Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File:                     RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier:          kGWk3VPD8ESkOjQai7QVXN9fyjFfChHzDG/kuKhz+XU=
Subject key identifier:   74:D1:0A:28:DB:AD:D9:AB:43:D5:FC:72:91:F6:DE:92:5D:A5:3F:ED
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer:       /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial:       0199FC219AC9548859817F36B463E80ED6CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number:          06F9
Signing time:             Sun 19 Oct 2025 11:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:24 +0000
Files and hashes:         1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: M++ynZYZAzHewRPpHXFZmdC9ABlC+a2oLuiEhwMUZzI=)
                          2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:9a:c9:54:88:59:81:7f:36:b4:63:e8:0e:d6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
        Validity
            Not Before: Oct 19 11:01:24 2025 GMT
            Not After : Oct 20 11:01:24 2025 GMT
        Subject: CN=74d10a28dbadd9ab43d5fc7291f6de925da53fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:e5:70:4b:dc:af:66:b5:1b:03:16:cd:d9:
                    e6:9c:e5:4a:c2:6d:44:14:01:db:ee:ed:3d:30:4d:
                    1f:10:7e:18:37:81:b1:76:b6:a1:26:2a:6c:23:62:
                    4d:b5:3b:f3:46:a8:ab:db:eb:a8:3f:8a:25:ab:06:
                    a2:6f:25:a5:f5:ea:86:ff:07:16:53:6f:d9:41:11:
                    65:f7:6f:b8:e1:b8:82:ab:b4:a4:2d:d2:b3:b1:9d:
                    17:10:43:2c:4b:14:0f:07:64:5b:ed:a4:b1:24:7e:
                    83:3d:9f:bb:ee:74:19:25:c4:17:59:b9:e0:2a:1c:
                    1f:27:6e:2a:27:ff:d7:04:ac:c8:83:c2:8d:e4:19:
                    ca:de:7a:a9:79:06:a2:2f:fe:f2:ab:ee:8d:30:d4:
                    27:e7:42:5d:65:a9:fe:35:dd:00:0f:04:e3:af:17:
                    82:f8:81:a1:63:3b:b6:63:87:f1:3d:4a:83:8a:e8:
                    89:9d:0b:06:25:cd:66:15:f9:93:a6:26:8a:a9:13:
                    8f:47:60:df:9c:53:24:92:98:0b:c0:ec:b6:38:f2:
                    a7:11:5d:89:73:52:94:8f:dd:13:00:d9:41:97:b3:
                    5c:82:d4:19:6b:0f:a7:e5:ee:da:f6:9b:7e:56:0a:
                    21:e3:68:4b:4f:b4:94:70:ee:96:8d:c4:a3:94:48:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:0A:28:DB:AD:D9:AB:43:D5:FC:72:91:F6:DE:92:5D:A5:3F:ED
            X509v3 Authority Key Identifier:
                keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fc:cc:51:ff:da:21:86:b1:c2:36:af:8d:c9:bc:f9:d0:17:
         e7:2f:a4:a4:6b:31:89:86:f6:21:ec:c0:9b:7f:84:ad:14:46:
         15:fd:3f:ca:21:61:0c:46:5b:b1:d9:36:e3:3d:8a:76:c4:40:
         29:91:90:9a:00:8e:c4:5f:53:d3:89:ac:56:f0:79:90:53:48:
         c9:a3:3c:55:36:42:72:05:06:8c:3a:5a:9e:63:36:58:00:23:
         7d:8d:c2:7d:fd:e2:f3:d4:4b:c6:7f:3c:fd:d1:1b:34:fa:7c:
         de:c5:42:f4:56:f2:ea:8b:55:2d:39:c0:12:13:42:8c:b1:3c:
         81:2f:1b:8b:08:7c:c4:76:6b:d4:2f:e8:29:c6:ba:27:fa:c3:
         c2:65:eb:39:65:96:36:92:0e:ca:f5:b2:2e:94:2d:1d:2a:19:
         80:74:1a:8e:16:3a:2b:a4:93:5a:7c:34:17:a5:d0:0a:4c:2b:
         16:d2:97:8f:6d:b5:ad:86:73:c3:64:f8:7b:44:80:c1:8e:16:
         52:1e:ec:61:89:ad:00:4f:de:85:43:94:86:98:32:a7:34:77:
         4c:d9:bf:2f:bb:c9:03:8c:23:a4:7d:14:ee:22:5d:98:07:4b:
         e4:08:68:d1:f8:05:eb:44:b3:35:c9:b2:2d:03:a6:65:b5:45:
         89:b4:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:29 2025 by rpki-client