Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
File:                     q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json)
Hash identifier:          MqkGwa8hSL9t4s2B0z+rn94va1j9K+QZhhyY59zdf34=
Subject key identifier:   33:32:40:13:C7:A2:AA:4E:A0:23:04:F3:F8:23:F2:A2:8B:D2:DC:94
Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
Certificate issuer:       /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Certificate serial:       0199225513120F0832A159B3CFEE0243F2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
Manifest number:          166D
Signing time:             Sun 07 Sep 2025 04:00:24 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:24 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:24 +0000
Files and hashes:         1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: fV0QiMTmmYSD4FWlXJQmQ8hH0YRMG5F0KheBcesYFs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:13:12:0f:08:32:a1:59:b3:cf:ee:02:43:f2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
        Validity
            Not Before: Sep  7 04:00:24 2025 GMT
            Not After : Sep  8 04:00:24 2025 GMT
        Subject: CN=33324013c7a2aa4ea02304f3f823f2a28bd2dc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:1c:2c:48:c9:aa:8e:27:c0:e6:3f:bb:67:
                    0b:34:b3:ab:bb:38:d6:ca:36:94:13:97:65:87:ec:
                    44:e9:14:64:dd:5e:8f:52:68:7c:99:b8:b9:1f:13:
                    26:30:8c:1c:ad:68:50:fc:f2:d4:78:f6:ef:3d:bb:
                    2f:c6:6b:8f:09:a5:39:4a:e1:b4:7e:b7:3e:11:83:
                    ad:84:d1:10:d9:3f:c4:aa:83:fa:33:f8:a2:86:27:
                    6b:54:f9:5b:60:56:ac:b6:80:31:d6:36:03:41:88:
                    f0:76:b7:a7:10:84:90:64:cb:c4:0b:6f:64:b3:50:
                    00:d7:7e:3f:6d:71:61:8b:33:d3:38:54:22:eb:9a:
                    45:44:6c:26:f3:e1:79:9c:01:48:52:05:48:a6:a1:
                    82:6c:20:9b:7a:da:79:1b:fe:6a:5f:4d:2d:75:a0:
                    6d:8c:9f:c5:f0:5a:71:48:e3:ab:37:fa:b1:3f:8b:
                    12:77:f1:fd:a1:70:0b:42:35:e9:35:3f:3c:99:00:
                    79:d4:54:dd:52:0a:40:d8:db:38:bc:13:5b:a4:8f:
                    9b:72:1d:07:7a:65:ca:e1:74:b0:87:df:b8:19:3c:
                    15:26:79:ef:2b:ea:25:41:ef:4e:02:fc:38:f0:70:
                    a3:1f:42:14:ed:16:f8:c3:f1:bc:ca:23:3f:ac:d0:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:40:13:C7:A2:AA:4E:A0:23:04:F3:F8:23:F2:A2:8B:D2:DC:94
            X509v3 Authority Key Identifier:
                keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:c7:94:74:53:0c:57:c1:f0:96:09:89:56:78:88:45:af:
         29:17:c9:bb:f1:6e:1c:0f:a5:50:8c:3e:48:f1:df:69:58:53:
         0c:b7:e3:d0:06:5a:45:c3:e9:a5:5f:7d:86:72:94:1c:49:ce:
         91:0d:51:1d:35:17:c1:68:57:c0:5b:c5:34:e2:13:3d:78:7f:
         62:e6:d6:00:f2:7f:64:4e:fb:13:60:83:20:6f:7c:df:51:13:
         41:0f:a6:4b:0a:4c:b3:40:bb:ef:ea:4f:6d:cd:33:3e:b9:f8:
         2c:5b:80:2a:e5:bf:47:49:f7:8a:59:c0:fd:b3:15:01:f0:4d:
         75:f4:5b:4a:61:7d:53:ab:5c:01:b6:a8:fc:9b:5b:58:a0:a1:
         3a:31:bd:59:af:3a:16:14:b2:a7:94:02:c9:aa:ef:b9:ac:67:
         67:65:ee:fa:a6:9a:7b:c9:59:da:20:6f:6c:28:b9:9c:6f:bc:
         cf:80:e5:28:b9:e7:43:bd:9e:82:13:02:60:07:6c:5f:e0:8e:
         ac:48:49:66:85:56:eb:e0:cc:9e:64:72:98:52:84:43:eb:b4:
         eb:99:8f:30:78:ba:81:04:f2:e3:83:9f:66:e4:6d:dc:d9:72:
         78:eb:2b:a8:5b:a0:c3:51:41:0a:03:1f:07:b0:4e:b8:4d:d7:
         dc:09:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:55 2025 by rpki-client