Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File:                     qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier:          85K6YCq60Je7I6RK6ZgmdWOupdhKuLpIguQ9YC9SzEU=
Subject key identifier:   04:C1:B8:55:DC:5F:EE:2D:87:7E:C2:BF:4F:84:42:42:FE:39:9D:2B
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer:       /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial:       0199172D31363C66740A105081D252A84A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number:          0922
Signing time:             Fri 05 Sep 2025 00:01:01 +0000
Manifest this update:     Fri 05 Sep 2025 00:01:01 +0000
Manifest next update:     Sat 06 Sep 2025 00:01:01 +0000
Files and hashes:         1: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: uM2LTds4hurNWdeTmluIbpBAYM3TU8LBC3RxY1+yHX8=)
                          2: tDo_atpT6VLkLCUrGS5di7JdOpY.roa (hash: 34FZjfIchoZn3cBM50GZegDU3woCBReTpheCA5hB7FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:2d:31:36:3c:66:74:0a:10:50:81:d2:52:a8:4a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
        Validity
            Not Before: Sep  5 00:01:01 2025 GMT
            Not After : Sep  6 00:01:01 2025 GMT
        Subject: CN=04c1b855dc5fee2d877ec2bf4f844242fe399d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:32:74:a9:28:22:49:83:c0:18:c9:a6:bc:
                    96:87:83:57:3a:32:9e:91:6c:45:f8:63:0d:6a:d2:
                    b1:65:90:fb:11:3b:e6:34:ca:af:c7:37:cf:9f:1c:
                    4f:ec:e5:b6:39:7b:12:3f:d3:f9:0d:8b:ab:19:83:
                    8f:2b:52:5b:3e:93:1c:7f:e6:e0:d1:b9:a0:95:34:
                    57:56:99:72:2e:9b:5c:3b:39:b4:e0:25:3b:30:e4:
                    f1:ad:5e:7d:c8:86:45:e5:5d:cc:71:70:84:ae:7f:
                    d5:5c:cd:e8:38:63:4a:2a:05:b7:e5:d1:0b:ba:a6:
                    d1:33:a9:98:2b:ef:c8:6a:2a:20:a8:a7:74:b2:77:
                    1b:63:a8:6f:df:4c:24:d1:74:47:c3:e1:dd:4a:45:
                    8e:d9:5c:e5:40:96:d3:86:35:1d:87:dc:af:20:da:
                    a9:ee:e0:21:c1:b7:28:3a:f5:05:89:0f:58:39:4e:
                    fa:47:16:40:ec:92:2d:38:36:d6:da:a9:5e:18:5d:
                    d6:13:21:8a:8d:5d:55:29:35:13:bc:82:d3:7a:22:
                    7d:9b:37:83:81:7b:68:6b:c5:f2:ec:ee:1d:cf:e5:
                    54:8d:81:cd:9b:57:f6:0d:7f:d9:bb:23:a0:8e:76:
                    89:10:ad:10:6a:8d:0a:4a:a7:1b:43:e8:ce:76:96:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C1:B8:55:DC:5F:EE:2D:87:7E:C2:BF:4F:84:42:42:FE:39:9D:2B
            X509v3 Authority Key Identifier:
                keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:dc:f7:09:50:3b:0b:0d:d6:ce:ec:d4:3e:8d:fc:75:16:
         28:7a:48:9a:92:99:69:5f:b3:1b:68:20:97:2b:c7:74:75:e8:
         51:5c:b8:6f:80:08:97:62:46:45:42:69:6a:8a:33:72:10:24:
         d1:07:81:4d:ee:89:03:ea:b9:7e:c8:0a:79:6a:05:ea:37:73:
         77:5c:df:1a:89:7f:39:16:c5:42:bd:64:d8:d7:6c:bc:38:d6:
         e7:1c:07:be:23:4b:b2:9a:e2:a6:ba:ea:2e:4c:e6:79:ca:ab:
         7d:a6:0b:59:0b:28:45:75:7e:55:9d:98:27:38:3b:91:77:18:
         b4:f4:87:5b:63:0f:c7:77:d6:16:25:af:64:ff:34:c5:b3:d6:
         c8:17:fb:f1:a2:03:cb:ae:f5:1e:37:23:de:d2:58:fe:38:18:
         1e:94:9b:61:2b:62:b7:30:75:3b:60:92:03:ba:e1:22:1a:ea:
         0a:d3:e9:5a:6e:06:6f:98:76:92:82:da:ff:9c:0c:ca:f6:9f:
         5a:75:cc:54:cf:04:88:39:e7:7c:de:7c:01:7e:6c:ed:08:b9:
         b6:96:4e:aa:88:c9:2f:cc:04:b6:06:40:ea:d5:9c:2e:86:11:
         e6:48:ef:69:23:fa:88:db:99:ef:87:d5:0b:81:81:8b:f4:61:
         54:01:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:35 2025 by rpki-client