Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File:                     RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier:          1uKG0iLcWHxZIKE+akZSbgHLG+ya4NUfDzA4ya/4+W8=
Subject key identifier:   8D:51:AF:99:6B:B0:6C:E8:07:F4:2B:D9:21:5F:49:6D:8A:E4:82:4A
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer:       /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial:       0199FAD7C84BB18C7F90FC1E5A50A8F25F7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number:          04B7
Signing time:             Sun 19 Oct 2025 05:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:09 +0000
Files and hashes:         1: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: 9BK7eYKgyJoHYu2uYXDf2IHWNZ8PGZjviDpu9F1q/ms=)
                          2: XJeFszxemC7e9u-8mZLkEs6aHFs.roa (hash: OiP4xwhS3dePGm/ma2M64C+nfCdXfnndrH2qcjsO/X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:c8:4b:b1:8c:7f:90:fc:1e:5a:50:a8:f2:5f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
        Validity
            Not Before: Oct 19 05:01:09 2025 GMT
            Not After : Oct 20 05:01:09 2025 GMT
        Subject: CN=8d51af996bb06ce807f42bd9215f496d8ae4824a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:a2:a0:dc:34:73:f5:ab:ea:bc:41:4a:11:
                    fd:8f:7e:da:a0:80:d1:a1:d0:c1:38:5a:25:72:9e:
                    58:8a:15:b0:1b:81:c5:68:03:72:93:03:f3:16:4f:
                    fd:a9:98:f0:ae:93:27:f7:e6:7d:bd:b2:c0:da:5e:
                    39:29:57:ca:ac:00:b9:da:70:a2:02:eb:3b:56:20:
                    a1:57:22:27:6a:22:96:4a:aa:fc:23:e7:21:54:79:
                    60:dc:b3:47:a2:1f:6e:3a:2d:cb:ac:e2:ca:97:d0:
                    50:07:b1:99:17:78:41:2b:ee:42:35:1c:77:2c:43:
                    b8:cb:ff:33:aa:42:d0:3c:ce:2e:98:9e:e7:66:7d:
                    1f:74:68:bc:d8:b2:75:52:9b:c4:c0:0e:bc:53:78:
                    06:f3:7d:e1:be:94:60:1b:87:53:b6:87:21:95:85:
                    ef:69:86:7b:21:8b:7b:11:9b:1f:cd:7a:51:86:ad:
                    8d:fe:e1:2d:26:25:f4:3f:4e:ee:b4:9a:e2:25:56:
                    51:26:bd:0f:cc:9f:d8:73:6e:2c:ee:af:d5:2b:65:
                    e6:f6:c6:a4:94:06:a5:b5:9b:94:17:9b:e7:4f:18:
                    50:8f:c6:4c:e5:47:66:3a:26:6c:1b:fd:f5:28:51:
                    c7:f5:01:5e:06:68:95:7b:a4:29:83:e9:2a:1f:1a:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:AF:99:6B:B0:6C:E8:07:F4:2B:D9:21:5F:49:6D:8A:E4:82:4A
            X509v3 Authority Key Identifier:
                keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:6a:65:19:99:1e:37:c2:b3:68:2d:64:a6:af:9b:a3:6b:
         88:d3:ac:ab:1e:21:d5:a2:43:d2:01:00:12:28:e4:84:69:f5:
         96:cd:4d:3e:7f:4e:fe:8a:c7:8e:b1:62:98:26:00:5b:0d:5d:
         25:46:ea:25:54:8e:63:b2:3c:94:e8:1a:82:eb:30:a7:0b:2c:
         f7:2d:a1:16:76:b2:5f:d0:3b:76:06:68:13:ac:0c:1c:b8:a0:
         30:ec:b4:6a:99:6f:2c:18:25:1a:a6:9c:64:e8:38:37:6c:1d:
         96:3c:e3:e4:2d:0d:81:31:68:bb:6e:d4:f4:fa:2e:49:fe:60:
         52:1b:9e:16:4b:36:62:c1:07:5a:c8:1d:74:93:7f:f0:d8:f7:
         41:ef:c6:d2:98:d6:69:a4:30:13:22:4e:8d:fd:ce:4c:68:c2:
         b8:85:b4:84:e0:8d:1b:bf:cb:16:24:87:a8:0a:ea:b6:5a:8e:
         6f:23:c9:6d:ee:45:4a:36:78:7d:7f:13:08:dd:ce:90:9d:b2:
         14:d9:e4:2c:a7:fc:c5:83:df:3d:40:3e:05:ad:47:b4:27:75:
         af:bb:d5:a0:a0:e3:ca:d3:bc:2f:0f:8e:b2:41:5e:f7:41:33:
         b7:c3:42:6a:84:eb:a5:08:5e:2c:ba:60:5b:04:f2:57:1f:b0:
         fe:91:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:21 2025 by rpki-client