Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File:                     Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier:          9cclthrAq9xW3b4xC0hXI8scThs1KBUjAuVKAbe4hwo=
Subject key identifier:   C0:45:95:B3:B4:67:B9:C9:B5:14:FE:52:FF:E5:5E:CA:A3:E9:71:75
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer:       /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial:       0199FC587EE82D66C95E41ADD1D0807814EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number:          0CAB
Signing time:             Sun 19 Oct 2025 12:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:21 +0000
Files and hashes:         1: GjL9gwLKb-oKSYTlHtFQE_CZaJs.roa (hash: mCVCuaWcX9YvC2fV3yIwbRSQDcC/PmXYfMHTWio0d9k=)
                          2: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: quMv4nZbc4Mp/AukG0umwiJDR9ZF5ltmHVUq4ZoAwD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:7e:e8:2d:66:c9:5e:41:ad:d1:d0:80:78:14:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
        Validity
            Not Before: Oct 19 12:01:21 2025 GMT
            Not After : Oct 20 12:01:21 2025 GMT
        Subject: CN=c04595b3b467b9c9b514fe52ffe55ecaa3e97175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:30:48:ee:b0:20:f0:db:e6:2e:f4:d1:13:
                    95:b9:b9:b8:ae:15:a0:b9:b1:d9:6e:c0:ea:bc:89:
                    a9:d6:5f:78:b0:e9:58:81:f8:0c:1e:a8:f2:5c:4e:
                    13:d0:8b:8c:39:f0:32:53:f7:aa:40:ab:33:1b:5b:
                    90:ad:27:1d:ed:32:54:d9:31:81:e2:cd:e4:8f:62:
                    62:98:06:fa:b4:d5:9e:93:07:e3:02:9d:2e:ea:cb:
                    be:5c:56:47:be:5d:b9:7f:78:f4:a2:9f:e1:93:96:
                    2b:a4:fc:47:71:76:d0:37:8e:4e:87:78:60:86:f8:
                    4f:73:51:bb:f8:ce:50:71:73:ac:65:39:84:9a:fe:
                    df:7a:7f:17:5e:1d:da:2b:4c:3a:7e:55:6b:af:60:
                    10:df:08:3d:3f:6a:de:ed:63:9a:79:a0:cd:b3:3f:
                    43:00:b9:43:06:d0:7e:be:05:48:ac:57:7f:b5:b1:
                    20:a0:22:93:e0:83:49:f1:34:74:b8:5f:f1:01:76:
                    de:cd:90:78:22:ae:db:ef:48:26:75:9c:33:61:85:
                    85:45:e5:61:c6:77:ab:f9:d9:2e:45:09:65:ba:6f:
                    2a:15:cb:67:f4:e8:3a:88:70:09:4b:00:be:5a:66:
                    a2:c6:99:ad:50:b5:5c:5c:29:c7:11:cf:c3:21:ab:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:45:95:B3:B4:67:B9:C9:B5:14:FE:52:FF:E5:5E:CA:A3:E9:71:75
            X509v3 Authority Key Identifier:
                keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:80:8c:93:48:4d:b0:be:24:63:c8:58:47:30:d4:d7:18:4d:
         a1:61:4f:f1:37:44:3b:18:6b:7a:5d:a2:d8:fe:dd:fe:c5:ad:
         a0:4d:b8:8b:97:5f:bb:7a:ec:cb:9d:ef:8a:cd:4b:48:c2:91:
         97:f7:82:38:2a:8f:7c:ed:8a:01:03:a8:41:b8:e4:ad:5f:13:
         02:28:6d:a3:65:bf:41:94:52:4d:ca:38:55:e2:8e:28:a3:34:
         67:b7:cb:14:5d:33:43:fc:cb:52:13:fd:a8:36:d0:ed:ef:11:
         96:97:69:71:3c:16:67:5a:45:96:25:9f:aa:9e:e5:c4:e7:93:
         b6:ae:50:1a:9a:bc:63:f9:27:b9:ff:31:25:e1:34:0d:2a:34:
         9b:26:8d:bb:a4:52:a5:95:ce:92:4c:ee:b6:8b:f1:a3:8d:e0:
         42:6e:63:df:df:1e:39:3e:b1:a7:13:63:6d:91:4f:3c:8b:f5:
         d9:35:a8:2c:32:36:ae:fe:9a:a3:e0:d7:ab:4d:0f:46:7b:d9:
         96:27:f5:09:47:e1:42:5d:0d:fe:97:83:a7:b6:d4:47:2f:eb:
         e5:85:6f:7b:b7:1e:f5:97:6e:a4:6e:55:69:65:41:43:90:1c:
         c4:0a:ca:9f:b7:d5:f6:da:04:f6:ef:5f:a0:ea:57:9a:ee:24:
         1f:77:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:33 2025 by rpki-client