Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File:                     qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier:          gAqJb/iRH5C8QIKr5dX8FSY7QFK2/t6h7y5qUp38m0U=
Subject key identifier:   56:A4:C7:95:98:66:01:3E:E5:0F:A1:14:3E:E1:0B:EF:55:27:1A:34
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer:       /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial:       0199221F4FECA0BF60E96F343A42A35521D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 03:01:41 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:41 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:41 +0000
Files and hashes:         1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: HxQEGv9QjOpIec0tixKY2ggnT5xBZckvyOx5UGbbsxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:4f:ec:a0:bf:60:e9:6f:34:3a:42:a3:55:21:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
        Validity
            Not Before: Sep  7 03:01:41 2025 GMT
            Not After : Sep  8 03:01:41 2025 GMT
        Subject: CN=56a4c7959866013ee50fa1143ee10bef55271a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:e5:ed:02:73:7f:6b:cb:72:01:7e:1d:25:
                    f6:0e:07:a0:4c:05:c9:e3:01:93:52:c6:63:2f:c8:
                    ab:6f:56:49:21:d1:d7:c9:c3:c5:71:11:d2:fe:f4:
                    0c:03:2f:e5:5b:c4:6f:60:ba:47:81:0e:d7:eb:53:
                    3e:f8:0f:a9:a4:80:70:23:67:a4:6b:f4:fa:ea:0e:
                    8d:dd:3c:5b:a5:9b:7f:b5:ab:49:af:67:f6:2b:78:
                    de:16:86:2a:f6:5e:d3:6f:cd:f6:87:18:7e:12:4a:
                    8f:1c:3a:f8:f1:1e:eb:39:ae:1c:a6:61:71:6d:f6:
                    5c:ce:05:3c:f3:54:50:4c:ce:75:d4:b9:b9:18:97:
                    b0:af:a7:33:d2:1f:e8:b9:ff:54:88:cf:24:70:e6:
                    75:b2:98:b8:c6:a2:f1:cc:8e:1b:26:cf:c7:1c:1d:
                    27:4a:23:8c:2d:6b:ae:e9:66:f0:b9:c1:10:6e:3e:
                    8b:b8:86:90:b1:a7:74:c0:5e:2e:7b:4f:11:42:3f:
                    76:e4:58:85:9f:33:f5:aa:cd:29:39:6c:bc:5f:c9:
                    8f:05:5b:3c:fe:d6:7c:b9:66:5c:a6:86:ae:7f:11:
                    db:05:70:b3:b6:d2:e2:d1:aa:59:46:1d:b6:2a:c5:
                    3d:d9:80:c2:4e:24:53:c1:17:9d:7a:b3:7d:42:e2:
                    93:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:C7:95:98:66:01:3E:E5:0F:A1:14:3E:E1:0B:EF:55:27:1A:34
            X509v3 Authority Key Identifier:
                keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:2f:93:af:4c:11:55:a3:de:c7:2d:df:5e:f8:f0:ef:5d:
         00:22:6a:47:f4:07:d3:c1:e2:4c:a6:68:db:29:43:26:b1:cd:
         c2:64:83:c7:9c:fb:f5:93:8d:4c:2e:e3:84:d1:ba:c9:56:4c:
         c2:6a:af:2f:ab:db:ea:35:7f:71:cf:f8:a2:1d:8a:01:9d:dc:
         f3:90:77:56:e2:55:7c:2a:b1:50:d3:28:78:7b:57:ee:18:de:
         36:c4:0f:04:d2:31:16:59:97:33:f0:3e:91:bd:08:69:9a:1d:
         d4:d5:08:01:6d:72:70:f6:ae:ea:65:60:3c:f4:fe:5a:d5:e0:
         5e:91:6e:1f:4c:7c:3e:64:a9:f5:df:d2:11:55:a5:5b:b1:cc:
         26:f7:8a:de:59:ef:31:73:37:35:84:ae:97:ec:b2:66:6c:ae:
         a9:97:65:c9:98:26:57:21:9f:e9:98:dd:ee:fe:fb:ee:a6:90:
         96:67:f6:4d:3f:4f:76:94:69:eb:5d:7a:d7:40:c4:d3:b6:fb:
         a1:07:6c:5e:66:ee:2d:8a:e5:b4:e0:af:d0:a0:75:27:c1:94:
         30:c8:ca:ea:22:40:70:46:73:ed:22:82:69:75:50:09:38:76:
         be:ea:48:1b:55:f6:9c:e4:3f:77:6d:26:5f:8d:74:ae:e3:23:
         33:d7:1d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiH0/soL9g6W80OkKjVSHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MTI3ODdhYWE0NmZiMDRkYWNmYzVlYjYwNjBiMGFjYTAy
ODRiNzEwHhcNMjUwOTA3MDMwMTQxWhcNMjUwOTA4MDMwMTQxWjAzMTEwLwYDVQQD
Eyg1NmE0Yzc5NTk4NjYwMTNlZTUwZmExMTQzZWUxMGJlZjU1MjcxYTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+rl7QJzf2vLcgF+HSX2DgegTAXJ
4wGTUsZjL8irb1ZJIdHXycPFcRHS/vQMAy/lW8RvYLpHgQ7X61M++A+ppIBwI2ek
a/T66g6N3TxbpZt/tatJr2f2K3jeFoYq9l7Tb832hxh+EkqPHDr48R7rOa4cpmFx
bfZczgU881RQTM511Lm5GJewr6cz0h/ouf9UiM8kcOZ1spi4xqLxzI4bJs/HHB0n
SiOMLWuu6WbwucEQbj6LuIaQsad0wF4ue08RQj925FiFnzP1qs0pOWy8X8mPBVs8
/tZ8uWZcpoaufxHbBXCzttLi0apZRh22KsU92YDCTiRTwRederN9QuKTMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFakx5WYZgE+5Q+hFD7hC+9VJxo0MB8GA1UdIwQY
MBaAFKkSeHqqRvsE2s/F62BgsKygKEtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMt
ZTgxZjVmZTQ3MzhmLzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMtZTgxZjVmZTQ3Mzhm
LzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbEvk69M
EVWj3sct31748O9dACJqR/QH08HiTKZo2ylDJrHNwmSDx5z79ZONTC7jhNG6yVZM
wmqvL6vb6jV/cc/4oh2KAZ3c85B3VuJVfCqxUNMoeHtX7hjeNsQPBNIxFlmXM/A+
kb0IaZod1NUIAW1ycPau6mVgPPT+WtXgXpFuH0x8PmSp9d/SEVWlW7HMJveK3lnv
MXM3NYSul+yyZmyuqZdlyZgmVyGf6Zjd7v777qaQlmf2TT9PdpRp611610DE07b7
oQdsXmbuLYrltOCv0KB1J8GUMMjK6iJAcEZz7SKCaXVQCTh2vupIG1X2nOQ/d20m
X410ruMjM9cdMQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:45 2025 by rpki-client