Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File:                     _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier:          vCQ31NHIjt7GS3yYUjLzVZ92D6p8zRC44p+fsQ0gsWs=
Subject key identifier:   45:E3:AA:A4:EB:91:74:8E:63:DA:57:4D:0B:26:98:06:0F:6F:B0:43
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer:       /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial:       0199FFC840D4015D69F7F25E7536BFCF6AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number:          1166
Signing time:             Mon 20 Oct 2025 04:02:17 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:17 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:17 +0000
Files and hashes:         1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
                          2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: MnzOdXT6JeUqHign0V5NuIFHJFx9BwSwdz5FG+8JCkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:40:d4:01:5d:69:f7:f2:5e:75:36:bf:cf:6a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
        Validity
            Not Before: Oct 20 04:02:17 2025 GMT
            Not After : Oct 21 04:02:17 2025 GMT
        Subject: CN=45e3aaa4eb91748e63da574d0b2698060f6fb043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:c3:e0:fc:37:1a:65:24:8f:a2:4d:54:2d:
                    0f:45:f2:b0:0e:00:da:3f:ac:43:5e:b9:d0:f0:a9:
                    95:48:1a:d6:ff:18:9a:0f:ad:8b:c1:47:5a:51:4d:
                    c0:0e:1d:1c:ee:41:05:d5:91:28:69:6d:85:e5:33:
                    44:35:76:81:54:89:f1:cd:e5:1c:5c:33:8f:6a:f4:
                    2d:61:66:d7:1a:25:b4:76:fc:a3:68:6f:77:15:7e:
                    6d:67:ce:0f:1b:ad:e6:9c:01:54:dc:ee:5f:b2:0f:
                    cf:3b:81:9d:42:5f:ca:df:e3:cd:61:2a:1c:8e:32:
                    a3:71:21:9a:b4:c4:92:67:2f:3b:b6:b9:07:be:99:
                    5d:88:20:4a:0e:2c:1c:35:ae:6e:38:c2:0d:a6:a3:
                    6c:da:ec:57:9a:ce:2a:4f:8f:6b:34:24:dc:73:a4:
                    24:cc:82:55:20:ce:a8:54:a3:36:37:fb:32:80:0b:
                    63:1a:c9:c6:1a:ea:6e:8c:3c:34:62:8b:e7:80:2e:
                    4a:60:4b:05:6a:5a:16:12:c9:6e:57:e3:74:64:b2:
                    64:30:bb:90:cc:e1:d3:f5:9a:5d:c3:65:95:e3:8a:
                    8b:06:79:72:0e:38:f8:f6:37:2f:9a:e8:d6:36:17:
                    a5:83:f9:af:a9:50:3f:6c:b9:54:43:d5:83:73:6f:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:AA:A4:EB:91:74:8E:63:DA:57:4D:0B:26:98:06:0F:6F:B0:43
            X509v3 Authority Key Identifier:
                keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:32:21:70:28:16:98:8c:12:c5:b5:bf:ac:35:00:22:45:
         6a:27:e1:7c:b2:1a:24:6d:5e:22:da:23:1b:01:af:d8:43:7b:
         0e:1d:30:bb:18:f1:fe:c1:5d:fe:71:66:08:92:cb:fd:43:1d:
         d9:7a:1a:c2:d0:f5:55:22:ec:89:05:8f:97:8c:26:50:88:f4:
         35:35:0c:9e:72:98:ab:3f:01:b0:a3:e6:76:9d:cb:22:c3:2c:
         ea:54:5b:a1:b5:84:94:31:37:96:5d:cb:6d:bb:50:9d:98:36:
         b8:95:ab:c7:d8:89:f2:b0:3f:bf:16:e8:34:ef:3c:8b:8f:05:
         42:14:16:e9:d2:51:e3:8c:4d:04:eb:c4:eb:54:de:f4:b4:fc:
         25:b0:f4:a0:94:a8:79:44:b7:9e:96:a3:c3:7d:2e:3a:4e:f5:
         c6:66:06:4e:70:39:58:0d:ad:7c:83:fb:09:af:c2:bb:1a:b0:
         1e:fd:7b:2b:7f:c6:ed:e7:3d:3d:cc:af:04:0e:22:1b:96:72:
         20:27:61:f6:b0:33:8f:56:0a:f9:82:83:b0:18:b8:7b:6b:09:
         e1:bc:69:9c:dd:e3:39:48:90:d9:e7:a0:7b:40:ee:94:a4:81:
         de:fb:16:84:b6:21:44:35:a1:ad:86:a2:8a:71:8a:5a:b9:5d:
         88:9b:0d:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yEDUAV1p9/JedTa/z2rDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj
NWU5NTAwHhcNMjUxMDIwMDQwMjE3WhcNMjUxMDIxMDQwMjE3WjAzMTEwLwYDVQQD
Eyg0NWUzYWFhNGViOTE3NDhlNjNkYTU3NGQwYjI2OTgwNjBmNmZiMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqenD4Pw3GmUkj6JNVC0PRfKwDgDa
P6xDXrnQ8KmVSBrW/xiaD62LwUdaUU3ADh0c7kEF1ZEoaW2F5TNENXaBVInxzeUc
XDOPavQtYWbXGiW0dvyjaG93FX5tZ84PG63mnAFU3O5fsg/PO4GdQl/K3+PNYSoc
jjKjcSGatMSSZy87trkHvpldiCBKDiwcNa5uOMINpqNs2uxXms4qT49rNCTcc6Qk
zIJVIM6oVKM2N/sygAtjGsnGGupujDw0YovngC5KYEsFaloWEsluV+N0ZLJkMLuQ
zOHT9Zpdw2WV44qLBnlyDjj49jcvmujWNhelg/mvqVA/bLlUQ9WDc29EtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXjqqTrkXSOY9pXTQsmmAYPb7BDMB8GA1UdIwQY
MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt
OTliNDU2ZmRkOTU0LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0
LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOp8yIXAo
FpiMEsW1v6w1ACJFaifhfLIaJG1eItojGwGv2EN7Dh0wuxjx/sFd/nFmCJLL/UMd
2XoawtD1VSLsiQWPl4wmUIj0NTUMnnKYqz8BsKPmdp3LIsMs6lRbobWElDE3ll3L
bbtQnZg2uJWrx9iJ8rA/vxboNO88i48FQhQW6dJR44xNBOvE61Te9LT8JbD0oJSo
eUS3npajw30uOk71xmYGTnA5WA2tfIP7Ca/CuxqwHv17K3/G7ec9PcyvBA4iG5Zy
ICdh9rAzj1YK+YKDsBi4e2sJ4bxpnN3jOUiQ2eege0DulKSB3vsWhLYhRDWhrYai
inGKWrldiJsNLQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:38 2025 by rpki-client