Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File:                     qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier:          71WvEK7z5iP8lt1PMLnAaromj4fnV+c3mpP9jQnxGRQ=
Subject key identifier:   B5:CB:84:2B:0E:E7:0B:38:7B:1E:D1:3B:C2:55:33:D8:CA:45:10:32
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer:       /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial:       019961A2CFBF2D39690128C20075DE310A6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number:          16B6
Signing time:             Fri 19 Sep 2025 11:01:23 +0000
Manifest this update:     Fri 19 Sep 2025 11:01:23 +0000
Manifest next update:     Sat 20 Sep 2025 11:01:23 +0000
Files and hashes:         1: 5HOepO76tD27CgXh7AgBSaOVvIM.roa (hash: fhyBpQTMKKX7db+5/rypfSBY1Vplej8lw2Wzs2aMOjk=)
                          2: BjbFGBnarO2cCv0PH6ntVbedam4.roa (hash: esMjDWppfcZ06TyXIbKLAnymDp9T/LDpIE2eRCGz9wM=)
                          3: NUZ62speWa0hfYDy7wa7hz3yElg.roa (hash: kF9c9XUwfNAZlikdfObuH2Z3J2bnJMLn8HSb5Ko9hw8=)
                          4: jVDEyqMCODRbBkqkq43-QF92dZM.roa (hash: s/kttAz6ZQTi3SrIl36OIG3RsnNyK9roMAcg0ML6WjQ=)
                          5: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: dHw1MfHW+4EIatQti5m7e3IsrGglO/Sht9j3WRZGEuA=)
                          6: t0oLewvfmtctM6fLKW7JACNy67I.roa (hash: eoIen7jr8ftFR2LBFlJ/X2GszHh0uXwaMxdCabuer48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 11:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:a2:cf:bf:2d:39:69:01:28:c2:00:75:de:31:0a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
        Validity
            Not Before: Sep 19 11:01:23 2025 GMT
            Not After : Sep 20 11:01:23 2025 GMT
        Subject: CN=b5cb842b0ee70b387b1ed13bc25533d8ca451032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:97:64:fd:ac:ca:d3:65:4d:ca:85:40:3a:
                    71:7e:fa:2d:b2:5e:92:8d:b0:64:7e:b7:c5:63:c1:
                    3f:fd:ca:07:9b:1e:01:0b:f4:4a:42:a8:0d:b3:77:
                    c1:3c:c8:cb:8c:be:49:df:df:87:98:e3:2d:cf:e7:
                    2f:15:1d:d9:2c:ee:c8:1c:82:4b:e4:56:42:3b:9d:
                    8b:fa:dd:db:b1:b3:f3:a3:da:a8:bb:52:b2:4d:a1:
                    d9:64:88:a5:8a:24:6c:16:f6:0d:9c:77:f9:48:7c:
                    2a:d6:1d:cf:94:65:c6:eb:05:0c:bb:65:94:99:9c:
                    cc:cc:72:86:1b:c0:d9:93:8d:34:73:04:97:6b:0d:
                    47:68:ac:66:74:01:c7:ad:9f:25:53:86:73:cb:d4:
                    b7:b4:c8:23:a3:4c:4d:a7:24:ff:c4:d5:b7:ae:41:
                    97:a3:b8:1e:dd:d1:14:43:28:e8:6f:c1:e5:6e:0a:
                    4a:78:b3:1d:5d:ca:62:07:07:c9:fb:2e:a9:81:69:
                    97:92:06:aa:2d:63:2f:af:51:a0:d8:3a:8d:4a:e8:
                    27:3c:d6:32:cf:83:51:eb:98:ff:57:d0:72:df:93:
                    11:81:e3:dc:a8:50:c3:e9:08:10:d5:43:b5:d1:61:
                    26:96:37:53:1a:13:37:29:41:94:2e:ae:33:96:5a:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:84:2B:0E:E7:0B:38:7B:1E:D1:3B:C2:55:33:D8:CA:45:10:32
            X509v3 Authority Key Identifier:
                keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:cf:35:cc:01:18:3f:70:10:0e:36:55:f3:04:8c:eb:75:e6:
         d8:bd:31:d8:11:ef:bb:c7:48:4a:57:29:da:45:e4:d9:5d:0a:
         26:78:77:1d:d3:34:f0:33:b2:8b:d8:1b:96:62:05:96:11:d7:
         45:da:f4:93:dd:64:58:de:c4:2a:05:08:e1:a2:01:1e:fe:26:
         b2:24:f1:69:d7:89:0d:76:b2:f9:6c:0a:bb:98:a7:31:3c:95:
         41:3a:a5:01:ce:32:61:1e:63:1d:87:98:9f:00:97:4c:20:d0:
         b5:6d:ac:9d:b8:87:48:84:28:fb:1e:48:13:d2:a5:f0:4e:94:
         13:83:a9:85:10:c1:02:24:d7:22:13:c0:ab:ea:ba:7f:f5:4c:
         13:1f:c8:b6:21:cd:8e:8b:e0:6a:8f:48:6c:92:69:2f:7f:ee:
         0b:d7:bd:e4:12:3d:e4:dc:fa:93:af:4e:1d:60:df:4a:ec:a5:
         f3:95:cc:3b:59:f0:88:77:2a:6c:ba:56:8d:ba:54:d0:11:64:
         62:72:71:3b:82:3a:0b:84:26:0c:d4:cb:0f:a2:c2:f6:ce:9f:
         da:af:63:7a:35:19:1f:97:c4:da:18:3c:b5:09:ad:42:2b:23:
         49:45:74:09:d3:ef:e4:ee:0c:48:17:e1:30:f2:0e:e6:41:4d:
         c8:f9:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 17:45:19 2025 by rpki-client