Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
File:                     quarBHvHMpbJcVvLrq4ukYMWt4o.mft (raw, json)
Hash identifier:          r1y7veKYq8EffFk32j0EaCRExGAWT4+17F7Xb/iPdC4=
Subject key identifier:   15:65:65:A9:3B:F7:26:B2:C4:27:C5:93:21:0C:42:6C:95:22:A1:4B
Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
Certificate issuer:       /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Certificate serial:       019A082510CD3854ED02139D5E5060E41667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
Manifest number:          06B6
Signing time:             Tue 21 Oct 2025 19:00:38 +0000
Manifest this update:     Tue 21 Oct 2025 19:00:38 +0000
Manifest next update:     Wed 22 Oct 2025 19:00:38 +0000
Files and hashes:         1: quarBHvHMpbJcVvLrq4ukYMWt4o.crl (hash: 9JyE2/3yEzAYDfXBpYgUo3qsuDAM1+kVcIEkyvOOV3w=)
                          2: uYoqxUmmvNO7Wii7YVSG5anWzrY.roa (hash: aA074fRdJxXnyU4wE12JFVrrch97b4B8/lsvIbEFtt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:08:25:10:cd:38:54:ed:02:13:9d:5e:50:60:e4:16:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
        Validity
            Not Before: Oct 21 19:00:38 2025 GMT
            Not After : Oct 22 19:00:38 2025 GMT
        Subject: CN=156565a93bf726b2c427c593210c426c9522a14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c7:35:28:b0:cf:f0:63:e1:00:f8:f0:1a:f7:
                    ca:83:84:30:98:d1:28:45:cb:ff:60:eb:5d:1c:be:
                    18:df:71:fd:89:17:8a:88:bc:87:6a:55:87:32:29:
                    16:40:68:91:a9:0d:91:3a:ca:47:0f:e4:12:4d:0c:
                    fd:4b:95:02:63:e8:3b:a6:98:ed:75:39:39:b9:cf:
                    46:75:82:07:3b:c5:42:67:11:39:01:7a:34:12:ca:
                    6c:ac:cc:12:da:73:df:69:9c:1f:97:56:66:05:e9:
                    dc:8f:71:38:5f:3c:4f:06:b9:a1:7d:c0:48:87:fb:
                    1e:e7:11:49:1d:87:06:24:bd:af:e0:d7:cb:e6:7c:
                    0a:42:03:f6:16:fc:60:b0:db:0c:f6:a0:d2:03:ad:
                    0e:1d:94:a5:08:f6:29:d5:13:62:6f:03:24:7e:a0:
                    e4:1b:cf:77:c6:37:88:19:3a:2b:51:11:fd:43:cf:
                    66:2f:87:bc:ad:b2:e5:55:1c:c7:07:d4:2f:66:73:
                    6a:3d:72:13:c1:7c:6d:d1:dc:a1:60:c1:f3:b0:d1:
                    33:bf:47:7e:95:2c:a1:94:9d:51:22:c8:a0:7c:ce:
                    58:48:93:b6:a4:40:5a:32:32:b7:12:8a:be:2b:eb:
                    e3:54:b6:f4:eb:6f:6a:d9:77:78:3c:f0:50:ce:a3:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:65:65:A9:3B:F7:26:B2:C4:27:C5:93:21:0C:42:6C:95:22:A1:4B
            X509v3 Authority Key Identifier:
                keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d8:bb:e3:05:9e:71:b5:dd:8a:d8:0f:84:6c:63:5d:bb:c9:
         d0:dd:f4:50:06:e1:33:40:22:8d:4d:9d:1b:c8:da:4e:b9:ac:
         f4:e8:bc:e0:f7:7c:77:94:12:80:07:be:6e:1b:28:2c:5b:04:
         ab:3c:30:33:ac:a1:bb:57:f2:93:b4:b6:dd:b6:90:2a:61:a2:
         f6:61:79:66:25:8e:4b:ae:ca:6b:d8:7c:c4:50:90:db:05:8f:
         af:f3:1d:2d:3f:ed:84:93:c3:f8:ac:bc:a3:6a:45:a8:19:85:
         f7:75:61:41:89:47:b6:0c:d7:b1:92:5f:18:5c:76:ec:87:1d:
         65:af:2b:21:8e:77:2e:10:ef:9c:26:57:72:8e:8c:e5:e1:e6:
         45:70:04:32:ff:17:b9:a7:e4:cf:e4:46:cd:68:ae:d7:9e:b4:
         ef:07:3d:ca:84:cb:3c:29:58:1c:1e:3d:28:b1:c2:53:e6:b2:
         31:cc:e4:2d:cc:22:e9:d7:83:af:c3:f7:4c:95:f4:b7:a7:94:
         17:56:4f:1d:21:f9:c4:20:df:7e:4b:4a:3c:ba:ed:ff:d9:b8:
         ce:0a:f4:02:b0:4b:a9:09:0f:6c:33:ac:16:7f:56:da:a5:2f:
         a9:db:60:80:2f:85:7c:1b:84:6d:32:75:dd:7b:16:f1:16:7c:
         04:89:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:06:55 2025 by rpki-client