Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
File:                     qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json)
Hash identifier:          449YU9jVjbNiSewFNxjuQTpTlM6/Tp4nk6k5VLwbUSg=
Subject key identifier:   D2:12:CD:D9:23:9E:0C:71:6E:89:BF:41:BB:E7:71:92:41:D4:6E:DA
Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
Certificate issuer:       /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Certificate serial:       019933B6FAEC9B47A073DD726C3A80D5495A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
Manifest number:          05B6
Signing time:             Wed 10 Sep 2025 13:00:53 +0000
Manifest this update:     Wed 10 Sep 2025 13:00:53 +0000
Manifest next update:     Thu 11 Sep 2025 13:00:53 +0000
Files and hashes:         1: gHCDIdhOuUpwW3kY6kopG285_k0.roa (hash: 5xiT0kgNZs49N5lk+a3OABaCYPVOiGuQ90iKWrfQblE=)
                          2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: pKPnGcXwTM89Z2+i3Lg+NMcG69qiz47XOMvgAMkXFlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:b6:fa:ec:9b:47:a0:73:dd:72:6c:3a:80:d5:49:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
        Validity
            Not Before: Sep 10 13:00:53 2025 GMT
            Not After : Sep 11 13:00:53 2025 GMT
        Subject: CN=d212cdd9239e0c716e89bf41bbe7719241d46eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ec:00:3f:3e:fe:3a:81:af:c7:8a:0d:48:83:
                    e9:39:a5:f7:12:c8:9a:7b:73:e6:d8:b3:c7:f1:4a:
                    27:da:c3:87:8a:a8:67:e6:d1:ee:bc:1b:33:0a:64:
                    85:4c:52:dd:12:93:b3:4a:0a:f9:44:f5:cb:e4:05:
                    16:27:1a:f7:12:70:47:27:98:1c:5b:84:39:53:f4:
                    3b:a3:27:0a:b0:0f:08:3e:ad:67:cf:36:94:38:50:
                    56:ee:81:db:87:28:ce:2a:45:77:d0:70:a3:e3:88:
                    c0:b7:2c:92:15:44:5f:02:a0:18:8c:cc:fc:3b:eb:
                    4b:e6:3e:23:f2:8d:b4:20:7d:ae:45:1b:2b:57:77:
                    e5:83:b3:4c:21:d5:2c:ee:a8:6c:17:4e:cd:67:4e:
                    b1:39:d4:d6:49:44:23:c2:6a:ad:7b:9c:2c:39:41:
                    4d:94:e1:57:2c:71:f4:26:78:bd:8a:58:07:cb:25:
                    26:22:74:07:be:89:37:99:c0:da:ca:e8:43:24:a4:
                    79:ff:79:d3:14:2e:47:9c:10:e1:4a:17:8d:5f:e8:
                    22:dc:66:c7:9c:39:3d:5d:d0:e9:2d:eb:16:ca:e5:
                    4c:71:36:f1:0d:c7:ae:f1:28:8e:db:1c:c7:f4:de:
                    a7:96:21:4b:14:12:37:3e:f6:0b:5a:b4:14:6e:1c:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:12:CD:D9:23:9E:0C:71:6E:89:BF:41:BB:E7:71:92:41:D4:6E:DA
            X509v3 Authority Key Identifier:
                keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c2:ac:87:1f:32:8a:57:a2:dd:f8:36:b6:21:28:c4:af:2a:
         cd:ac:68:2a:d9:57:ba:08:61:d1:78:71:03:f2:fd:c1:b7:b8:
         6c:5a:2b:e5:4a:88:0c:02:12:d9:a7:2c:5e:4c:73:ef:d1:76:
         75:77:e0:f9:1d:87:3a:0f:62:50:eb:05:a7:fd:6b:89:2b:20:
         aa:31:60:b6:58:8c:a5:3f:a4:97:4c:d7:ab:e0:dd:0d:1d:e3:
         0c:64:9b:01:dc:7a:43:f5:0d:bb:5c:c4:c6:28:64:ba:a7:f1:
         83:49:e8:24:1c:a5:fe:e5:ed:35:60:f9:2d:0e:49:a0:1b:63:
         55:30:f9:d1:57:61:a4:d6:f9:ff:4c:f1:c9:8c:19:23:d5:12:
         e1:17:be:8f:ea:16:0c:a0:df:56:dc:f2:1b:64:b2:f1:e4:b9:
         93:1d:c3:f4:22:31:c5:22:94:9e:59:7f:58:90:ce:62:31:6f:
         cc:7c:30:d4:88:3f:b3:83:3b:f9:78:44:e9:1b:c8:e1:48:ea:
         7e:cd:83:7c:0a:bf:5d:2f:52:a2:bf:87:6c:c6:55:1e:61:97:
         11:f1:65:12:f8:73:77:92:6b:7e:79:1a:b7:23:79:81:c8:4a:
         7f:72:29:3a:77:5e:25:db:37:d9:97:7f:10:d0:04:0e:05:4f:
         ce:2f:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:52:19 2025 by rpki-client