Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File:                     QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier:          oUOE/oa2X/fb3ri8RyEb2SO/TEL8v2d4wdDRF5AGijc=
Subject key identifier:   6A:E1:1F:24:CE:89:0A:5B:47:C2:68:2E:FE:3C:7D:08:00:2E:31:21
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer:       /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial:       0199FA6A258C355E6EBE4210DBD9056130FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number:          081B
Signing time:             Sun 19 Oct 2025 03:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:24 +0000
Files and hashes:         1: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: 4+UwgVGSKTafbhQMfL2SiujWt0PHgU2UPzHyFNMJcq4=)
                          2: sdiNlumQHk___AUE4LP5XJrnhvw.roa (hash: DMvJRwVnEi6Zfvc9NBYyxmS9pxF+tbXKQJ7+eqPkw/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:25:8c:35:5e:6e:be:42:10:db:d9:05:61:30:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
        Validity
            Not Before: Oct 19 03:01:24 2025 GMT
            Not After : Oct 20 03:01:24 2025 GMT
        Subject: CN=6ae11f24ce890a5b47c2682efe3c7d08002e3121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:78:82:3f:fe:c9:05:7d:8c:23:a8:f5:ef:
                    fe:37:25:52:54:e7:a3:34:ee:4d:88:a1:e3:cf:55:
                    30:78:b7:16:57:67:d7:90:a1:4b:3d:d7:54:0e:b6:
                    50:4a:f6:ab:65:a0:3a:fa:e5:6a:7e:47:c8:8a:1a:
                    39:5b:d9:7f:8e:03:58:d8:00:7e:c2:74:85:aa:d4:
                    c8:0f:3d:70:ec:d8:37:02:a9:df:74:0c:ec:42:7e:
                    15:8e:cc:f7:ab:41:07:15:8a:8c:5c:0c:a8:b1:f0:
                    eb:69:72:23:12:d7:f8:3b:9a:11:43:1d:1e:04:84:
                    67:8e:4f:3a:f1:92:d8:84:6c:bc:dd:2d:a8:a7:2b:
                    8e:8e:94:08:6c:21:6c:4b:29:67:4b:f1:b2:43:72:
                    79:3a:7a:e0:73:13:63:a7:ca:96:89:37:4e:65:df:
                    b6:bb:6e:48:17:a1:ce:3a:34:e0:09:11:6d:03:45:
                    ea:04:b5:c0:25:64:9e:68:1f:09:56:56:97:a9:ed:
                    b3:c2:cc:d3:1f:67:83:72:cc:b0:fb:d6:23:0c:04:
                    72:36:c3:7d:66:b3:9b:71:1f:53:ca:b0:ba:59:ab:
                    8f:20:91:87:80:2f:58:be:2b:d7:40:b3:c5:9a:31:
                    a0:2d:4d:e2:4e:50:64:ef:d5:4c:6d:31:3f:b3:d6:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E1:1F:24:CE:89:0A:5B:47:C2:68:2E:FE:3C:7D:08:00:2E:31:21
            X509v3 Authority Key Identifier:
                keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:b4:8f:7e:9c:eb:09:5b:64:33:da:e4:0c:11:e8:f4:5d:
         cc:65:a1:30:c1:f3:2e:fd:32:0e:f8:0f:15:87:d7:8c:9e:70:
         5d:93:bd:41:1b:48:29:a4:59:22:c8:ba:0f:be:36:25:cc:48:
         42:af:bb:e4:09:33:81:93:22:ed:c4:a2:a3:8c:8b:b3:23:a2:
         38:26:5e:4c:3a:5c:af:6d:23:20:2a:de:3a:34:db:db:7c:83:
         f2:fa:17:4f:67:b3:f0:db:40:be:b8:66:f4:79:33:08:5b:e1:
         43:0a:7d:75:27:bb:ad:12:b1:31:8f:a3:ee:6c:4d:8e:8c:56:
         86:cf:35:f5:5e:1c:18:8a:ab:0d:1c:17:e4:ca:04:a9:32:a5:
         80:a3:b4:3a:c8:6a:07:ca:b6:9b:70:06:06:e1:e6:9e:74:a1:
         7e:72:2f:fc:34:28:4a:02:d8:77:9f:e1:e6:30:c3:68:c6:49:
         08:44:f5:3a:b7:7b:ac:37:93:b1:be:4a:a5:86:0f:c7:ca:c9:
         44:6f:02:7b:c6:16:c3:f4:b3:45:fb:8e:95:19:35:e9:e9:4e:
         a3:7b:a9:d3:db:0f:81:c4:74:7a:fc:1c:d8:eb:3f:f5:04:55:
         f4:f1:42:70:7b:f9:7b:10:3b:70:c6:4a:75:e7:b0:bd:3b:f0:
         48:5a:9e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6aiWMNV5uvkIQ29kFYTD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjlhOTY5NTI3NzdmMTA3NDMzODMwM2VjYjY1MDI1YzRl
MmI4YjUwHhcNMjUxMDE5MDMwMTI0WhcNMjUxMDIwMDMwMTI0WjAzMTEwLwYDVQQD
Eyg2YWUxMWYyNGNlODkwYTViNDdjMjY4MmVmZTNjN2QwODAwMmUzMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshh4gj/+yQV9jCOo9e/+NyVSVOej
NO5NiKHjz1UweLcWV2fXkKFLPddUDrZQSvarZaA6+uVqfkfIiho5W9l/jgNY2AB+
wnSFqtTIDz1w7Ng3AqnfdAzsQn4Vjsz3q0EHFYqMXAyosfDraXIjEtf4O5oRQx0e
BIRnjk868ZLYhGy83S2opyuOjpQIbCFsSylnS/GyQ3J5OnrgcxNjp8qWiTdOZd+2
u25IF6HOOjTgCRFtA0XqBLXAJWSeaB8JVlaXqe2zwszTH2eDcsyw+9YjDARyNsN9
ZrObcR9TyrC6WauPIJGHgC9YvivXQLPFmjGgLU3iTlBk79VMbTE/s9Y6pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrhHyTOiQpbR8JoLv48fQgALjEhMB8GA1UdIwQY
MBaAFEL5qWlSd38QdDODA+y2UCXE4ri1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yZjdiYzUtYTAzNi00MjE5LWFkOGUt
NzdmYTI5MTI5OTRkLzEvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8yZjdiYzUtYTAzNi00MjE5LWFkOGUtNzdmYTI5MTI5OTRk
LzEvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcK0j36c
6wlbZDPa5AwR6PRdzGWhMMHzLv0yDvgPFYfXjJ5wXZO9QRtIKaRZIsi6D742JcxI
Qq+75AkzgZMi7cSio4yLsyOiOCZeTDpcr20jICreOjTb23yD8voXT2ez8NtAvrhm
9HkzCFvhQwp9dSe7rRKxMY+j7mxNjoxWhs819V4cGIqrDRwX5MoEqTKlgKO0Oshq
B8q2m3AGBuHmnnShfnIv/DQoSgLYd5/h5jDDaMZJCET1Ord7rDeTsb5KpYYPx8rJ
RG8Ce8YWw/SzRfuOlRk16elOo3up09sPgcR0evwc2Os/9QRV9PFCcHv5exA7cMZK
deewvTvwSFqeDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:14 2025 by rpki-client