Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File:                     qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier:          GQXY2hrXwEdls4fnvHjUreA8yuuuK7DiGbjn86pjsyg=
Subject key identifier:   31:4E:32:F4:C8:0B:77:EE:44:36:D1:66:31:E6:40:EA:6C:D0:DE:25
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer:       /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial:       0199FB0F0860AB55C9D38A12CD8F2310EE73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number:          0A2B
Signing time:             Sun 19 Oct 2025 06:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:30 +0000
Files and hashes:         1: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (hash: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=)
                          2: fZx-mDB13JnuV_-VzM2j7qkuqi0.roa (hash: zv9S//eX11qAMytqBqLEiGaYvvDY8kAtaLQl7dqZVZU=)
                          3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: YEbqLGOmX/9Iu0SMk+TucI3lqDBnXsKU2BVntxvdMy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:08:60:ab:55:c9:d3:8a:12:cd:8f:23:10:ee:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
        Validity
            Not Before: Oct 19 06:01:30 2025 GMT
            Not After : Oct 20 06:01:30 2025 GMT
        Subject: CN=314e32f4c80b77ee4436d16631e640ea6cd0de25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:2f:32:8f:f8:6c:30:f9:6c:95:1d:03:5d:
                    f7:ec:73:ee:36:8e:ad:13:58:01:bd:94:48:30:3f:
                    89:04:d1:f3:9c:d7:bf:96:ea:e7:a6:8b:47:f0:e8:
                    09:75:18:52:d8:b2:77:af:f4:4f:c7:bb:b2:25:ad:
                    53:be:71:94:a1:ba:76:d1:07:1d:7a:77:63:8e:2f:
                    c5:ab:21:98:3e:70:4b:c1:b6:2a:9b:87:a7:68:ec:
                    d6:97:7f:fe:f2:5d:ab:32:d3:96:cf:e4:95:e5:30:
                    39:b8:d3:89:0c:b6:b9:a5:48:10:69:b6:1f:97:78:
                    fa:57:1c:8c:c1:cf:5b:77:dd:99:10:8c:c5:94:bc:
                    6a:5e:b0:1c:9c:a1:2e:f1:1d:4b:e0:10:c8:47:aa:
                    03:0e:f7:88:86:95:24:a0:6a:ae:11:68:44:d6:63:
                    2d:13:30:fd:4f:8b:b3:f4:ec:64:6a:96:2d:ac:a0:
                    fe:75:fc:b2:c6:34:5a:d1:95:98:cf:74:71:f8:90:
                    c5:d1:4b:b3:58:79:45:68:b5:3f:8e:bc:75:4c:29:
                    28:38:3a:bc:1e:67:72:73:b7:45:75:85:c7:c8:6b:
                    fb:fd:54:8f:2c:ad:6f:04:7b:2d:08:19:d7:33:8e:
                    c6:f4:b1:fd:8c:eb:9e:2d:2d:6c:1b:f6:b9:b1:27:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4E:32:F4:C8:0B:77:EE:44:36:D1:66:31:E6:40:EA:6C:D0:DE:25
            X509v3 Authority Key Identifier:
                keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7c:18:46:24:18:cd:9f:c3:a0:ac:12:c6:d3:3f:ea:8a:46:
         d1:02:6a:87:59:e6:6d:b5:af:9b:6b:ab:b8:d5:a8:9a:1d:52:
         6b:56:cb:fb:57:5d:0d:5c:23:05:2b:60:cc:63:79:f7:c6:8b:
         f5:41:c4:03:1b:e9:19:7c:66:e6:61:bc:48:c6:f7:82:6b:b2:
         3f:76:32:b1:2f:bb:9a:34:98:5c:17:30:b2:b8:12:9a:b5:fc:
         74:6a:c1:82:81:87:3a:c7:7e:e9:4a:6b:40:4c:89:af:3f:5e:
         4c:6c:e6:6b:e5:66:97:08:1b:24:d3:df:1a:f1:c1:7e:ad:19:
         f4:e5:0e:91:11:61:fc:e3:a2:ae:89:d4:40:af:34:9b:70:28:
         be:58:3d:87:57:2c:6d:5e:fd:a8:20:27:1d:53:be:6b:57:b0:
         64:e2:aa:dc:9f:c5:42:67:fa:93:66:c7:02:52:62:36:db:62:
         aa:41:6c:b3:cb:96:57:29:ea:7e:ee:0c:f0:a8:19:d6:bc:fa:
         38:97:ef:db:48:08:e3:72:3e:cc:5b:c8:39:73:9e:8c:16:60:
         68:e5:72:0f:44:3b:b8:76:b9:49:87:72:41:a4:87:2c:db:f5:
         ec:07:fb:79:1f:d0:af:e8:b7:69:7f:5d:51:97:c8:b8:9f:1a:
         5a:58:82:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dwhgq1XJ04oSzY8jEO5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy
YzA2ZjQwHhcNMjUxMDE5MDYwMTMwWhcNMjUxMDIwMDYwMTMwWjAzMTEwLwYDVQQD
EygzMTRlMzJmNGM4MGI3N2VlNDQzNmQxNjYzMWU2NDBlYTZjZDBkZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxwvMo/4bDD5bJUdA1337HPuNo6t
E1gBvZRIMD+JBNHznNe/lurnpotH8OgJdRhS2LJ3r/RPx7uyJa1TvnGUobp20Qcd
endjji/FqyGYPnBLwbYqm4enaOzWl3/+8l2rMtOWz+SV5TA5uNOJDLa5pUgQabYf
l3j6VxyMwc9bd92ZEIzFlLxqXrAcnKEu8R1L4BDIR6oDDveIhpUkoGquEWhE1mMt
EzD9T4uz9OxkapYtrKD+dfyyxjRa0ZWYz3Rx+JDF0UuzWHlFaLU/jrx1TCkoODq8
Hmdyc7dFdYXHyGv7/VSPLK1vBHstCBnXM47G9LH9jOueLS1sG/a5sScwSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFOMvTIC3fuRDbRZjHmQOps0N4lMB8GA1UdIwQY
MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt
ZDZhMzA1Y2JmNDZjLzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj
LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnwYRiQY
zZ/DoKwSxtM/6opG0QJqh1nmbbWvm2uruNWomh1Sa1bL+1ddDVwjBStgzGN598aL
9UHEAxvpGXxm5mG8SMb3gmuyP3YysS+7mjSYXBcwsrgSmrX8dGrBgoGHOsd+6Upr
QEyJrz9eTGzma+VmlwgbJNPfGvHBfq0Z9OUOkRFh/OOironUQK80m3Aovlg9h1cs
bV79qCAnHVO+a1ewZOKq3J/FQmf6k2bHAlJiNttiqkFss8uWVynqfu4M8KgZ1rz6
OJfv20gI43I+zFvIOXOejBZgaOVyD0Q7uHa5SYdyQaSHLNv17Af7eR/Qr+i3aX9d
UZfIuJ8aWliCOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:37 2025 by rpki-client