Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
File:                     tqNouOZvnhWmEOwY1rFHtrokzuc.mft (raw, json)
Hash identifier:          pIrvJk/mrC/yLGnwTa6lVKntXa5SnDCoU3HpLuhDdQ4=
Subject key identifier:   0C:92:B6:39:2D:58:46:15:CD:B1:CE:6D:85:C0:8F:AB:9E:EB:64:C5
Authority key identifier: B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7
Certificate issuer:       /CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7
Certificate serial:       0199FCC69F1D81BA549B0010ABA48BF9313E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
Manifest number:          016F
Signing time:             Sun 19 Oct 2025 14:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:39 +0000
Files and hashes:         1: 76JdDApMBw2HG_-2b61i99W245Q.roa (hash: NIJoLQsfvrL/qonBB3ZwrtyRIgvdYG24/geuGhv0roI=)
                          2: tqNouOZvnhWmEOwY1rFHtrokzuc.crl (hash: DN9Z32xZGNepwQOTDfqBN+IBuLCUgv7X6Wt6BeDx3uA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:9f:1d:81:ba:54:9b:00:10:ab:a4:8b:f9:31:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a368b8e66f9e15a610ec18d6b147b6ba24cee7
        Validity
            Not Before: Oct 19 14:01:39 2025 GMT
            Not After : Oct 20 14:01:39 2025 GMT
        Subject: CN=0c92b6392d584615cdb1ce6d85c08fab9eeb64c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:0d:2b:a1:a1:7c:bb:8b:f8:f8:c8:5f:d6:
                    45:49:2f:b8:94:cd:30:fb:34:85:bd:9e:52:e1:e3:
                    d8:fa:b3:a7:a7:92:fa:5a:91:40:3c:07:56:e6:95:
                    c2:31:7c:59:72:91:6e:b1:20:11:c3:98:9d:ca:bf:
                    69:17:47:05:4a:4c:fd:5d:89:8b:04:66:b0:ea:81:
                    30:6f:ee:99:17:34:41:38:05:96:41:e5:0e:25:c1:
                    0d:4b:08:14:05:88:db:d0:73:11:92:82:fc:89:89:
                    5e:b9:63:e8:6f:59:a4:a2:3c:b2:61:10:fe:b6:b2:
                    34:31:09:7f:b1:3e:62:6c:37:1c:ef:90:e3:cb:dd:
                    91:85:4e:ff:f9:c7:ef:99:2a:27:1e:10:ed:8e:48:
                    59:9d:83:63:c8:0f:f6:e9:cd:cc:06:5c:2c:27:8c:
                    d1:40:35:2d:9a:2c:12:31:f6:cd:6b:14:ea:cb:f7:
                    cb:0d:a0:df:63:55:31:7d:50:57:61:67:24:8f:bc:
                    20:7b:db:f8:ba:95:a1:2d:7a:39:d6:63:7a:11:42:
                    32:38:0f:b1:91:41:44:92:57:3b:53:09:5b:b7:63:
                    19:fa:d1:df:48:65:d1:7d:e1:c0:de:9e:c4:c2:19:
                    8e:33:ad:8e:db:69:f2:45:d6:23:99:cb:93:6d:11:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:92:B6:39:2D:58:46:15:CD:B1:CE:6D:85:C0:8F:AB:9E:EB:64:C5
            X509v3 Authority Key Identifier:
                keyid:B6:A3:68:B8:E6:6F:9E:15:A6:10:EC:18:D6:B1:47:B6:BA:24:CE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqNouOZvnhWmEOwY1rFHtrokzuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ba1868-ab76-4be1-bc53-7480d8a2f1be/1/tqNouOZvnhWmEOwY1rFHtrokzuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:da:72:cb:c5:52:f6:24:37:01:05:7e:51:0e:5f:01:ad:bc:
         4d:10:a3:b3:b7:b5:b2:fa:59:43:b5:d9:04:bf:c6:21:72:c6:
         5d:ae:cd:b9:55:3a:be:61:a1:94:f8:7a:dc:bb:ef:d3:53:f4:
         7c:f5:e3:b8:77:05:09:33:80:1d:8b:36:e8:58:22:5c:a6:83:
         47:09:10:0b:ef:82:a6:d3:25:f8:9a:9d:7b:36:ce:87:1f:5a:
         01:b1:e2:4b:8e:3a:37:6d:1f:fa:ca:f0:cf:ee:0f:d8:ef:bb:
         0a:36:26:6b:8d:f4:fa:8d:fd:fe:39:35:1e:a0:8b:77:89:bd:
         b0:45:a1:51:ce:e9:96:66:9e:95:3f:47:02:3e:bf:37:de:35:
         c2:af:0b:ea:80:f5:c2:12:c8:57:d3:7c:07:02:67:8e:58:1d:
         a5:8a:75:fa:ac:e3:ea:c9:14:b7:1e:09:96:01:5d:77:6d:70:
         71:f9:bc:54:1e:01:70:b9:91:db:b9:07:9a:e8:67:ec:d1:d8:
         18:08:4f:95:c3:9c:5f:1b:dd:dd:56:6b:f1:07:51:e1:a7:02:
         d1:57:01:03:24:ed:c2:ea:8d:54:99:e1:fa:69:1b:f1:fa:7c:
         34:cf:4e:17:14:02:39:ed:c9:c3:54:69:37:32:df:6b:26:59:
         08:af:ed:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xp8dgbpUmwAQq6SL+TE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YTM2OGI4ZTY2ZjllMTVhNjEwZWMxOGQ2YjE0N2I2YmEy
NGNlZTcwHhcNMjUxMDE5MTQwMTM5WhcNMjUxMDIwMTQwMTM5WjAzMTEwLwYDVQQD
EygwYzkyYjYzOTJkNTg0NjE1Y2RiMWNlNmQ4NWMwOGZhYjllZWI2NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU4NK6GhfLuL+PjIX9ZFSS+4lM0w
+zSFvZ5S4ePY+rOnp5L6WpFAPAdW5pXCMXxZcpFusSARw5idyr9pF0cFSkz9XYmL
BGaw6oEwb+6ZFzRBOAWWQeUOJcENSwgUBYjb0HMRkoL8iYleuWPob1mkojyyYRD+
trI0MQl/sT5ibDcc75Djy92RhU7/+cfvmSonHhDtjkhZnYNjyA/26c3MBlwsJ4zR
QDUtmiwSMfbNaxTqy/fLDaDfY1UxfVBXYWckj7wge9v4upWhLXo51mN6EUIyOA+x
kUFEklc7Uwlbt2MZ+tHfSGXRfeHA3p7EwhmOM62O22nyRdYjmcuTbRH6HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyStjktWEYVzbHObYXAj6ue62TFMB8GA1UdIwQY
MBaAFLajaLjmb54VphDsGNaxR7a6JM7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMt
NzQ4MGQ4YTJmMWJlLzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9iYTE4NjgtYWI3Ni00YmUxLWJjNTMtNzQ4MGQ4YTJmMWJl
LzEvdHFOb3VPWnZuaFdtRU93WTFyRkh0cm9renVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9pyy8VS
9iQ3AQV+UQ5fAa28TRCjs7e1svpZQ7XZBL/GIXLGXa7NuVU6vmGhlPh63Lvv01P0
fPXjuHcFCTOAHYs26FgiXKaDRwkQC++CptMl+JqdezbOhx9aAbHiS446N20f+srw
z+4P2O+7CjYma430+o39/jk1HqCLd4m9sEWhUc7plmaelT9HAj6/N941wq8L6oD1
whLIV9N8BwJnjlgdpYp1+qzj6skUtx4JlgFdd21wcfm8VB4BcLmR27kHmuhn7NHY
GAhPlcOcXxvd3VZr8QdR4acC0VcBAyTtwuqNVJnh+mkb8fp8NM9OFxQCOe3Jw1Rp
NzLfayZZCK/tQA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:23 2025 by rpki-client