Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File:                     QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier:          vLLk8KW8MZgjz+mjID+OkcI5g5QXJcaxtgj87oACizk=
Subject key identifier:   C2:65:09:D5:52:45:6F:3E:4C:51:67:47:78:3F:AE:E8:BF:5F:1C:67
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer:       /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial:       0199FAA1103D570C7083B58EA4058CF6C4F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number:          142F
Signing time:             Sun 19 Oct 2025 04:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:23 +0000
Files and hashes:         1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: EPNXJh9+eEAHO2+Z1hirRl9Nk+dt2LeqK8v2sEQPm60=)
                          2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:10:3d:57:0c:70:83:b5:8e:a4:05:8c:f6:c4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
        Validity
            Not Before: Oct 19 04:01:23 2025 GMT
            Not After : Oct 20 04:01:23 2025 GMT
        Subject: CN=c26509d552456f3e4c516747783faee8bf5f1c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1e:71:8a:68:d2:0b:e2:73:98:ec:ff:da:b5:
                    8c:d5:8d:0d:f5:18:cd:2c:09:0a:3e:08:9b:53:91:
                    9e:81:c8:f2:51:d6:28:5f:39:da:fc:15:6f:f8:3e:
                    42:0a:da:a6:cc:8f:f9:86:e9:18:19:ec:58:16:e8:
                    32:1d:2e:a7:25:d3:ef:ef:43:83:10:dc:dd:d9:f0:
                    14:b5:87:6a:56:dc:b4:26:b5:69:c0:41:ef:5c:92:
                    b5:ea:5f:32:33:b6:94:4e:7e:87:3b:75:bb:af:51:
                    fa:42:8f:18:67:46:26:7d:42:af:e2:3d:d1:a9:e8:
                    54:0c:bc:b0:9c:81:ea:32:f4:fb:19:f3:e7:7f:10:
                    1f:c8:56:39:93:d2:2a:33:28:f5:2b:bc:02:53:d7:
                    f8:7a:0a:24:6e:ff:93:37:6f:2b:8e:28:af:67:6e:
                    24:37:eb:9d:93:c3:5c:fb:f5:d0:50:8d:86:4c:ce:
                    93:35:5d:82:b6:64:25:20:46:f0:45:b4:f6:9a:eb:
                    9f:4f:15:de:85:23:ac:76:c4:3c:71:b0:48:ec:b0:
                    d6:eb:61:e2:f9:46:f4:1e:86:46:ac:bb:72:cf:76:
                    71:7f:14:83:dd:93:4e:f3:ce:07:97:18:75:08:1a:
                    fc:bc:f2:73:b3:07:3e:4d:0c:37:8f:da:d3:da:e8:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:65:09:D5:52:45:6F:3E:4C:51:67:47:78:3F:AE:E8:BF:5F:1C:67
            X509v3 Authority Key Identifier:
                keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:80:62:0c:1f:9f:04:da:4a:05:59:b7:1e:c2:4d:d9:84:20:
         e3:f2:36:d3:9b:60:36:ab:56:a3:39:8b:f1:32:ca:f0:ed:78:
         6d:e0:cb:d6:75:88:9a:01:b4:6c:d8:50:b2:2a:af:74:4e:a9:
         ec:6a:77:fc:3c:57:a9:f7:b2:fe:20:d0:67:4f:26:44:65:ce:
         22:38:1f:c3:4c:29:aa:01:52:3d:33:d1:bc:22:00:13:76:c9:
         70:d4:a4:55:7c:02:17:8e:c7:42:22:27:3d:12:a4:69:20:3e:
         75:c0:08:49:9e:53:60:1a:c7:29:bb:c5:b4:78:ac:ee:48:be:
         31:6c:f0:f6:9e:3b:9a:d5:43:99:7c:83:d2:ff:44:2f:b8:53:
         20:8d:8d:dc:77:7c:82:19:45:d4:e9:59:3c:82:e2:eb:0e:0f:
         1e:0e:c8:f0:78:b5:f0:e6:f0:f5:69:30:ac:4b:37:66:cf:f5:
         38:52:7d:3d:f4:63:87:4e:56:74:94:1d:c1:8a:0f:80:fe:05:
         41:02:fd:31:9c:26:f7:87:16:ac:bb:f1:57:3e:9e:fa:3e:d0:
         ab:45:92:59:f0:69:e2:ac:ac:db:8b:81:bc:73:aa:da:cb:ff:
         29:e8:ce:a9:2f:ed:23:05:c6:f6:f2:e4:54:c2:63:19:e3:0a:
         76:75:88:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oRA9Vwxwg7WOpAWM9sTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDc5ZWE1NjJkZDNhN2QwY2YyYTZlOTc4YjZiYmYzNzhm
NzNjZTQwHhcNMjUxMDE5MDQwMTIzWhcNMjUxMDIwMDQwMTIzWjAzMTEwLwYDVQQD
EyhjMjY1MDlkNTUyNDU2ZjNlNGM1MTY3NDc3ODNmYWVlOGJmNWYxYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h5ximjSC+JzmOz/2rWM1Y0N9RjN
LAkKPgibU5GegcjyUdYoXzna/BVv+D5CCtqmzI/5hukYGexYFugyHS6nJdPv70OD
ENzd2fAUtYdqVty0JrVpwEHvXJK16l8yM7aUTn6HO3W7r1H6Qo8YZ0YmfUKv4j3R
qehUDLywnIHqMvT7GfPnfxAfyFY5k9IqMyj1K7wCU9f4egokbv+TN28rjiivZ24k
N+udk8Nc+/XQUI2GTM6TNV2CtmQlIEbwRbT2muufTxXehSOsdsQ8cbBI7LDW62Hi
+Ub0HoZGrLtyz3ZxfxSD3ZNO884Hlxh1CBr8vPJzswc+TQw3j9rT2uh2oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJlCdVSRW8+TFFnR3g/rui/XxxnMB8GA1UdIwQY
MBaAFEBHnqVi3Tp9DPKm6Xi2u/N49zzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYt
ODkzNmYwOTFmNGY0LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9lNzRhNTgtYmI5ZS00YWU5LWE3NDYtODkzNmYwOTFmNGY0
LzEvUUVlZXBXTGRPbjBNOHFicGVMYTc4M2ozUE9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIBiDB+f
BNpKBVm3HsJN2YQg4/I205tgNqtWozmL8TLK8O14beDL1nWImgG0bNhQsiqvdE6p
7Gp3/DxXqfey/iDQZ08mRGXOIjgfw0wpqgFSPTPRvCIAE3bJcNSkVXwCF47HQiIn
PRKkaSA+dcAISZ5TYBrHKbvFtHis7ki+MWzw9p47mtVDmXyD0v9EL7hTII2N3Hd8
ghlF1OlZPILi6w4PHg7I8Hi18Obw9WkwrEs3Zs/1OFJ9PfRjh05WdJQdwYoPgP4F
QQL9MZwm94cWrLvxVz6e+j7Qq0WSWfBp4qys24uBvHOq2sv/KejOqS/tIwXG9vLk
VMJjGeMKdnWI+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:42 2025 by rpki-client