Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File:                     qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier:          +oBBqEfU35wy0ZqwbqnS0KhxUlWitwx+09XNeTsv6uM=
Subject key identifier:   CB:4D:ED:B3:D7:4A:85:DF:0D:B8:61:77:BC:CD:8A:91:19:CC:68:B9
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer:       /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial:       0199FDDA1C832EE4DE50EDE49B82CFA6CE88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number:          14ED
Signing time:             Sun 19 Oct 2025 19:02:33 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:33 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:33 +0000
Files and hashes:         1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
                          2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
                          3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: X5qRt/oOSAttvhcqwPyIQeeVgJzUb6xgs3HXni1oXBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:1c:83:2e:e4:de:50:ed:e4:9b:82:cf:a6:ce:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
        Validity
            Not Before: Oct 19 19:02:33 2025 GMT
            Not After : Oct 20 19:02:33 2025 GMT
        Subject: CN=cb4dedb3d74a85df0db86177bccd8a9119cc68b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:8c:5e:4d:e7:3e:17:59:da:2e:ee:07:52:
                    e4:e5:a5:9d:df:b4:d7:4d:3f:fe:ae:1c:e1:d2:90:
                    37:06:fc:61:57:b1:0b:77:a4:d8:03:34:1b:22:b2:
                    43:95:51:49:fa:f0:56:6a:0e:17:3a:7d:ec:a3:0b:
                    bc:fc:d1:dc:3b:e8:c9:5f:8e:f3:5d:b0:a3:1d:37:
                    0f:e6:8b:c3:b0:d7:72:93:3a:1e:7d:69:d3:88:9a:
                    24:87:29:77:55:16:1b:55:21:e8:19:26:1a:d9:64:
                    ae:78:b3:26:02:2d:93:55:a1:3d:1f:bc:6f:08:07:
                    38:99:da:c2:b2:7f:a6:64:89:bc:a2:68:0d:61:15:
                    d8:43:fc:14:ee:7f:ff:19:de:fb:60:77:71:59:72:
                    f6:36:bf:12:92:ea:20:86:ee:00:19:95:d1:ea:e7:
                    52:98:98:85:0e:06:4a:13:42:94:0f:39:0e:ae:29:
                    c1:b1:62:c8:bc:fb:9a:89:29:93:bf:cf:1b:68:1a:
                    eb:7e:04:53:e0:a4:7c:f1:af:f3:59:8f:b9:6c:09:
                    62:1f:b3:ef:be:f3:8d:1b:6f:25:8f:39:76:ff:99:
                    ee:c3:06:14:b7:2d:8b:54:46:7d:ae:3a:d8:5d:7d:
                    a1:f7:0c:d9:1d:b2:90:60:85:d9:27:86:a5:e8:97:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4D:ED:B3:D7:4A:85:DF:0D:B8:61:77:BC:CD:8A:91:19:CC:68:B9
            X509v3 Authority Key Identifier:
                keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8a:7d:eb:9a:49:99:48:2d:3a:85:e9:6c:de:7b:aa:8e:e1:
         34:a4:85:5f:c0:b0:80:dc:82:99:74:dc:ff:e1:c0:58:8a:e3:
         9b:a4:44:62:67:3f:f2:41:f6:45:c9:3a:98:f3:a1:38:5d:8f:
         bc:6c:d2:03:1a:89:b5:a1:d3:b5:8b:e6:7a:14:b5:d6:23:ee:
         d2:92:69:26:4f:b9:77:7b:bd:5f:56:9e:ec:39:38:8f:6b:c8:
         03:94:e1:ee:c1:8a:65:9e:84:95:6c:5e:fe:1f:fd:86:59:a8:
         f8:90:3a:4e:b8:c0:38:0b:f0:6c:62:92:4d:f4:87:a3:0b:ba:
         c2:5c:0a:c9:85:07:8d:59:32:c7:66:9c:c1:cd:86:01:be:a6:
         3c:df:26:d5:57:52:3d:98:c7:c1:72:e1:93:f3:0c:a8:67:42:
         16:d8:3e:ae:4c:dd:e9:29:3c:42:97:cf:fa:2c:db:cf:c1:51:
         10:22:55:2e:38:57:a8:ef:b7:ff:ba:17:d4:e5:e5:34:9a:e8:
         ea:7d:2d:5e:65:07:33:b0:8f:a4:91:16:38:2d:84:6a:f2:4e:
         fa:00:46:b4:ce:2a:4d:57:04:26:15:0a:5b:ae:4e:d2:3a:a5:
         bf:c5:b9:d2:c4:82:94:3e:49:a7:7b:3b:a9:1c:fe:68:07:3a:
         92:36:49:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:31:31 2025 by rpki-client