Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File:                     Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier:          fSsxbI0aI2tqpg+Rw/rOS3iw7YAdkqMi0gre2pRaEBk=
Subject key identifier:   33:18:B9:B4:6F:51:DA:55:3D:74:B0:10:27:15:E7:BD:95:1F:67:42
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer:       /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial:       0199FFC855BEC4A4EA4E70916D8FBD017220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number:          06A2
Signing time:             Mon 20 Oct 2025 04:02:22 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:22 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:22 +0000
Files and hashes:         1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: kQNokeSLuHMVoLBhFgJZ//6ssJkGBHGoSF2ZqStmRuM=)
                          2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:55:be:c4:a4:ea:4e:70:91:6d:8f:bd:01:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
        Validity
            Not Before: Oct 20 04:02:22 2025 GMT
            Not After : Oct 21 04:02:22 2025 GMT
        Subject: CN=3318b9b46f51da553d74b0102715e7bd951f6742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d9:6d:d2:61:5c:ed:ed:5c:0f:69:a4:bf:42:
                    1f:e8:16:3b:25:61:a8:40:61:d3:01:71:86:b9:ad:
                    0e:ed:ee:bb:b2:af:30:78:6f:6c:81:f6:56:bf:06:
                    c3:0e:76:86:5d:d8:f4:f3:82:42:57:e3:db:d4:7d:
                    66:9e:22:c3:76:56:9c:6a:6d:58:be:b9:66:b4:47:
                    ed:72:08:fb:bd:42:07:1b:aa:22:f5:a1:d9:2a:87:
                    22:fd:85:75:be:70:10:79:c8:cd:3e:59:b6:b8:ca:
                    9c:87:04:fe:07:42:cf:2f:c5:db:4c:af:c3:13:98:
                    f8:52:11:5d:c6:01:c2:f2:40:41:97:f2:b3:55:d4:
                    8f:62:03:fc:40:58:43:d6:43:90:86:a0:2a:da:4c:
                    54:d8:c0:bf:b0:d4:f1:95:23:c8:42:6a:c4:30:33:
                    6d:57:bf:e3:cd:f9:5d:c0:21:9e:cb:ec:05:7e:d1:
                    a2:c1:a6:be:14:0e:c9:74:f7:65:15:92:6f:d1:b8:
                    1e:34:e1:af:5a:64:3d:47:0f:2c:99:e3:da:4f:7a:
                    6b:c6:7c:98:0a:ec:9b:35:39:1d:c9:ae:72:20:63:
                    82:6b:4c:28:af:b6:00:b0:91:bf:e7:a1:bc:24:50:
                    28:7e:1c:6a:64:a6:20:93:35:a0:60:e4:7a:60:38:
                    69:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:18:B9:B4:6F:51:DA:55:3D:74:B0:10:27:15:E7:BD:95:1F:67:42
            X509v3 Authority Key Identifier:
                keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:5d:9b:bd:43:8c:05:e3:6e:d0:f4:5e:9c:3d:b2:19:a3:69:
         87:71:1a:1b:27:ca:40:2d:d1:51:e2:94:cb:c8:84:da:07:c0:
         ea:21:61:b8:7b:e3:6d:56:67:8c:69:66:5e:ef:e5:5c:3d:e3:
         0f:86:5f:09:be:0b:5f:fa:d2:40:6c:79:a2:9f:4c:a7:1f:43:
         97:b9:c3:43:aa:65:1b:64:fa:6a:1b:59:8b:2a:3d:7e:8b:57:
         da:fc:2a:ea:b1:3c:80:16:7f:87:cf:34:5c:54:1c:3d:37:df:
         dd:c5:5f:c1:8c:f1:bf:5e:92:54:c2:2d:93:30:65:92:4f:1c:
         46:64:a9:dc:ba:56:a8:57:18:77:fe:66:09:fa:28:1e:f8:da:
         85:78:08:18:f3:8c:86:2e:44:ee:69:e5:1f:de:c2:20:e8:16:
         9b:c3:ea:79:db:a1:5c:6d:61:87:3f:35:85:6d:38:22:c2:07:
         88:dc:ad:16:49:89:51:22:c8:ce:70:65:60:42:82:99:79:df:
         a0:92:89:92:69:dc:1f:1f:0f:c3:12:39:d0:7b:96:18:a1:72:
         03:bb:e5:a0:da:21:f5:d7:27:9c:9a:2c:b4:f8:65:22:7c:7d:
         e4:d5:e0:ba:21:a6:2c:23:e6:d3:22:ba:5f:e5:e0:be:0e:6c:
         42:f4:7b:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yFW+xKTqTnCRbY+9AXIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNmM3YWEzNTAyODI1YTY4YjM3NDViYjNkNjA3MjczMWZl
NTg3MmMwHhcNMjUxMDIwMDQwMjIyWhcNMjUxMDIxMDQwMjIyWjAzMTEwLwYDVQQD
EygzMzE4YjliNDZmNTFkYTU1M2Q3NGIwMTAyNzE1ZTdiZDk1MWY2NzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69lt0mFc7e1cD2mkv0If6BY7JWGo
QGHTAXGGua0O7e67sq8weG9sgfZWvwbDDnaGXdj084JCV+Pb1H1mniLDdlacam1Y
vrlmtEftcgj7vUIHG6oi9aHZKoci/YV1vnAQecjNPlm2uMqchwT+B0LPL8XbTK/D
E5j4UhFdxgHC8kBBl/KzVdSPYgP8QFhD1kOQhqAq2kxU2MC/sNTxlSPIQmrEMDNt
V7/jzfldwCGey+wFftGiwaa+FA7JdPdlFZJv0bgeNOGvWmQ9Rw8smePaT3prxnyY
CuybNTkdya5yIGOCa0wor7YAsJG/56G8JFAofhxqZKYgkzWgYOR6YDhpgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMYubRvUdpVPXSwECcV572VH2dCMB8GA1UdIwQY
MBaAFENseqNQKCWmizdFuz1gcnMf5YcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJ4Nm8xQW9KYWFMTjBXN1BXQnljeF9saHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80OGE2MjAtZDBiNy00YmI3LTg0OGQt
ZDZiZmNjYWEyMDM0LzEvUTJ4Nm8xQW9KYWFMTjBXN1BXQnljeF9saHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80OGE2MjAtZDBiNy00YmI3LTg0OGQtZDZiZmNjYWEyMDM0
LzEvUTJ4Nm8xQW9KYWFMTjBXN1BXQnljeF9saHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxF2bvUOM
BeNu0PRenD2yGaNph3EaGyfKQC3RUeKUy8iE2gfA6iFhuHvjbVZnjGlmXu/lXD3j
D4ZfCb4LX/rSQGx5op9Mpx9Dl7nDQ6plG2T6ahtZiyo9fotX2vwq6rE8gBZ/h880
XFQcPTff3cVfwYzxv16SVMItkzBlkk8cRmSp3LpWqFcYd/5mCfooHvjahXgIGPOM
hi5E7mnlH97CIOgWm8PqeduhXG1hhz81hW04IsIHiNytFkmJUSLIznBlYEKCmXnf
oJKJkmncHx8PwxI50HuWGKFyA7vloNoh9dcnnJostPhlInx95NXguiGmLCPm0yK6
X+Xgvg5sQvR7nQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:22 2025 by rpki-client