Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          Wd7Yl90IzzwLOpwMjwFKirU/rRDoenrs6qvMOB1Kh1I=
Subject key identifier:   97:0A:5D:82:A6:11:AC:9D:EC:0D:3A:B3:C7:78:31:B1:E9:DC:1D:50
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       0199FD6AD2ABFC3A8310DDDDAF646679EA12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          0D9E
Signing time:             Sun 19 Oct 2025 17:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:00 +0000
Files and hashes:         1: 3vZog35fA7A8208htG6MPJHCfRQ.roa (hash: KjUP3VOXf2M5RM2RNCpzmW1mXhGa52pGMp/lPhjp9fc=)
                          2: BfHqfkHY1q4ldygRkcfv7XdzqLs.roa (hash: YbMXX/fz76OV1tIhHwhH/SEdCy/PTJDjaV1pgkgaZeE=)
                          3: CmIDNfzs3bSVgY-dfSu_0KvUwvU.roa (hash: zeJTsFwERYYSCRF2I3KzeFe/yJYCV+YH9obrNhlqeUk=)
                          4: XaQFQicfhG4nS73QjVCHMUwAPG8.roa (hash: vEWEx+WC0m8X0tM9GZ7AzmWSqkdHKT5bYqE12jvQZ1Y=)
                          5: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: DHWt1dpl363EQViMHzLzql1gmKVhfmrzxAMPHJ0pJXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:d2:ab:fc:3a:83:10:dd:dd:af:64:66:79:ea:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Oct 19 17:01:00 2025 GMT
            Not After : Oct 20 17:01:00 2025 GMT
        Subject: CN=970a5d82a611ac9dec0d3ab3c77831b1e9dc1d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:16:5b:65:31:d6:48:c4:04:e7:b7:a2:1f:
                    4e:16:df:bd:08:81:e2:98:37:0c:f3:cc:a7:94:1a:
                    d4:e1:af:15:25:03:99:0e:51:52:7d:e3:6d:9b:cc:
                    9f:cc:be:12:4a:7f:92:49:4f:02:ec:e4:1b:56:72:
                    6d:27:f0:10:41:4b:87:18:0d:52:ec:6b:16:bc:5a:
                    b6:be:1f:24:b0:2a:a9:eb:d5:20:62:0c:fa:dc:a5:
                    01:3d:ad:6b:0d:2b:c2:a1:b9:64:2a:45:5c:c7:ce:
                    18:e8:d7:07:63:66:da:d3:34:40:4a:4d:7f:6a:b7:
                    95:44:a5:f6:50:38:6f:cf:59:bd:a5:ba:51:05:fe:
                    d6:07:99:bf:1f:e7:41:a5:e0:fe:a4:1c:e7:6a:86:
                    20:49:fb:d1:f4:ca:ce:56:ef:b9:e9:18:a3:49:d5:
                    eb:5d:70:1d:3e:83:dd:cb:c5:10:cd:6d:55:d2:99:
                    48:93:92:8a:99:c6:c8:46:c8:18:0a:23:b1:53:8f:
                    75:d9:43:3e:35:b0:c2:6d:b0:1a:97:65:ef:46:e1:
                    8f:df:94:89:e0:32:7b:64:ff:da:62:a9:65:66:86:
                    c2:a7:fa:2b:01:3a:ed:3f:f8:e4:b6:2c:9a:9d:0f:
                    42:07:df:47:43:93:a7:a6:5b:de:27:c3:4a:7f:c5:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0A:5D:82:A6:11:AC:9D:EC:0D:3A:B3:C7:78:31:B1:E9:DC:1D:50
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:90:29:50:d1:35:4c:a8:ab:47:bd:29:e2:06:db:f5:11:
         39:62:d8:ca:df:15:54:6c:4e:89:b8:5a:29:86:c0:b4:80:76:
         11:ed:59:2a:37:54:5e:56:5e:34:8c:cd:39:c5:37:71:cb:a9:
         6f:1f:52:fe:ba:48:da:7f:db:b5:da:c4:59:a7:74:ad:2d:30:
         05:01:04:e3:1f:5e:89:d0:c2:87:03:ca:72:12:54:e1:59:7c:
         6a:d6:28:54:2c:6c:bc:e3:28:34:fc:5b:b3:80:2e:e0:a4:2b:
         6e:33:cf:9a:b4:9f:b1:df:20:20:1e:af:b8:d9:75:92:e5:76:
         29:8b:c5:00:9f:75:96:f5:97:b0:9c:a9:c4:18:72:c0:74:be:
         b9:47:8b:69:d1:fe:f9:26:57:61:20:d4:22:a3:6f:8a:a2:eb:
         6c:78:49:95:bb:b0:14:14:70:22:fe:77:df:99:4b:be:a7:69:
         c3:ba:74:0e:93:16:70:20:60:05:62:7c:bf:ce:53:a1:fe:9d:
         16:a6:68:8b:6b:5d:47:6c:20:76:2e:2a:ae:fe:f2:54:6c:a6:
         11:c1:f6:9e:ba:4a:16:ab:e8:f3:a6:99:7f:52:fb:67:89:4f:
         0c:a7:47:59:63:e8:0d:35:f9:3a:1b:99:fb:ca:0f:ac:40:c9:
         6d:cb:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:41 2025 by rpki-client