Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          DC46ozkps/mbMtJNyuh9jVuJIYqWm2g5VWAEKH410As=
Subject key identifier:   B0:83:CF:87:40:F1:66:E9:F2:E2:88:E1:07:61:6F:7B:F1:D2:07:85
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       0199FD345CDF9A3BE22B17F53A366BE611C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0ACD
Signing time:             Sun 19 Oct 2025 16:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:31 +0000
Files and hashes:         1: 3qRTh1P9OF6YOqHXqOqHDoBD8eg.roa (hash: nQAh302ZIgG0KfyPwfrx+gnhB19jlHvyVNBKKuKcDas=)
                          2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: WXiIczzt3qRl6V3hdoYQiZyNL/s4nV7rPNOIUckb2S8=)
                          3: ar9bFy5EONuIJfpM6gpX8Ujo7Ug.roa (hash: qSqkt91qWr7MYsAwEDebuK5+OcIZWP3ilBjbrzxA5ck=)
                          4: qpS5E6zN7Za0_vE5y0g_cgWncv8.roa (hash: pquZUL+QWeP5wqagKXvKjrrNKaLrKYUyFpeUGLpB5cY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:5c:df:9a:3b:e2:2b:17:f5:3a:36:6b:e6:11:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Oct 19 16:01:31 2025 GMT
            Not After : Oct 20 16:01:31 2025 GMT
        Subject: CN=b083cf8740f166e9f2e288e107616f7bf1d20785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:00:1d:97:0d:07:4b:ba:30:16:3b:ce:0a:
                    79:fa:29:50:04:5c:d4:19:1f:68:8b:c7:58:72:d3:
                    4d:c8:52:f9:6b:50:05:23:38:25:1f:ea:be:5a:71:
                    3d:44:87:06:f6:6c:18:7b:d8:34:f3:b7:37:e6:06:
                    5a:c6:c3:de:3b:d2:c6:8f:1f:4f:ab:3a:07:ea:fb:
                    57:93:df:85:51:cd:8d:30:76:9e:31:8e:d5:8f:63:
                    d6:43:f6:60:f1:de:e4:f9:15:dd:5e:e9:f5:58:a0:
                    39:96:4d:bc:ab:27:94:77:9b:98:fd:98:9a:03:e7:
                    16:b1:eb:c5:c2:64:5f:dc:ad:8d:d7:1a:f9:1e:d3:
                    01:00:bc:93:ff:bc:9e:d1:8f:12:ca:b4:14:85:9c:
                    51:81:63:fb:c7:0e:cf:30:89:5d:6f:c6:2b:34:5b:
                    fb:ef:9e:ad:7e:50:e9:b9:10:4c:b4:9f:31:26:1e:
                    f9:9f:ab:fa:b7:92:5d:1c:52:4b:de:ad:1e:14:07:
                    42:2f:6b:33:27:be:83:9d:f1:f8:06:5b:38:55:2a:
                    0c:09:dd:a4:fe:b7:48:39:1d:cc:ee:ba:24:4b:3b:
                    86:11:7c:fe:35:18:0d:bf:50:85:45:0a:19:b3:c1:
                    87:79:47:2a:3a:32:a8:16:93:a8:57:ab:9f:87:6e:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:83:CF:87:40:F1:66:E9:F2:E2:88:E1:07:61:6F:7B:F1:D2:07:85
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:93:b1:d9:5c:de:9e:1f:d3:df:ab:fa:3d:c5:01:8d:27:b1:
         68:d5:1f:16:de:6d:e0:45:73:cc:a8:ca:11:18:7c:6a:71:b7:
         03:80:a6:3d:e3:e1:8b:40:82:10:64:1c:5d:5b:e7:36:44:54:
         3e:40:a4:45:2d:e9:90:3b:d9:c0:7a:7d:59:97:56:6a:00:29:
         41:88:1c:cc:ae:52:aa:c5:47:da:0f:4e:34:d3:25:10:32:14:
         2d:a1:e0:02:d9:16:6c:f8:54:55:7f:c3:af:ab:76:f1:f8:61:
         09:f1:12:6b:21:64:9c:c9:fe:b2:bc:35:40:47:0e:36:27:0a:
         15:8b:d5:06:c1:b8:d0:17:7d:b3:64:7e:2c:1d:72:69:17:7c:
         3f:54:1a:ea:00:7e:b7:70:07:d3:4a:25:60:e4:72:f3:bc:6f:
         9f:1d:b5:e5:b1:55:ea:84:4b:7e:96:c1:d2:69:b3:4f:fb:e2:
         4b:1e:f6:98:dc:6d:00:75:70:0e:3a:b9:60:41:bf:76:3b:2d:
         82:db:74:e0:63:c9:52:5d:99:4c:5c:1a:1a:9f:58:bd:46:03:
         e8:92:8c:90:65:61:d5:5a:63:62:89:67:89:fb:52:14:72:e9:
         a1:22:89:1e:c8:45:32:60:3a:d1:34:a7:61:69:d7:ea:9f:ae:
         96:92:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:34 2025 by rpki-client