Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File:                     qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier:          3etIOXLMP+vmNNUYTucXIa5mP7DUiHZrcZRfhOWNFvc=
Subject key identifier:   4F:38:B5:A3:4A:47:86:49:94:14:90:2E:D9:06:58:18:67:F1:20:29
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer:       /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial:       0199240D84341E5B154B96CAEB356CAE02DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number:          0B76
Signing time:             Sun 07 Sep 2025 12:01:29 +0000
Manifest this update:     Sun 07 Sep 2025 12:01:29 +0000
Manifest next update:     Mon 08 Sep 2025 12:01:29 +0000
Files and hashes:         1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: EtlFi5VY0CektWCXYcFIHilQW61UGWho6wKMnOMCmfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0d:84:34:1e:5b:15:4b:96:ca:eb:35:6c:ae:02:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
        Validity
            Not Before: Sep  7 12:01:29 2025 GMT
            Not After : Sep  8 12:01:29 2025 GMT
        Subject: CN=4f38b5a34a4786499414902ed906581867f12029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:ea:c1:88:d7:65:a3:05:67:6e:c3:17:2b:
                    dc:7f:5d:8f:3a:89:ee:f8:c4:f9:58:f5:2e:5f:18:
                    6b:5d:e6:2b:0c:59:5f:c7:a0:94:07:62:89:5c:57:
                    d0:69:a5:83:af:73:7d:bd:ed:9f:78:b0:71:92:31:
                    6f:a2:77:4d:a7:b9:9e:03:2f:1c:c5:6e:34:e2:ce:
                    9a:e6:f8:a0:2e:ed:8a:9d:c7:4b:0c:06:e2:7a:2d:
                    e2:5f:b3:4b:d7:2a:43:65:4b:75:92:f3:ad:09:c5:
                    36:5a:09:8c:e5:69:64:c1:d3:4d:65:58:25:5c:02:
                    ec:d3:68:39:86:27:5f:4d:8b:7d:06:9a:c7:7e:f8:
                    09:4a:10:c2:47:bb:2f:d5:e4:40:40:ab:0c:32:69:
                    cc:72:3d:9d:41:46:bd:a0:60:d2:74:59:c7:61:0a:
                    28:61:68:fc:67:6f:5b:3e:52:be:5b:ec:2e:22:38:
                    88:db:f9:27:3f:eb:15:78:63:f8:1b:79:e0:58:05:
                    d1:6e:e7:72:84:d2:57:b7:18:ad:9e:fc:82:1c:31:
                    77:4f:2d:6d:51:4b:53:4a:41:cf:57:fd:10:11:6d:
                    8c:ab:b7:46:82:c0:90:b6:ba:b4:a4:bd:71:40:97:
                    e1:ac:e5:16:03:4e:6f:46:ee:ac:c7:95:56:53:62:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:38:B5:A3:4A:47:86:49:94:14:90:2E:D9:06:58:18:67:F1:20:29
            X509v3 Authority Key Identifier:
                keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:02:88:bb:c4:e8:f0:b2:57:4c:21:f7:a4:fa:07:99:d0:b4:
         38:18:df:f3:b6:3c:7b:54:bf:0a:eb:e6:0d:3f:1f:71:02:c8:
         f0:4b:ae:00:60:31:33:43:22:48:a2:0d:e7:31:2e:2e:8d:b4:
         dd:a3:68:91:49:44:d3:a7:59:ba:e5:a6:e5:b6:21:88:14:b2:
         52:a8:19:da:dc:9c:b5:65:e5:e6:c2:e3:e7:c6:f0:8f:72:4b:
         d4:6d:76:df:46:aa:27:52:01:a7:75:d4:e9:fe:60:7b:02:62:
         66:ba:a3:64:b7:c7:8e:df:9b:35:2d:7c:17:aa:48:2c:dc:b1:
         97:26:d9:90:e0:e3:c3:e5:07:18:1c:3d:fe:84:2a:df:34:d1:
         ed:db:26:a2:ec:67:cd:0d:4f:a4:12:dc:a8:6d:f9:5e:b7:0e:
         39:cf:5e:3f:45:3c:93:f2:bc:a7:59:a0:39:bb:f9:8a:1a:92:
         d3:cb:ae:e3:ca:ce:83:82:08:55:65:92:3e:32:94:37:46:6d:
         e2:2e:39:07:d2:84:f0:12:6e:e2:9c:27:06:11:d3:68:0d:3c:
         78:d0:9c:23:2f:df:24:eb:dd:91:2e:2c:9d:fd:60:59:df:54:
         ee:7c:02:c1:d9:85:89:cb:60:04:12:66:49:d2:99:93:5d:4a:
         e3:e6:d6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDYQ0HlsVS5bK6zVsrgLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yjc5MjQzZmRiZjdiMzY1YzFkYmMyM2M5MGE4YmNjYjNj
Mzk3NTEwHhcNMjUwOTA3MTIwMTI5WhcNMjUwOTA4MTIwMTI5WjAzMTEwLwYDVQQD
Eyg0ZjM4YjVhMzRhNDc4NjQ5OTQxNDkwMmVkOTA2NTgxODY3ZjEyMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra/qwYjXZaMFZ27DFyvcf12POonu
+MT5WPUuXxhrXeYrDFlfx6CUB2KJXFfQaaWDr3N9ve2feLBxkjFvondNp7meAy8c
xW404s6a5vigLu2KncdLDAbiei3iX7NL1ypDZUt1kvOtCcU2WgmM5WlkwdNNZVgl
XALs02g5hidfTYt9BprHfvgJShDCR7sv1eRAQKsMMmnMcj2dQUa9oGDSdFnHYQoo
YWj8Z29bPlK+W+wuIjiI2/knP+sVeGP4G3ngWAXRbudyhNJXtxitnvyCHDF3Ty1t
UUtTSkHPV/0QEW2Mq7dGgsCQtrq0pL1xQJfhrOUWA05vRu6sx5VWU2KRDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE84taNKR4ZJlBSQLtkGWBhn8SApMB8GA1UdIwQY
MBaAFKm3kkP9v3s2XB28I8kKi8yzw5dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWJlU1FfMl9lelpjSGJ3anlRcUx6TFBEbDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YTY4NDItY2IzZi00ZmIxLTkwNjkt
Nzg2MTFlYzk0YjQ0LzEvcWJlU1FfMl9lelpjSGJ3anlRcUx6TFBEbDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YTY4NDItY2IzZi00ZmIxLTkwNjktNzg2MTFlYzk0YjQ0
LzEvcWJlU1FfMl9lelpjSGJ3anlRcUx6TFBEbDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawKIu8To
8LJXTCH3pPoHmdC0OBjf87Y8e1S/CuvmDT8fcQLI8EuuAGAxM0MiSKIN5zEuLo20
3aNokUlE06dZuuWm5bYhiBSyUqgZ2tyctWXl5sLj58bwj3JL1G1230aqJ1IBp3XU
6f5gewJiZrqjZLfHjt+bNS18F6pILNyxlybZkODjw+UHGBw9/oQq3zTR7dsmouxn
zQ1PpBLcqG35XrcOOc9eP0U8k/K8p1mgObv5ihqS08uu48rOg4IIVWWSPjKUN0Zt
4i45B9KE8BJu4pwnBhHTaA08eNCcIy/fJOvdkS4snf1gWd9U7nwCwdmFictgBBJm
SdKZk11K4+bWrA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:32 2025 by rpki-client