Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File:                     qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier:          ROKP1ckZiio+OOMf0gF+jALPdzgBC0Ub4KZZeZAiR4k=
Subject key identifier:   C7:0A:53:3D:B0:11:06:1D:0D:33:4C:66:8F:B7:8F:08:FD:D9:A7:A4
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer:       /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial:       01992255F1B2EA6A6DA38FA9D373DB86AE9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number:          06A4
Signing time:             Sun 07 Sep 2025 04:01:21 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:21 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:21 +0000
Files and hashes:         1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: XH1z2MU2AkDwn4bvpPBYE7E/q4/QhKVlmX0/Y0zKDN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:f1:b2:ea:6a:6d:a3:8f:a9:d3:73:db:86:ae:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
        Validity
            Not Before: Sep  7 04:01:21 2025 GMT
            Not After : Sep  8 04:01:21 2025 GMT
        Subject: CN=c70a533db011061d0d334c668fb78f08fdd9a7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cc:fb:fd:49:ba:30:a4:38:78:a7:b5:c4:96:
                    5d:5d:01:36:b9:39:78:1f:81:61:53:b5:02:4b:39:
                    d7:02:70:36:8b:0f:1c:16:08:30:95:56:d4:5e:03:
                    cb:73:95:44:25:48:e4:72:20:a6:04:4b:b8:89:2a:
                    1f:0a:8b:6b:75:29:f8:bb:e8:d7:e4:4c:92:11:94:
                    76:13:f7:dc:75:00:19:cd:41:ca:eb:a3:db:05:88:
                    10:31:4e:3f:cb:de:0d:5f:0b:18:a8:40:21:c3:ba:
                    6b:ff:ca:5f:ae:f7:96:ce:56:4f:76:4b:ab:db:11:
                    d8:e2:7a:95:05:d3:d9:c2:29:f9:1e:a5:da:fa:85:
                    09:da:84:ab:ff:ae:94:68:38:4a:54:06:9e:cc:79:
                    9c:c3:0f:b4:35:e3:5c:ed:d5:a9:d7:f8:67:8e:3d:
                    70:1f:46:93:63:c7:1c:85:8f:18:a0:29:71:c9:c2:
                    6d:1f:09:f0:e8:14:cd:90:d5:86:49:a1:af:3d:ea:
                    78:60:e2:ae:6c:71:40:b8:8f:ea:8c:cb:e3:9f:e6:
                    0f:81:f3:55:32:99:db:b2:ad:35:40:88:e5:e8:14:
                    18:73:bc:24:f5:79:cd:7d:70:1a:5e:04:d3:3a:ae:
                    56:cb:ef:19:a5:97:69:36:77:07:36:c5:a4:92:61:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0A:53:3D:B0:11:06:1D:0D:33:4C:66:8F:B7:8F:08:FD:D9:A7:A4
            X509v3 Authority Key Identifier:
                keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:cc:06:37:c8:74:6b:f1:dc:b6:90:a8:bc:59:07:e6:d6:fa:
         ac:5c:39:02:e3:8f:1e:48:f4:fe:dc:fc:bb:80:64:7f:a9:b5:
         59:ac:fe:5d:6e:b8:62:46:6d:d4:1c:aa:9e:36:4f:2b:39:44:
         dc:52:aa:ee:69:d1:47:e7:13:80:69:aa:3a:3c:0c:5f:e5:61:
         2b:d3:84:a3:73:89:b3:c6:65:86:31:67:34:42:39:28:9d:08:
         57:73:7a:3f:73:e3:b2:ea:8e:9a:9a:a5:9c:d8:9a:26:28:b5:
         ce:06:0e:cb:c4:f3:1d:28:6b:0c:45:80:5f:8b:f0:b8:a0:e8:
         1d:0f:29:17:6e:37:0f:06:f2:2f:ce:c2:57:a0:1e:67:1c:b8:
         ea:44:f5:df:28:d8:fd:33:63:5f:24:cc:31:8a:84:bf:b8:36:
         18:f3:03:d6:7b:96:8c:78:dd:b9:fd:ff:02:cc:75:7b:d2:88:
         81:a3:7d:65:bd:ab:6c:dd:bc:52:e7:c2:55:42:e1:83:61:bd:
         3c:cd:bf:62:03:fe:f5:bb:42:b8:91:25:da:4f:e2:32:94:19:
         a7:05:b3:3e:c6:3c:ca:41:5f:7f:95:50:d9:ba:b4:df:30:ab:
         69:16:2e:24:6f:4e:93:97:e8:7b:83:57:c6:02:b1:71:a9:5e:
         54:8e:bb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:04 2025 by rpki-client