Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File:                     QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier:          YKfo0fiJUCM6lwtF1PShVEbkrWJ3cKd8zhSfnbZ18Tg=
Subject key identifier:   25:06:0C:20:36:7A:09:91:B4:3B:46:C0:F3:65:BD:EA:D4:A7:C9:8B
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer:       /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial:       01993124AD2C517F1687F97342749531FACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number:          0C0E
Signing time:             Wed 10 Sep 2025 01:01:51 +0000
Manifest this update:     Wed 10 Sep 2025 01:01:51 +0000
Manifest next update:     Thu 11 Sep 2025 01:01:51 +0000
Files and hashes:         1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: snHxMyz6hJ2jT6q3i8zbfsG6qoYNw1rX6hW9TLBS/tE=)
                          2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:24:ad:2c:51:7f:16:87:f9:73:42:74:95:31:fa:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
        Validity
            Not Before: Sep 10 01:01:51 2025 GMT
            Not After : Sep 11 01:01:51 2025 GMT
        Subject: CN=25060c20367a0991b43b46c0f365bdead4a7c98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:94:44:11:08:57:3d:ec:bb:87:34:19:f5:
                    a4:81:22:dd:5b:fb:e7:a4:76:a6:b0:1d:fc:02:95:
                    a0:a7:8a:9a:5e:ea:29:36:89:92:47:62:aa:cf:4c:
                    db:78:51:f7:19:34:3b:cb:29:4a:00:e9:52:55:5d:
                    46:21:aa:c9:f9:2d:84:38:12:0d:58:df:74:42:a8:
                    09:b0:c8:e5:93:34:2f:14:67:7a:3b:25:8a:19:eb:
                    22:0f:b7:45:60:50:e8:22:a8:12:e6:7b:f4:b4:e1:
                    f2:24:c4:dd:c9:e9:3c:11:b9:8e:48:d0:43:02:eb:
                    0f:18:1b:2b:21:30:b1:ba:6a:97:64:34:4a:5b:c2:
                    aa:6e:a9:ca:11:8f:28:80:58:04:6f:36:bd:00:04:
                    a0:1b:a9:71:93:2e:66:df:4b:25:49:b6:03:22:6e:
                    92:ee:c0:cd:52:7a:da:14:be:f6:67:7d:08:31:da:
                    4d:e9:a2:b6:b7:dc:51:9a:95:89:73:ab:b9:13:24:
                    f9:0b:8a:fc:82:4e:eb:96:dc:d0:89:d3:7e:9e:33:
                    d7:62:c0:74:01:15:77:07:87:19:b4:9e:63:7b:03:
                    c2:d2:b0:4c:ca:82:53:2d:64:d3:b7:cf:2f:6a:ad:
                    88:73:04:b6:d6:9b:5c:66:63:3f:e4:6c:00:09:95:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:06:0C:20:36:7A:09:91:B4:3B:46:C0:F3:65:BD:EA:D4:A7:C9:8B
            X509v3 Authority Key Identifier:
                keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:21:17:60:a8:de:2c:45:48:18:00:c4:6e:97:5b:45:e1:90:
         55:97:b1:3a:73:62:5d:1b:a4:0c:14:aa:1d:b4:0b:b2:3e:15:
         c6:bb:4c:8e:9a:2a:5e:aa:fb:aa:6b:6f:d5:ba:9b:55:f2:79:
         9d:6e:0b:4b:a0:48:95:78:17:9c:ef:c1:4d:bb:07:d6:b0:ce:
         ab:2b:ac:b1:19:75:1f:39:5d:02:c7:9c:ce:b6:b1:fe:87:9c:
         ba:83:a3:4b:83:7e:d8:71:cb:2c:34:ee:ae:c2:b1:b4:1b:e9:
         07:fa:4e:ad:6a:ef:9f:f6:88:da:8f:04:46:82:7b:eb:2e:82:
         66:26:a4:18:13:02:d9:f7:db:9a:f6:d7:55:5f:e6:22:e3:a7:
         df:c6:7f:b6:a0:03:9b:06:94:0d:68:c8:39:87:92:e4:d1:c6:
         17:dc:24:30:e0:b8:4a:a8:31:49:3e:dd:51:5a:76:3e:a7:50:
         55:d6:01:b2:6b:77:46:32:ab:f7:06:c3:72:3c:f6:41:35:7a:
         a7:9c:de:52:a1:e8:3d:61:1b:10:a4:84:78:05:dc:e4:dc:43:
         e5:5f:1e:0f:58:22:82:a2:f0:2d:86:37:65:9b:58:74:7e:dc:
         2c:e7:76:f5:e5:17:59:74:bf:70:b6:1b:68:56:bf:20:e5:f9:
         4e:06:64:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJK0sUX8Wh/lzQnSVMfrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTZmMGU5YWZmMzlhOGIxOTZjNDgzZTA4NWRlNzlmMjQ2
ZDlmZGQwHhcNMjUwOTEwMDEwMTUxWhcNMjUwOTExMDEwMTUxWjAzMTEwLwYDVQQD
EygyNTA2MGMyMDM2N2EwOTkxYjQzYjQ2YzBmMzY1YmRlYWQ0YTdjOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaGURBEIVz3su4c0GfWkgSLdW/vn
pHamsB38ApWgp4qaXuopNomSR2Kqz0zbeFH3GTQ7yylKAOlSVV1GIarJ+S2EOBIN
WN90QqgJsMjlkzQvFGd6OyWKGesiD7dFYFDoIqgS5nv0tOHyJMTdyek8EbmOSNBD
AusPGBsrITCxumqXZDRKW8KqbqnKEY8ogFgEbza9AASgG6lxky5m30slSbYDIm6S
7sDNUnraFL72Z30IMdpN6aK2t9xRmpWJc6u5EyT5C4r8gk7rltzQidN+njPXYsB0
ARV3B4cZtJ5jewPC0rBMyoJTLWTTt88vaq2IcwS21ptcZmM/5GwACZW0sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUGDCA2egmRtDtGwPNlverUp8mLMB8GA1UdIwQY
MBaAFEEW8Omv85qLGWxIPghd558kbZ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAt
MjQwZDFmZmQwOWI4LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAtMjQwZDFmZmQwOWI4
LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCEXYKje
LEVIGADEbpdbReGQVZexOnNiXRukDBSqHbQLsj4VxrtMjpoqXqr7qmtv1bqbVfJ5
nW4LS6BIlXgXnO/BTbsH1rDOqyussRl1HzldAseczrax/oecuoOjS4N+2HHLLDTu
rsKxtBvpB/pOrWrvn/aI2o8ERoJ76y6CZiakGBMC2ffbmvbXVV/mIuOn38Z/tqAD
mwaUDWjIOYeS5NHGF9wkMOC4SqgxST7dUVp2PqdQVdYBsmt3RjKr9wbDcjz2QTV6
p5zeUqHoPWEbEKSEeAXc5NxD5V8eD1gigqLwLYY3ZZtYdH7cLOd29eUXWXS/cLYb
aFa/IOX5TgZkQA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 03:50:10 2025 by rpki-client