Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File:                     QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier:          yZAaBr0B4ylS+aTPztQxK/81/JbEf7ZbQ5W4NXn5VD0=
Subject key identifier:   11:D7:8B:17:9F:AB:32:4B:00:20:43:DD:BF:88:0F:79:12:98:C8:4E
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer:       /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial:       019922FAA554C167A0028FC5C435740082DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number:          15C6
Signing time:             Sun 07 Sep 2025 07:01:15 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:15 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:15 +0000
Files and hashes:         1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: fGIjhWAFfxA9LiTTgEEcxgkIyzza5RHTqQjPPrYsZgU=)
                          2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:a5:54:c1:67:a0:02:8f:c5:c4:35:74:00:82:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
        Validity
            Not Before: Sep  7 07:01:15 2025 GMT
            Not After : Sep  8 07:01:15 2025 GMT
        Subject: CN=11d78b179fab324b002043ddbf880f791298c84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:be:eb:fd:75:b5:37:85:02:a8:92:5b:df:
                    06:be:2a:9f:e0:03:73:d7:2e:49:68:86:60:95:63:
                    a5:4a:b1:83:aa:6d:d8:e9:90:df:8a:13:cb:de:c5:
                    91:80:93:eb:97:d8:40:86:65:eb:4e:c9:c9:94:a0:
                    32:34:89:98:53:55:89:07:db:2e:58:f6:0e:95:99:
                    db:d3:ee:e4:4d:c3:4f:b1:4a:7d:1e:1e:0a:d4:7a:
                    33:11:ae:3b:ac:5f:0f:45:e5:56:71:32:33:28:cb:
                    89:ee:0c:94:17:f5:d9:b5:4b:9e:1a:34:d0:7c:13:
                    8b:f1:8b:f3:5d:34:57:7b:21:7f:e5:e6:c5:b1:54:
                    76:93:36:c2:4f:61:4b:e0:95:62:f3:36:ec:08:b4:
                    d2:a4:71:08:c7:07:2b:16:c1:b0:24:36:c0:dd:ce:
                    b6:61:72:b5:dd:9b:8d:23:df:97:12:6a:90:1b:ba:
                    a1:36:1f:37:2f:d4:30:52:da:80:88:bc:c9:66:a9:
                    e8:9d:e9:7d:75:c4:04:25:2c:0c:0b:84:ff:bb:51:
                    8f:0d:fa:5d:21:22:73:97:d0:d2:1d:6e:7e:e1:30:
                    03:78:1c:6d:d3:50:ac:5c:5b:6a:51:71:12:90:93:
                    52:5b:2e:80:b5:c9:0d:af:7f:21:e1:29:df:bc:52:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:8B:17:9F:AB:32:4B:00:20:43:DD:BF:88:0F:79:12:98:C8:4E
            X509v3 Authority Key Identifier:
                keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:17:95:82:91:84:a4:47:0f:de:f7:a1:40:87:5c:f8:8f:e0:
         0a:38:08:26:20:7f:49:14:9d:7a:8a:a2:80:ee:72:ad:31:f5:
         71:43:dd:cb:f3:8e:44:cc:a9:73:4b:95:c7:ec:34:da:a5:14:
         df:90:7c:a7:d4:ca:ef:80:76:28:0c:d8:7f:ce:0f:37:c3:99:
         3a:b4:ab:0f:46:44:49:c2:ed:7b:ed:80:22:2b:03:6b:71:2e:
         78:46:66:9e:07:8e:81:39:1b:33:d2:c7:3a:4c:68:d3:d3:16:
         a4:a8:9f:c3:41:d6:c2:55:be:f1:9e:20:a9:28:bf:0c:14:9a:
         93:be:dd:49:52:69:d5:5b:84:a3:91:df:fa:e5:89:3c:0f:bf:
         21:64:21:fe:4c:6d:32:c6:1b:e3:49:ee:ab:d7:2f:70:8d:d6:
         1c:bc:80:be:3d:aa:2f:03:f8:fa:fa:01:7a:cd:73:3d:07:b6:
         3e:d6:f4:5d:27:fd:a8:7f:1c:ff:e7:10:14:4d:a5:c5:96:bb:
         0e:57:b1:ef:15:c9:0c:60:5b:58:9b:87:85:74:4d:32:80:92:
         aa:cc:41:08:6f:e1:f0:39:bf:5d:8f:03:59:bb:ba:41:e1:56:
         fc:e7:62:94:2c:db:68:81:97:5e:2c:7c:0d:01:46:2b:1d:4c:
         8e:7d:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:58 2025 by rpki-client