Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File:                     qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier:          NKikEal+zib/9GiMIO5/JWE875aFR6VsC0qGQxksC84=
Subject key identifier:   AE:72:79:37:D6:0F:14:71:F7:6E:60:D9:6D:0F:85:C0:68:79:22:F5
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer:       /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial:       019A00356BE060A010C242BA8BEEF3F84D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number:          0B66
Signing time:             Mon 20 Oct 2025 06:01:32 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:32 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:32 +0000
Files and hashes:         1: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: iD33gI4cjM0PgmR08SqGSVrXpROCNv/4Rfoq/0AD5hg=)
                          2: svg34J6rFMVB3i_8SEjkmyJCwjg.roa (hash: sxr7df0i+WFpR1Zcb5aW78WjZKAtxDkC7tuYAw5Z5pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:6b:e0:60:a0:10:c2:42:ba:8b:ee:f3:f8:4d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
        Validity
            Not Before: Oct 20 06:01:32 2025 GMT
            Not After : Oct 21 06:01:32 2025 GMT
        Subject: CN=ae727937d60f1471f76e60d96d0f85c0687922f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:a4:c6:23:18:31:2b:da:98:91:51:69:7b:
                    3d:8e:89:e9:4f:31:d0:54:78:5d:b0:5a:69:8a:19:
                    99:c3:4d:55:5e:df:79:f8:58:2d:d3:92:2e:b9:a1:
                    f7:35:ec:6d:28:1c:0d:9a:8d:ed:6e:61:81:64:bf:
                    9c:f6:1c:d7:2d:c1:90:c8:b2:57:2d:f4:59:8b:2e:
                    3a:9a:0d:ac:09:60:e4:71:9b:9f:e0:39:25:4f:41:
                    54:8e:18:60:4a:a4:65:2d:f9:3b:d8:5e:0b:0f:de:
                    21:9a:2c:af:c9:b3:bf:d0:9c:4c:ce:34:1f:31:9e:
                    3e:32:0e:38:98:d4:19:5e:10:5b:a1:4f:f3:93:fc:
                    c8:2d:c8:bd:f1:24:e2:49:c7:64:a3:89:7b:2b:21:
                    23:ba:d8:04:94:38:b4:79:16:2e:bc:2f:ec:fd:7a:
                    ce:3b:0e:fd:0c:ed:2c:52:d0:9a:39:4d:5d:0e:54:
                    f7:a9:8b:ca:d4:76:d9:62:44:37:16:5b:59:de:c4:
                    ea:cd:25:94:17:b5:5c:34:a7:75:bc:b0:55:ce:f9:
                    aa:e0:93:bc:da:c5:91:44:e8:a7:d5:8a:3d:2b:50:
                    f5:51:65:52:f8:87:fe:71:82:b9:5c:b1:43:41:54:
                    33:84:1a:c9:c1:63:4e:c9:85:62:0b:2f:7e:c4:27:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:72:79:37:D6:0F:14:71:F7:6E:60:D9:6D:0F:85:C0:68:79:22:F5
            X509v3 Authority Key Identifier:
                keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e7:08:b5:69:6c:09:90:e0:9a:03:bb:2f:ca:32:e4:b2:aa:
         36:8d:2e:f2:b5:06:1a:e2:6b:7f:d3:11:8a:2a:d7:cc:be:65:
         1e:67:0f:46:83:ce:59:ad:d3:9d:e4:dd:6f:91:cd:eb:06:76:
         ea:d0:ea:f9:a7:fd:69:3c:6b:8b:72:b6:c9:cd:30:25:09:e2:
         86:ca:38:63:52:27:f2:b2:c7:e4:a4:83:b4:cb:28:cf:30:f7:
         07:59:dd:be:e6:ec:ad:fa:3f:0a:f6:54:29:d2:65:8e:df:08:
         0b:86:d2:f6:4f:25:26:50:06:c0:74:f3:c1:64:e2:90:be:26:
         de:ca:ae:39:fa:bd:bb:a8:93:02:1c:64:f7:da:a7:60:25:bd:
         c5:e9:67:1d:7d:c1:8a:42:25:72:59:bc:76:60:9a:28:5b:14:
         98:5b:33:a0:bc:1d:1f:2f:11:50:bf:58:d1:fc:63:1b:ec:28:
         62:06:2b:1d:6e:88:ea:4e:f8:54:97:d0:91:d4:e8:95:30:0a:
         69:f4:12:bc:57:0b:ee:da:a6:e4:68:d2:ca:96:5a:f4:aa:59:
         c1:7e:c9:f9:3f:4c:a7:a9:4f:ec:59:be:cc:4b:c2:23:04:aa:
         71:42:7e:37:00:b8:d1:3b:cc:23:a4:f0:39:74:94:7c:54:35:
         34:79:7c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:57:58 2025 by rpki-client