Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
File:                     pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft (raw, json)
Hash identifier:          6B90I9X0Q20jPxLDCXfdgK/nPwt7DkJX37hRLbqIwKk=
Subject key identifier:   35:47:C6:5E:BB:DF:89:58:4B:68:3E:3E:A8:85:86:6D:63:BE:8A:10
Authority key identifier: A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD
Certificate issuer:       /CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
Certificate serial:       0199FC58BDFCD024658DCA08DEDF8BE0F45D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
Manifest number:          0723
Signing time:             Sun 19 Oct 2025 12:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:38 +0000
Files and hashes:         1: hnNizGmD5_kLKz6dLya2VuA4UIw.roa (hash: jIIE53bnDtwqS2dFWJrfKRkElyY5vTQ/kFSnuPVB9e8=)
                          2: pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl (hash: Y9o61BQ6/wTfPotICZp0AxE7DwyFcRe8qZdC7QWg9ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:bd:fc:d0:24:65:8d:ca:08:de:df:8b:e0:f4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
        Validity
            Not Before: Oct 19 12:01:38 2025 GMT
            Not After : Oct 20 12:01:38 2025 GMT
        Subject: CN=3547c65ebbdf89584b683e3ea885866d63be8a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:d2:8a:a5:8a:94:50:23:71:fe:3a:41:ad:
                    a7:8c:6c:16:c5:22:df:e1:0d:94:5e:fa:ba:d2:1f:
                    39:5b:3e:67:2b:0e:31:12:44:b7:44:9a:00:4f:ac:
                    c6:07:08:1c:ea:2d:54:2e:4f:0c:83:36:64:6b:27:
                    72:b5:92:be:de:44:e5:7c:e3:73:e2:74:e0:9b:78:
                    7a:0d:3f:43:e4:cc:c9:0f:1b:54:75:ca:e2:ea:8f:
                    86:19:86:4c:41:4c:ad:cd:21:00:e3:e3:7e:56:0d:
                    f0:76:17:b3:8e:ef:16:c5:0b:da:e8:f0:04:03:11:
                    5d:a9:7b:03:d5:79:a9:89:de:3c:f0:ce:84:ef:82:
                    09:0d:2a:6a:ef:f3:3a:ef:ae:d2:b3:31:cd:79:f3:
                    d9:4f:4a:72:6f:5f:db:21:f7:ed:bc:50:44:16:55:
                    e2:b5:4a:cb:a6:1f:75:5c:ec:31:e0:28:04:61:ec:
                    ef:ab:49:3f:e9:7b:c7:79:d7:83:59:d6:ad:c2:c4:
                    3f:6a:64:b8:5e:96:77:bd:e9:1c:24:dd:c0:06:2a:
                    1f:8c:76:73:97:a5:7a:90:2b:6a:84:5c:a6:fa:96:
                    6e:80:da:7a:34:7e:75:33:aa:b0:e3:fc:c9:e6:60:
                    c3:94:bd:a0:18:6d:51:4d:04:4b:ad:eb:9d:bc:84:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:47:C6:5E:BB:DF:89:58:4B:68:3E:3E:A8:85:86:6D:63:BE:8A:10
            X509v3 Authority Key Identifier:
                keyid:A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d3:d7:91:1a:71:52:74:cb:ab:cb:00:4a:a0:cc:d0:b6:26:
         fb:f9:4e:ef:88:74:92:26:ff:f8:a0:4e:6a:93:1b:53:7b:b8:
         b1:d6:73:f8:eb:7c:fb:9e:dd:74:4a:79:a8:e1:aa:f2:da:ce:
         17:31:d6:33:ea:95:6c:8f:50:0e:d4:2b:76:d5:bf:bc:2e:b5:
         c8:e5:ad:3c:0e:99:55:36:19:d3:79:e3:74:9e:b0:5b:95:2b:
         16:e5:1a:25:1b:d3:94:22:c4:19:92:f4:4f:cc:3e:ef:ed:c0:
         8f:9b:21:44:ff:44:80:9e:5b:ae:59:63:14:72:73:ea:5a:12:
         d5:1e:4d:97:28:65:7d:11:d4:24:94:df:3a:d2:19:cf:b9:84:
         59:3b:25:c4:f6:6d:c5:3f:2d:a8:32:e2:d4:58:26:f5:f6:c6:
         76:13:23:c8:eb:0b:6f:7e:dd:c5:15:22:e5:2c:f8:c4:a0:6d:
         63:a9:55:26:6b:f4:ed:5a:69:c5:ba:33:81:c4:69:99:c8:ad:
         69:3d:ff:68:f1:67:78:09:9b:d6:7c:02:2a:d7:71:cd:24:56:
         ec:1a:52:1c:eb:62:3b:9f:f5:8e:01:9e:66:e3:ac:ed:93:82:
         db:ef:63:f9:a3:42:19:a9:ab:de:8f:fe:72:9f:47:6b:19:d9:
         63:80:67:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WL380CRljcoI3t+L4PRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTg4YjA4ODdjMzJkZTU5NjZmODFmZjkxNWQ2YjVmZjMx
NTMyZGQwHhcNMjUxMDE5MTIwMTM4WhcNMjUxMDIwMTIwMTM4WjAzMTEwLwYDVQQD
EygzNTQ3YzY1ZWJiZGY4OTU4NGI2ODNlM2VhODg1ODY2ZDYzYmU4YTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRDSiqWKlFAjcf46Qa2njGwWxSLf
4Q2UXvq60h85Wz5nKw4xEkS3RJoAT6zGBwgc6i1ULk8MgzZkaydytZK+3kTlfONz
4nTgm3h6DT9D5MzJDxtUdcri6o+GGYZMQUytzSEA4+N+Vg3wdhezju8WxQva6PAE
AxFdqXsD1Xmpid488M6E74IJDSpq7/M6767SszHNefPZT0pyb1/bIfftvFBEFlXi
tUrLph91XOwx4CgEYezvq0k/6XvHedeDWdatwsQ/amS4XpZ3vekcJN3ABiofjHZz
l6V6kCtqhFym+pZugNp6NH51M6qw4/zJ5mDDlL2gGG1RTQRLreudvIQCgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVHxl6734lYS2g+PqiFhm1jvooQMB8GA1UdIwQY
MBaAFKaoiwiHwy3llm+B/5Fda1/zFTLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85OGM2MDktMDdmYS00ZTJiLWI0NzYt
NmEyOWJjOWY4YTc4LzEvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85OGM2MDktMDdmYS00ZTJiLWI0NzYtNmEyOWJjOWY4YTc4
LzEvcHFpTENJZkRMZVdXYjRIX2tWMXJYX01WTXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdPXkRpx
UnTLq8sASqDM0LYm+/lO74h0kib/+KBOapMbU3u4sdZz+Ot8+57ddEp5qOGq8trO
FzHWM+qVbI9QDtQrdtW/vC61yOWtPA6ZVTYZ03njdJ6wW5UrFuUaJRvTlCLEGZL0
T8w+7+3Aj5shRP9EgJ5brlljFHJz6loS1R5NlyhlfRHUJJTfOtIZz7mEWTslxPZt
xT8tqDLi1Fgm9fbGdhMjyOsLb37dxRUi5Sz4xKBtY6lVJmv07VppxbozgcRpmcit
aT3/aPFneAmb1nwCKtdxzSRW7BpSHOtiO5/1jgGeZuOs7ZOC2+9j+aNCGamr3o/+
cp9HaxnZY4BnRA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:17 2025 by rpki-client