Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
File:                     q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft (raw, json)
Hash identifier:          b2Nmmnn7R5A6wQNVg/V92D4sfzlW3zh6NRfvGZQGkC4=
Subject key identifier:   7E:49:AA:CD:3A:7C:80:BE:4F:73:23:2C:D9:39:BB:AF:B0:5F:74:BC
Authority key identifier: AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C
Certificate issuer:       /CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
Certificate serial:       0199FB7CFD8FDCC8211CF7EA1156C3E44605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
Manifest number:          06A8
Signing time:             Sun 19 Oct 2025 08:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:36 +0000
Files and hashes:         1: WWXaaN1zwBirDLU3BmnsrZPd1-s.roa (hash: ZqdlSOebOyA4siBcQOkN6AJQaX0krOyaiW9rxlzSPYA=)
                          2: q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl (hash: b8WOB36MljAO7rxFK3Gl8C/awsHciPFKhKRgr9xeLNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:fd:8f:dc:c8:21:1c:f7:ea:11:56:c3:e4:46:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab59b462efc04583960a205f2f45659dc7fe3c6c
        Validity
            Not Before: Oct 19 08:01:36 2025 GMT
            Not After : Oct 20 08:01:36 2025 GMT
        Subject: CN=7e49aacd3a7c80be4f73232cd939bbafb05f74bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:57:a9:99:ba:b9:a9:da:b9:d3:18:69:09:
                    49:78:2c:3c:78:67:0e:0a:93:4e:0e:89:d8:78:fd:
                    cc:ae:c9:5b:bd:af:9b:0e:64:42:42:7e:4c:d4:c7:
                    85:c2:8e:58:35:bf:d7:1b:04:2c:d3:0a:0a:29:97:
                    54:65:84:2f:87:74:01:e5:a6:b8:17:d8:43:e9:87:
                    21:04:af:60:f3:50:7a:7d:8a:6f:cc:29:66:c1:82:
                    92:60:69:39:39:fc:9d:fa:64:2b:9b:e6:bc:b3:12:
                    e6:51:ad:b8:bf:48:27:cf:bd:b9:0a:ef:7f:17:07:
                    c6:5e:b0:05:f8:c9:cc:e6:d6:53:1c:9c:20:e3:36:
                    79:03:1a:93:76:09:a5:37:94:59:40:51:58:0c:fb:
                    51:f0:d0:48:3e:e4:cb:09:bb:95:97:26:d2:c8:19:
                    e5:d8:df:1b:1f:b1:25:b2:ca:42:06:c0:e0:01:bc:
                    1c:6d:40:96:fe:42:3e:09:1b:a2:b8:b9:cd:df:32:
                    9b:5e:ef:5b:9a:3e:72:cc:31:c9:b6:4c:0c:0d:47:
                    9e:c7:3b:67:c7:00:c0:0a:8c:28:d0:94:50:a8:ee:
                    98:da:11:e0:f7:bc:2d:66:e8:69:7e:c3:cf:1f:39:
                    78:d2:c9:8c:c1:13:9b:61:cb:9f:aa:d8:f5:82:19:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:49:AA:CD:3A:7C:80:BE:4F:73:23:2C:D9:39:BB:AF:B0:5F:74:BC
            X509v3 Authority Key Identifier:
                keyid:AB:59:B4:62:EF:C0:45:83:96:0A:20:5F:2F:45:65:9D:C7:FE:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/01335c-b345-4815-bb9e-fd5faed1c1d0/1/q1m0Yu_ARYOWCiBfL0Vlncf-PGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:80:68:6d:ce:64:39:b6:b4:09:06:2d:5e:9e:d5:03:53:d8:
         c2:19:65:cc:ef:7b:44:ba:41:7c:81:33:8b:a6:9e:b6:0f:a2:
         b8:3e:7b:78:a3:5d:1e:47:d5:b7:4b:c9:fb:05:30:f3:c1:c8:
         e5:77:8a:57:b1:dd:40:e5:12:5f:9a:1e:02:4b:f5:ff:4a:4a:
         6f:e8:a1:45:73:bf:91:5f:f7:c7:71:a0:ad:0f:6a:b1:32:b8:
         af:22:c3:5b:d6:e5:99:4f:60:59:ea:99:ab:dc:86:2c:b8:1c:
         1b:3e:e1:36:9a:d3:d1:9c:3f:2c:14:81:a3:be:0a:70:d2:a6:
         37:e0:b0:81:b4:51:78:00:08:e5:c5:96:f4:42:e7:de:3d:17:
         de:5a:85:00:df:8f:6e:9f:e0:53:5b:fa:c8:93:6d:ec:7b:1f:
         ae:88:a4:ff:00:77:59:d0:0a:b6:46:66:50:f0:8c:26:3d:a5:
         28:eb:1c:65:b2:f6:ca:21:d7:37:25:d6:78:64:5b:80:7d:e4:
         78:c2:d3:e7:d5:e3:b8:c7:0f:48:a1:97:42:5a:1b:25:98:03:
         bd:fe:ac:d9:15:04:ad:d3:ac:8b:3f:ee:ae:b5:7b:99:2d:8e:
         f9:62:85:16:02:40:c2:19:7b:eb:71:15:27:20:fd:2e:8e:ac:
         39:65:51:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fP2P3MghHPfqEVbD5EYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTliNDYyZWZjMDQ1ODM5NjBhMjA1ZjJmNDU2NTlkYzdm
ZTNjNmMwHhcNMjUxMDE5MDgwMTM2WhcNMjUxMDIwMDgwMTM2WjAzMTEwLwYDVQQD
Eyg3ZTQ5YWFjZDNhN2M4MGJlNGY3MzIzMmNkOTM5YmJhZmIwNWY3NGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+pXqZm6uanaudMYaQlJeCw8eGcO
CpNODonYeP3Mrslbva+bDmRCQn5M1MeFwo5YNb/XGwQs0woKKZdUZYQvh3QB5aa4
F9hD6YchBK9g81B6fYpvzClmwYKSYGk5Ofyd+mQrm+a8sxLmUa24v0gnz725Cu9/
FwfGXrAF+MnM5tZTHJwg4zZ5AxqTdgmlN5RZQFFYDPtR8NBIPuTLCbuVlybSyBnl
2N8bH7ElsspCBsDgAbwcbUCW/kI+CRuiuLnN3zKbXu9bmj5yzDHJtkwMDUeexztn
xwDACowo0JRQqO6Y2hHg97wtZuhpfsPPHzl40smMwRObYcufqtj1ghnH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5Jqs06fIC+T3MjLNk5u6+wX3S8MB8GA1UdIwQY
MBaAFKtZtGLvwEWDlgogXy9FZZ3H/jxsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFtMFl1X0FSWU9XQ2lCZkwwVmxuY2YtUEd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMTMzNWMtYjM0NS00ODE1LWJiOWUt
ZmQ1ZmFlZDFjMWQwLzEvcTFtMFl1X0FSWU9XQ2lCZkwwVmxuY2YtUEd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wMTMzNWMtYjM0NS00ODE1LWJiOWUtZmQ1ZmFlZDFjMWQw
LzEvcTFtMFl1X0FSWU9XQ2lCZkwwVmxuY2YtUEd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIBobc5k
Oba0CQYtXp7VA1PYwhllzO97RLpBfIEzi6aetg+iuD57eKNdHkfVt0vJ+wUw88HI
5XeKV7HdQOUSX5oeAkv1/0pKb+ihRXO/kV/3x3GgrQ9qsTK4ryLDW9blmU9gWeqZ
q9yGLLgcGz7hNprT0Zw/LBSBo74KcNKmN+CwgbRReAAI5cWW9ELn3j0X3lqFAN+P
bp/gU1v6yJNt7Hsfroik/wB3WdAKtkZmUPCMJj2lKOscZbL2yiHXNyXWeGRbgH3k
eMLT59XjuMcPSKGXQlobJZgDvf6s2RUErdOsiz/urrV7mS2O+WKFFgJAwhl763EV
JyD9Lo6sOWVRrg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:29 2025 by rpki-client