Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
File:                     QeODxYB-mzL1dtCluO53RMrPtxc.mft (raw, json)
Hash identifier:          +uFwol7eSX/MVS57b28wrByKdj8Cl+wvZ4ynigOf45Y=
Subject key identifier:   A8:57:B5:51:80:E8:BE:36:28:F4:3B:A0:66:72:11:35:B3:1F:BA:D7
Authority key identifier: 41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17
Certificate issuer:       /CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
Certificate serial:       0199FE468D53D79B264DD0083CB3CC9B8A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
Manifest number:          05B2
Signing time:             Sun 19 Oct 2025 21:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:00 +0000
Files and hashes:         1: 03enaQCGw_eqXqIAwZyG-7zrfRA.roa (hash: YhNG/6VofCuK7pQjtVrVurKsTSoyBGAKru+JjLAKpoo=)
                          2: DUyUlX3xTZHlVnLSKpECvt4NkYU.roa (hash: ZP6huwEf1pdyFLtyz+3lIcMnm1rz3bsZAcR3RQdU+KU=)
                          3: QeODxYB-mzL1dtCluO53RMrPtxc.crl (hash: Nl5iI0NZdeHuBUvufwEFaWcvEe7TicNcQOiTMbk5Bi4=)
                          4: bB3G3EZqBAqArfU6X5zzc1opBME.roa (hash: gPeixOKastqxOj7HlHBp8UwchVAjS4fsBzFCexJl5H8=)
                          5: lKGyjDcky_IoNZN6qvlaMVTqM58.roa (hash: IiBQAy+zcf79xQNY8RIQMsijGISjsQrLjaoVvIJA9t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:8d:53:d7:9b:26:4d:d0:08:3c:b3:cc:9b:8a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e383c5807e9b32f576d0a5b8ee7744cacfb717
        Validity
            Not Before: Oct 19 21:01:00 2025 GMT
            Not After : Oct 20 21:01:00 2025 GMT
        Subject: CN=a857b55180e8be3628f43ba066721135b31fbad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:4a:42:a1:1d:b0:37:3d:41:7d:dc:17:a3:
                    38:57:5c:b9:cd:ea:7a:d1:07:c6:e9:9a:3b:b3:a4:
                    19:39:e1:28:56:33:82:bc:49:58:99:57:0d:ec:8f:
                    eb:ab:60:f1:cf:bd:46:44:c0:b9:28:5a:9f:5f:fa:
                    28:ab:4b:9c:ce:5e:d9:89:ff:d9:f4:db:7b:37:72:
                    1a:18:7e:6b:41:08:9b:23:bb:5c:01:db:8e:cf:4b:
                    6a:0f:82:8f:b0:03:5b:59:57:23:a2:1b:54:f4:c6:
                    ea:5f:44:3d:7c:d2:9b:b5:e0:8e:1c:39:f3:52:39:
                    f1:9f:d3:69:44:f6:fc:f4:97:89:14:70:39:c7:51:
                    36:dc:ea:28:de:f7:ca:48:28:ae:03:f9:e4:a1:4c:
                    86:41:b5:0c:d6:ad:b3:36:0d:b7:a6:5a:44:df:6a:
                    dc:8d:bd:0f:4a:77:e4:b9:3a:1f:58:e9:87:47:a0:
                    7b:3a:ef:5a:dd:60:08:37:f1:8e:99:15:2a:8b:e3:
                    d8:b7:e5:a4:09:60:f9:ca:c7:4a:fe:f0:6c:5f:fc:
                    31:31:0f:15:f4:88:24:42:e1:f6:98:d8:b2:fa:b6:
                    c7:5d:87:aa:26:c4:27:dd:32:b4:7a:86:f4:a7:f5:
                    53:c7:3f:ff:ba:ba:c9:f3:4a:b1:fd:e1:df:db:d8:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:57:B5:51:80:E8:BE:36:28:F4:3B:A0:66:72:11:35:B3:1F:BA:D7
            X509v3 Authority Key Identifier:
                keyid:41:E3:83:C5:80:7E:9B:32:F5:76:D0:A5:B8:EE:77:44:CA:CF:B7:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeODxYB-mzL1dtCluO53RMrPtxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aea465-ba45-49ac-9c68-7b41fabc6f67/1/QeODxYB-mzL1dtCluO53RMrPtxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7d:80:33:86:3c:35:39:24:a9:83:2d:30:6a:0e:70:69:f4:
         dd:ce:6c:55:95:79:31:8c:f2:5a:5c:f3:2d:81:b0:b0:d2:40:
         00:f0:b4:9e:ab:9f:e4:aa:53:00:c0:09:17:37:8c:f4:47:ee:
         9d:86:5d:a5:73:10:46:ec:4a:0a:b3:c2:5d:a2:60:3f:78:8d:
         8e:6f:fc:0b:da:ba:58:fb:ca:74:7a:b6:1e:14:90:80:41:65:
         eb:68:75:c4:02:29:5a:b6:4d:1d:f6:aa:49:c0:12:46:93:13:
         8d:6c:85:59:ed:9e:61:25:5e:1f:09:ae:85:cf:54:82:c1:21:
         d4:8d:24:6a:b7:8b:08:79:90:6b:8d:00:c9:c4:2a:f7:ff:00:
         c9:be:c5:ec:52:48:b9:c4:d3:ca:28:ad:89:d3:46:bf:8d:6f:
         3f:7b:95:f3:e5:4f:e4:d7:f8:98:3e:b1:35:ae:c2:62:65:29:
         c7:12:16:a4:21:9d:98:98:69:0b:3d:cf:48:76:32:c1:e4:db:
         46:91:8f:07:cb:34:72:e8:3d:f3:0d:33:8b:43:04:9f:ea:b9:
         6a:8c:0d:5e:ab:41:92:b0:3c:ec:9e:45:8e:91:8a:1f:16:75:
         e6:6a:45:89:e2:a2:a5:d2:06:3c:76:28:0a:45:4f:ad:ec:db:
         b5:8f:19:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:30 2025 by rpki-client