:88:88:14:fc:86:f7:03:fe:
                    97:6e:c5:43:e1:d1:3a:2a:c5:33:aa:0f:4e:34:f8:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:93:01:3C:4C:09:02:72:51:45:8E:3A:3D:41:A8:FF:B7:31:DD:6C
            X509v3 Authority Key Identifier:
                keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ab:77:4f:f3:0e:d3:60:30:30:39:6c:f8:e5:8f:27:58:70:
         c3:7b:79:5d:54:53:2d:67:da:ee:4b:49:e0:86:56:dd:da:d5:
         fb:11:c2:ec:85:f5:b3:a7:67:b8:0d:5e:ca:15:3f:52:01:b1:
         23:e3:0c:2f:06:d5:41:50:6c:2f:2b:0f:9c:86:03:47:54:9a:
         20:90:93:d1:e4:0e:10:22:4e:a1:de:5b:a9:75:08:46:db:f6:
         0c:06:5e:46:73:d6:bf:dc:ed:9f:33:ed:a5:5f:ba:71:cc:2b:
         c7:e8:5e:62:94:f1:bf:ab:92:2e:c9:34:52:91:c8:b3:14:ec:
         14:8f:d5:eb:9f:ba:1f:7d:db:1f:e8:5c:be:15:1f:34:de:c7:
         bd:fa:ee:18:c8:62:8c:f4:98:e1:c1:88:21:fe:fd:51:d5:7e:
         96:91:e5:ff:c7:6c:77:d1:da:ae:f7:67:dd:19:ea:82:a9:8d:
         31:9d:99:d8:22:40:fa:1d:ac:dc:8b:f7:1b:6f:3f:59:84:9d:
         06:e2:f1:3b:14:39:d1:eb:14:05:0c:b6:64:db:f1:18:aa:37:
         24:f2:c3:d8:bb:e7:0f:07:5d:1f:08:c4:56:d6:57:b7:c2:cc:
         6a:5e:86:fb:a8:1b:1f:44:27:db:8d:5c:70:59:5a:25:02:e7:
         eb:b2:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:30 2025 by rpki-client