Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          7ZfLrig5QKv2tzn6jCn3x0Wg/+lbt+aoIWHWJyPf4V4=
Subject key identifier:   CB:D9:4F:57:61:2F:54:FC:A5:A3:9E:DF:69:B1:B1:95:FC:2F:F8:4F
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       01983D6127E151F2B99A4790CFA4C74591EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0CB6
Signing time:             Thu 24 Jul 2025 17:00:33 +0000
Manifest this update:     Thu 24 Jul 2025 17:00:33 +0000
Manifest next update:     Fri 25 Jul 2025 17:00:33 +0000
Files and hashes:         1: 3vZog35fA7A8208htG6MPJHCfRQ.roa (hash: KjUP3VOXf2M5RM2RNCpzmW1mXhGa52pGMp/lPhjp9fc=)
                          2: BfHqfkHY1q4ldygRkcfv7XdzqLs.roa (hash: YbMXX/fz76OV1tIhHwhH/SEdCy/PTJDjaV1pgkgaZeE=)
                          3: CmIDNfzs3bSVgY-dfSu_0KvUwvU.roa (hash: zeJTsFwERYYSCRF2I3KzeFe/yJYCV+YH9obrNhlqeUk=)
                          4: XaQFQicfhG4nS73QjVCHMUwAPG8.roa (hash: vEWEx+WC0m8X0tM9GZ7AzmWSqkdHKT5bYqE12jvQZ1Y=)
                          5: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: NmLHZRAcA+9NC3VjUwOf1h+SbyonjDQWWWy2j08o2hY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3d:61:27:e1:51:f2:b9:9a:47:90:cf:a4:c7:45:91:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Jul 24 17:00:33 2025 GMT
            Not After : Jul 25 17:00:33 2025 GMT
        Subject: CN=cbd94f57612f54fca5a39edf69b1b195fc2ff84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:22:50:bf:f7:41:14:b9:fb:2f:ff:a3:60:
                    13:07:70:0f:19:0c:0f:0d:20:32:b5:b3:74:6d:b1:
                    1b:5a:b0:b7:a3:2c:05:bf:49:f7:11:37:11:23:32:
                    c5:29:ff:04:d8:0f:a7:a6:e4:f8:e4:c0:d7:77:f1:
                    06:9a:15:79:f0:12:f3:76:77:fd:6a:13:6c:ea:63:
                    1d:25:5f:30:e2:07:76:10:34:cd:05:ef:c6:06:61:
                    d4:b3:37:c8:17:3e:71:5c:a2:13:16:9e:ae:29:89:
                    8d:a8:02:62:34:2c:f9:96:f3:0c:3c:41:60:f9:78:
                    15:eb:80:62:8c:0d:7c:ed:97:20:a1:f6:6b:00:ce:
                    79:2d:73:55:cb:f4:b3:a8:b6:43:80:53:a7:67:4a:
                    9a:4d:d0:2e:f9:5c:43:7e:f3:38:50:00:53:0e:a7:
                    6b:36:ff:e7:07:2e:85:0d:3d:6f:e2:f0:8a:c2:29:
                    79:06:89:d6:9d:d9:9b:9a:d3:40:e4:85:4e:1d:96:
                    31:0d:6f:f5:e7:50:94:58:4f:ed:3b:f0:85:42:f8:
                    71:bf:cb:a5:9e:df:11:f0:57:73:bc:9a:e6:6a:40:
                    77:f0:da:62:d5:be:a2:82:15:17:7f:5a:38:c7:33:
                    d0:9d:ab:b6:8e:f5:45:70:7e:83:d5:08:9e:06:9a:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:4F:57:61:2F:54:FC:A5:A3:9E:DF:69:B1:B1:95:FC:2F:F8:4F
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d8:a7:ca:3f:07:1d:df:d4:9f:7a:25:d5:46:8b:f6:57:4a:
         49:f1:57:44:c9:b9:5f:3b:7b:4c:68:b3:79:8f:97:f1:d9:c2:
         66:ff:f6:1f:d3:91:cf:7e:f8:f6:e4:07:fb:2f:54:5e:10:5c:
         90:0e:2b:58:5b:ab:1b:a2:46:5e:4c:d4:68:65:84:89:12:ee:
         4c:dd:f7:ad:ed:28:57:7b:29:af:6d:10:37:83:17:07:6b:62:
         d7:ff:26:26:85:43:20:06:f1:86:0f:f7:f1:8b:15:88:79:67:
         53:10:47:4f:13:34:89:a1:aa:b5:2f:07:04:a8:80:ef:46:60:
         03:c3:07:65:5a:03:56:99:97:9c:3c:0e:42:2c:36:de:c2:cf:
         98:67:95:6f:19:70:82:1c:54:f5:fd:47:bb:03:66:1c:80:eb:
         b9:26:6c:cd:1b:0e:fe:22:53:99:0d:21:51:0f:7d:6b:8f:f7:
         8f:b3:8f:1f:7f:87:c4:35:16:55:29:97:d5:fc:bc:fb:8c:63:
         ef:08:ec:8c:ff:43:6c:c1:10:09:4c:e6:25:93:d0:0b:a0:90:
         81:1d:94:f6:d2:de:8e:7b:25:8f:96:f5:60:87:c3:5e:49:f8:
         f1:a5:de:b9:45:73:0f:c2:f3:16:23:01:15:12:22:36:a3:55:
         c6:2f:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:24:47 2025 by rpki-client