Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File:                     _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier:          Tr6dSEdTO2n1uHmFDymqvUhDs/Ma2hgTrK12RJ93Ge0=
Subject key identifier:   91:67:76:3E:EA:74:AB:AC:4E:C2:6D:8A:45:B4:55:9A:6A:43:7F:4A
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer:       /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial:       019A01B4F62522F5E6E69E3C553732939E23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number:          1167
Signing time:             Mon 20 Oct 2025 13:00:27 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:27 +0000
Manifest next update:     Tue 21 Oct 2025 13:00:27 +0000
Files and hashes:         1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
                          2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: 0PDNV2PAkPnQq66DaZDt6/gHDgVzxZ7gzWkuK6gLSzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b4:f6:25:22:f5:e6:e6:9e:3c:55:37:32:93:9e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
        Validity
            Not Before: Oct 20 13:00:27 2025 GMT
            Not After : Oct 21 13:00:27 2025 GMT
        Subject: CN=9167763eea74abac4ec26d8a45b4559a6a437f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:80:dd:39:60:5f:66:0b:58:ab:8a:60:33:
                    37:aa:b3:13:81:01:6b:cc:7d:79:91:6f:01:60:cf:
                    e1:92:31:6c:e8:94:c8:fb:76:77:26:c2:2b:ea:c8:
                    4a:74:34:c8:10:03:22:18:3d:9a:50:22:b3:36:25:
                    c5:85:b6:f0:e2:10:f3:3b:45:7d:e1:8d:2c:fe:60:
                    35:cb:2d:a6:ff:c9:02:bf:3c:d4:3a:c7:34:de:7b:
                    7d:06:e4:e2:7c:e8:68:a9:0c:8a:87:6f:cf:4b:9b:
                    46:74:fe:23:04:ed:b4:a9:da:c9:f2:1a:6a:1c:22:
                    89:da:b0:fa:e8:fe:e0:28:0c:16:bc:dd:a9:98:71:
                    4e:19:ec:31:c6:f5:94:f0:12:41:c8:dc:87:31:fa:
                    e4:c3:6b:f6:6e:e3:db:f0:e3:3d:64:8a:0c:bf:f3:
                    6a:4a:6d:8e:4c:ac:9f:96:12:8f:15:80:36:de:f8:
                    c8:ec:ad:4d:b6:5e:f7:bf:05:f1:51:1f:fb:6c:9c:
                    cc:26:61:0f:20:c6:5a:19:46:fa:31:b5:c1:11:06:
                    c7:ef:6a:03:2d:9b:47:cf:21:d0:af:a3:ad:1f:59:
                    9d:72:cd:9d:17:96:ee:8e:7f:60:1e:be:19:56:44:
                    a6:cd:19:33:21:d5:e1:4f:b3:99:ad:38:b1:3d:60:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:67:76:3E:EA:74:AB:AC:4E:C2:6D:8A:45:B4:55:9A:6A:43:7F:4A
            X509v3 Authority Key Identifier:
                keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ca:ca:f4:ba:7d:a1:57:08:8a:4d:54:3e:73:2f:ad:5c:48:
         c0:f5:01:6b:d0:72:07:da:5d:44:0a:60:5b:12:4a:46:42:39:
         21:48:3d:b4:0d:4d:dd:e7:c4:2a:06:f2:84:7a:00:ab:b6:6d:
         0d:f7:2d:cf:e3:0d:cf:8d:e0:b4:b7:5d:33:11:eb:81:1e:fc:
         58:7c:db:d6:2a:d9:24:19:8e:47:8b:39:02:f5:0f:03:7e:3b:
         bb:22:3d:1a:cb:c1:5d:89:39:cd:0c:f1:6f:5a:80:b5:7b:b9:
         9c:5d:0c:47:97:b0:2c:fc:9a:05:94:0e:60:54:83:b9:83:a4:
         b1:98:04:34:5a:38:7d:a7:d7:1c:52:cf:a6:15:4e:f6:8e:b9:
         74:7f:be:bc:92:66:41:b5:eb:72:ce:c2:cb:fc:75:af:ca:8c:
         2e:cb:5e:a4:7e:b8:19:9c:e0:49:15:71:19:f5:80:70:03:59:
         2d:60:7c:c7:5f:e2:9f:5a:f1:d9:bf:fd:a7:f8:35:40:59:0d:
         96:70:c1:16:b1:4e:d8:70:28:46:28:08:b6:71:ba:1e:cd:5c:
         73:23:fc:f4:d1:92:39:62:e0:21:23:b3:95:0e:0a:60:5d:d5:
         87:7d:9f:aa:fd:30:e6:a8:ee:e9:3f:2d:8a:f1:fc:41:3f:dc:
         7b:5e:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:14 2025 by rpki-client