Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
File:                     q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json)
Hash identifier:          /AGzwbPLJEuhDVuynSjui55Vb9D2jndG9l2Ps1ZlvzQ=
Subject key identifier:   6B:4C:F5:03:9E:24:DD:12:2B:FB:6B:18:63:2B:EB:85:FD:61:5B:14
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       0199FC8F6F1DF5725605DE733D855AA9FC37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
Manifest number:          13F0
Signing time:             Sun 19 Oct 2025 13:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:22 +0000
Files and hashes:         1: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (hash: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=)
                          2: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (hash: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=)
                          3: FDdC23f-QMX8x6wvwKf2MaftED4.roa (hash: h9m2qsiGkrW+4l59GNkStG6h59aEcnuwE/KLJqr7Cgk=)
                          4: FHjjaCL7QaSxR7Yf_uDdz3cQhuA.roa (hash: Brv6WLVF3QRBSayqPg/J2H5JWwF8VVYLp0UA1sg3bSA=)
                          5: GanbvvtqSZENbmIdtfbYun4fuOo.roa (hash: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=)
                          6: HeWtxOQwTN1uf0xfcq_bZw71XkA.roa (hash: Q3cAdwW00NmkMkDNixCTZhHEBzWnPkDYpvdoFVzzSP4=)
                          7: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (hash: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=)
                          8: MBaWylrBVCifHO75NhqX3hwA3gI.roa (hash: rBGbEwve3PVfVzEgeSB6FNde2V4Ej5oriQNU2JdSej4=)
                          9: TNZjVfkoPHNGWuPROUhTApW2tS4.roa (hash: HeS2ECV8xSlPFS6ZfzpvaJlw7gUvm2q+HDJoDgc0tag=)
                          10: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (hash: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=)
                          11: bJOubptyDCUoksZUBTEQqGVmM9c.roa (hash: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=)
                          12: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (hash: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=)
                          13: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (hash: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=)
                          14: ktsWW1aNW0Ka2r1y8DatRgdAjnQ.roa (hash: B9kQb2mez0Ho2ienkmxwkosyQ4vYDt/9bZEi638La00=)
                          15: pWYX2715Q-5BkbFDg0Sh9v9WvPs.roa (hash: TgnvC3W5sZgU6RXpmwyf5MNyrmOzs/Lefze2pwDj6yc=)
                          16: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (hash: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=)
                          17: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: L8PMpa2nEwkjRlO08CfLxKXX6jyIOynZU6E/oMO70Jk=)
                          18: tuLu-KxTyWECQsa7jsPHvbBC7-c.roa (hash: sICitbN0hdJLsCXmDSmpQhmRlzSQyxGdXNXHPCYmLv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:6f:1d:f5:72:56:05:de:73:3d:85:5a:a9:fc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Oct 19 13:01:22 2025 GMT
            Not After : Oct 20 13:01:22 2025 GMT
        Subject: CN=6b4cf5039e24dd122bfb6b18632beb85fd615b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:52:97:8e:96:16:b8:d1:7c:f5:5d:df:2a:
                    e1:97:14:4b:03:1f:e0:3d:0f:6c:7a:79:d3:6a:ee:
                    ec:88:06:49:3a:46:d1:c1:a7:37:ca:ea:77:51:ee:
                    03:c5:be:3f:21:c8:26:1a:96:dc:74:d8:f7:00:00:
                    f3:59:2e:cb:b5:d2:31:9f:9d:a3:7c:2e:91:ff:9d:
                    22:83:ee:3a:f6:4a:83:59:c6:33:b7:97:c5:b2:09:
                    4d:b0:2b:4f:85:3b:49:6e:21:fc:48:aa:60:4a:ae:
                    1f:ad:d8:16:01:0d:c5:4b:19:e4:39:12:77:c5:27:
                    5b:9a:3f:f5:9c:80:e8:60:4e:29:62:80:38:1a:ab:
                    a6:65:e7:83:d8:c3:ac:08:92:a0:8f:46:45:41:c1:
                    71:12:17:b8:d8:a5:7f:7b:8a:de:45:a7:b3:3e:57:
                    19:04:e3:b5:9e:14:94:06:32:04:21:36:7d:1c:1b:
                    22:64:8e:75:7b:7c:b5:6f:0c:6f:e4:a8:c9:06:8d:
                    8c:a4:f8:b0:c5:63:04:ec:3d:8b:b2:2c:33:f7:a4:
                    7d:18:81:a5:8f:47:a2:23:50:6b:ca:31:66:ec:4c:
                    e1:44:79:05:db:3b:47:f0:a9:fd:93:b7:57:72:53:
                    22:78:fc:9b:07:a0:9b:5c:d7:c5:4c:75:e4:15:09:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:F5:03:9E:24:DD:12:2B:FB:6B:18:63:2B:EB:85:FD:61:5B:14
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:14:81:d4:65:af:5e:64:ce:d6:7e:fa:b1:95:a5:f6:78:61:
         68:ff:94:b3:e8:85:b6:1a:45:7e:f2:20:e2:4f:0a:01:54:a9:
         f6:dd:10:03:72:b3:97:84:ae:cb:0d:90:5a:4d:b8:88:b0:8f:
         68:a5:ff:86:f1:dd:4b:ee:84:d0:d3:56:b2:0e:37:bd:42:75:
         1b:8c:d3:a0:10:8f:39:34:63:96:b5:17:d4:a3:f2:8c:7a:2d:
         79:11:bd:1d:7c:ba:f6:80:fe:e4:83:af:ec:a6:ef:19:f4:96:
         7f:41:7e:ec:d7:d5:4d:2d:e8:2a:d4:7b:7d:dc:d6:c5:1d:54:
         8d:3a:f0:9c:19:e6:f9:e5:16:31:49:6e:a5:43:4b:d0:24:b3:
         91:0f:80:20:74:30:cb:be:f8:ab:62:40:ef:93:fa:0b:70:78:
         8c:cb:32:44:67:6d:7c:13:dd:e4:c1:db:c9:f7:ab:13:65:ab:
         68:1a:34:e0:3f:c8:dd:6b:17:e6:e1:f5:18:45:1a:71:5f:a0:
         ae:4f:70:5f:b8:57:44:19:82:f7:c7:4c:d3:0b:f6:e2:2b:a1:
         f1:e3:91:60:b3:69:49:03:f2:8d:11:2f:bb:21:94:e3:23:af:
         36:6a:45:b0:05:27:a9:e9:ab:29:47:5f:e1:1e:0c:d3:bc:f6:
         12:ee:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:14 2025 by rpki-client