Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File:                     Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier:          7jWnWEBDyTzJtTrOO5qJ8kIg66qO8hdkp5PoF7gV7to=
Subject key identifier:   3B:EA:8E:5A:8B:9E:43:F8:80:E9:85:F3:A3:C3:47:47:01:7C:19:E0
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer:       /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial:       0199179A8EAC88F4159004A31F6388C4DF2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number:          116E
Signing time:             Fri 05 Sep 2025 02:00:29 +0000
Manifest this update:     Fri 05 Sep 2025 02:00:29 +0000
Manifest next update:     Sat 06 Sep 2025 02:00:29 +0000
Files and hashes:         1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: s8Eov8umlWbBD2vNPpCg7DbHu23oP6G5b2ZbeaWJhdE=)
                          2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:9a:8e:ac:88:f4:15:90:04:a3:1f:63:88:c4:df:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
        Validity
            Not Before: Sep  5 02:00:29 2025 GMT
            Not After : Sep  6 02:00:29 2025 GMT
        Subject: CN=3bea8e5a8b9e43f880e985f3a3c34747017c19e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:1c:be:a1:f9:55:b3:46:5f:72:9f:bd:d4:
                    98:2d:ea:fc:78:f1:e8:ad:84:d9:66:6e:94:0d:ff:
                    da:4d:c8:bb:8a:3e:26:89:c8:ad:e5:d0:44:50:4b:
                    a3:75:1a:83:b5:f9:1b:21:fe:83:99:cc:fa:e9:46:
                    e3:2c:69:66:58:c2:38:81:c6:41:27:db:00:a5:06:
                    3d:56:96:09:65:5e:40:50:98:21:2b:04:1c:08:32:
                    dc:0e:09:c4:dc:0b:32:3f:72:9b:df:6f:f4:da:bf:
                    a9:07:f7:c5:cd:cb:d0:c5:0f:b5:68:68:ed:d8:ab:
                    d2:33:ce:02:a4:01:eb:98:f8:a9:b4:35:3b:ca:8a:
                    b5:75:1c:34:ab:a9:1a:76:53:41:96:87:71:22:e9:
                    68:63:64:8c:7d:ad:dd:0a:30:4f:66:81:7c:14:5b:
                    9b:3f:a6:13:96:76:87:4b:60:d5:57:b3:e2:8a:e1:
                    55:aa:be:9d:e2:6a:b0:e3:c2:1f:59:41:d7:19:ec:
                    1d:ec:85:6f:4e:37:a7:d1:42:5a:3f:da:bc:34:e5:
                    15:8c:d7:ae:c3:e8:49:43:e7:13:13:e6:c1:bf:ef:
                    60:53:dc:b4:00:76:ab:e1:69:4c:7a:4f:b1:b6:aa:
                    c8:95:b2:14:77:e1:03:f3:ec:1f:0c:46:91:d1:f4:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EA:8E:5A:8B:9E:43:F8:80:E9:85:F3:A3:C3:47:47:01:7C:19:E0
            X509v3 Authority Key Identifier:
                keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:be:6e:ee:51:10:b4:ca:e3:81:6e:68:ee:2f:ca:a3:b1:61:
         41:d8:b2:df:d6:ea:6d:16:1f:6c:7f:ee:8d:4a:b8:8b:b1:d9:
         ba:9b:df:6d:dc:f9:c0:c0:56:b6:1d:d1:95:5f:ec:4f:b9:58:
         61:fe:0b:af:aa:1a:4a:b9:ce:80:bb:35:50:d4:c3:61:86:d0:
         63:be:e3:55:44:d1:5c:41:64:31:33:e9:7f:09:17:80:5b:e5:
         fd:f0:70:45:1a:f7:bc:10:86:76:fa:21:82:fe:93:e1:23:24:
         21:e7:5f:ba:8b:d3:36:6f:7e:77:d4:64:52:f2:09:15:39:ab:
         2b:ee:5f:df:e5:cc:57:c4:ae:b7:a0:14:f3:fa:f8:31:5d:35:
         45:02:d8:3d:75:47:34:90:d9:87:f2:43:57:a6:1b:ad:58:bd:
         ef:0a:23:b2:20:49:18:0f:ae:f0:a1:4e:c6:ca:cf:f1:8b:0b:
         60:2e:d7:05:fd:33:b0:5e:2d:21:0d:46:52:42:26:53:ab:5e:
         9d:f8:cb:88:a3:45:9a:0d:ad:8a:cc:e7:16:74:74:59:09:2f:
         6d:08:3b:73:cd:52:40:d9:ae:19:3c:04:7c:09:0d:4d:4e:11:
         92:32:b6:0f:cb:a6:1c:50:9f:d6:2e:d2:7a:f3:21:8f:ac:ec:
         d1:4f:73:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXmo6siPQVkASjH2OIxN8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmZhZDk3YTU4Y2I1MGNiZmM4NGVjODY1YWYzZDcxYzhi
MTg1YWYwHhcNMjUwOTA1MDIwMDI5WhcNMjUwOTA2MDIwMDI5WjAzMTEwLwYDVQQD
EygzYmVhOGU1YThiOWU0M2Y4ODBlOTg1ZjNhM2MzNDc0NzAxN2MxOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ygcvqH5VbNGX3KfvdSYLer8ePHo
rYTZZm6UDf/aTci7ij4micit5dBEUEujdRqDtfkbIf6Dmcz66UbjLGlmWMI4gcZB
J9sApQY9VpYJZV5AUJghKwQcCDLcDgnE3AsyP3Kb32/02r+pB/fFzcvQxQ+1aGjt
2KvSM84CpAHrmPiptDU7yoq1dRw0q6kadlNBlodxIuloY2SMfa3dCjBPZoF8FFub
P6YTlnaHS2DVV7PiiuFVqr6d4mqw48IfWUHXGewd7IVvTjen0UJaP9q8NOUVjNeu
w+hJQ+cTE+bBv+9gU9y0AHar4WlMek+xtqrIlbIUd+ED8+wfDEaR0fRm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvqjlqLnkP4gOmF86PDR0cBfBngMB8GA1UdIwQY
MBaAFEG/rZeljLUMv8hOyGWvPXHIsYWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAt
YmY3OGJiODVhNjllLzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAtYmY3OGJiODVhNjll
LzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC75u7lEQ
tMrjgW5o7i/Ko7FhQdiy39bqbRYfbH/ujUq4i7HZupvfbdz5wMBWth3RlV/sT7lY
Yf4Lr6oaSrnOgLs1UNTDYYbQY77jVUTRXEFkMTPpfwkXgFvl/fBwRRr3vBCGdvoh
gv6T4SMkIedfuovTNm9+d9RkUvIJFTmrK+5f3+XMV8Sut6AU8/r4MV01RQLYPXVH
NJDZh/JDV6YbrVi97wojsiBJGA+u8KFOxsrP8YsLYC7XBf0zsF4tIQ1GUkImU6te
nfjLiKNFmg2tisznFnR0WQkvbQg7c81SQNmuGTwEfAkNTU4RkjK2D8umHFCf1i7S
evMhj6zs0U9zZg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:20 2025 by rpki-client