Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File:                     qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier:          ERUgQb0zkDk+KySl9Am5hlyeM7LCNQhcoatRQlPaw3Y=
Subject key identifier:   2E:73:70:DF:EB:26:0E:88:47:DD:29:3B:B9:D5:DD:7E:ED:D4:80:FD
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer:       /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial:       0199FC58B597F944BB54F39A76ABAEFEC845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number:          09B0
Signing time:             Sun 19 Oct 2025 12:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:35 +0000
Files and hashes:         1: ea2Y-dwaT445EGlgfXN8R70YRos.roa (hash: hFopTbVTP9tQkxA8ISdrfSlJKlSYxul+sHm5GKjmi5o=)
                          2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: WwnAikBBvUViUSMBIJrmNTnU7X6ukzFoN2S3mEyfo2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:b5:97:f9:44:bb:54:f3:9a:76:ab:ae:fe:c8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
        Validity
            Not Before: Oct 19 12:01:35 2025 GMT
            Not After : Oct 20 12:01:35 2025 GMT
        Subject: CN=2e7370dfeb260e8847dd293bb9d5dd7eedd480fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:50:a5:ae:cf:e7:9a:e3:d1:39:51:6b:eb:
                    71:f0:e1:52:d5:9d:6b:4d:35:ad:83:d4:a8:ce:40:
                    09:0f:e0:03:c6:23:8c:26:73:94:18:73:23:17:aa:
                    63:f5:b8:ee:a4:24:74:34:87:6d:09:34:b8:05:d6:
                    a3:85:e8:f0:bd:6e:05:f2:f1:d0:63:81:de:c1:13:
                    7d:5c:c5:53:9e:ec:77:71:bb:50:ed:ef:9a:2d:d4:
                    03:79:c8:7c:2d:72:03:d4:f0:9c:11:57:6f:09:51:
                    66:4a:6e:0f:e3:3d:85:5d:96:bc:03:67:af:50:86:
                    39:ad:64:63:82:3b:0b:ea:c0:c0:3f:7c:d5:63:d7:
                    5f:d9:40:d0:38:41:1d:1d:4b:ff:65:8b:de:57:75:
                    ad:82:1f:22:1e:66:35:22:74:13:2c:ac:2c:e8:d0:
                    44:ce:66:07:d2:7c:89:1e:a8:0d:10:b7:4e:6c:02:
                    ab:e0:dc:52:fc:33:b9:10:ce:f4:dd:36:a2:b2:c3:
                    ed:ff:c0:ad:ed:17:fd:43:db:d5:b4:60:0d:cb:e6:
                    88:e2:97:34:43:2d:9a:c7:ab:fe:01:21:d0:78:e9:
                    8d:5f:e4:77:cc:57:b2:17:09:f3:50:24:ac:9e:67:
                    b6:2c:66:5b:d7:51:15:a9:cf:ea:76:98:46:e1:70:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:70:DF:EB:26:0E:88:47:DD:29:3B:B9:D5:DD:7E:ED:D4:80:FD
            X509v3 Authority Key Identifier:
                keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:38:27:5f:b3:9f:98:85:0f:3e:3d:1e:b6:80:ce:d7:b5:20:
         29:33:23:88:46:ca:09:95:49:41:6b:04:86:c6:20:4d:f1:6d:
         80:9f:00:18:83:9f:cf:2f:d7:92:b3:51:30:db:3e:08:ff:39:
         53:5a:2d:1d:00:8a:a1:12:61:a9:ac:a0:43:19:48:c0:fc:e0:
         27:ef:41:7a:6c:8d:f0:f5:79:92:62:5c:15:c3:08:a4:8a:e1:
         e6:82:45:01:be:f6:0b:44:1b:ad:83:1f:66:95:e8:a3:18:4c:
         b1:ce:ba:f3:51:f7:3f:db:35:3d:aa:2a:b1:08:43:65:4d:c6:
         b6:78:5a:83:6a:c2:a3:89:2f:cc:66:60:5a:84:c3:0f:0b:d9:
         4f:c5:f5:63:25:cd:4e:55:c2:ad:29:a5:80:ce:05:26:c9:71:
         d6:6b:97:9a:10:93:56:25:53:cb:dc:24:0c:b4:10:bc:fc:e2:
         54:cb:c9:0a:04:6d:0a:5a:ff:28:cf:c6:f6:ad:28:f8:3d:86:
         54:8d:2e:83:8e:b5:0a:2f:44:7f:8c:b8:5c:c9:10:36:2e:a2:
         69:48:20:53:73:e6:99:9d:e3:3b:b4:ce:a2:ef:dc:f5:44:79:
         45:6f:c4:e0:7c:e3:81:b6:64:73:95:be:55:87:76:d0:78:13:
         93:ca:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:30 2025 by rpki-client