Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File:                     r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier:          rlumOyq2aFkkD3mdbNquFLUHZhGHVp/5gKfGDxWqenM=
Subject key identifier:   87:B3:AC:34:75:69:E8:80:A3:05:1A:C1:9D:4B:99:79:4C:BE:05:27
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer:       /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial:       0199FAA0D90E7633488172E191BD5D5DA8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number:          13D6
Signing time:             Sun 19 Oct 2025 04:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:09 +0000
Files and hashes:         1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
                          2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
                          3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: WiLtJg44qwxfRnNYmKVA1kJaMblZvVRN8D+QvZWbl/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:d9:0e:76:33:48:81:72:e1:91:bd:5d:5d:a8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
        Validity
            Not Before: Oct 19 04:01:09 2025 GMT
            Not After : Oct 20 04:01:09 2025 GMT
        Subject: CN=87b3ac347569e880a3051ac19d4b99794cbe0527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:78:9e:67:c6:6f:e4:02:54:0c:16:2c:4c:
                    31:b4:dd:46:06:cd:72:ef:d2:4d:aa:d2:63:98:e6:
                    64:2a:e2:c1:64:94:57:9a:3a:03:86:a8:5c:b0:72:
                    60:53:3d:c7:8a:7c:71:24:83:56:e3:90:8e:70:a6:
                    bb:d3:54:62:f8:c4:74:b4:86:94:f9:77:b4:8f:ba:
                    9e:ce:85:86:6a:88:13:e1:3a:3a:5d:da:3e:5d:cb:
                    11:c3:18:e6:5c:fb:2f:09:68:ae:23:0e:31:00:aa:
                    9a:bf:c1:04:bd:09:93:36:3d:75:d9:e8:b7:58:eb:
                    d2:b9:d3:11:79:4c:6c:9b:b2:ab:c0:ef:b3:78:44:
                    b6:e3:f3:22:53:63:49:d2:c2:7d:a6:99:8a:20:22:
                    9c:24:ae:fc:3e:43:c4:7f:12:27:14:c7:43:3e:b9:
                    ce:e3:de:1d:e5:c6:6a:6b:02:8d:19:a5:a2:02:b3:
                    21:44:6f:a9:5e:ba:e2:f3:40:7a:59:9b:67:60:95:
                    3b:05:aa:d4:55:6d:bd:88:59:cd:0f:3a:23:33:27:
                    80:d0:fe:16:de:53:a5:56:74:06:87:73:e7:cf:97:
                    a6:12:61:a3:84:a4:e8:48:1b:d2:53:ea:c0:67:c8:
                    69:5a:20:a8:47:5c:ba:53:dd:6a:67:12:17:20:ca:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B3:AC:34:75:69:E8:80:A3:05:1A:C1:9D:4B:99:79:4C:BE:05:27
            X509v3 Authority Key Identifier:
                keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:89:8f:4e:34:dd:c3:67:ac:2a:de:eb:8c:33:aa:ed:65:ea:
         cb:91:9b:94:af:0e:09:7d:7c:eb:4c:32:9f:d3:27:f7:2d:59:
         af:64:a4:06:f4:7f:85:12:e3:45:a0:00:a1:26:37:66:39:99:
         b9:82:c5:6b:e2:40:3b:28:ad:fe:e4:2a:8a:cc:01:a5:a3:7d:
         21:1f:6e:c0:6a:28:b4:58:9e:0c:2a:38:26:d7:81:e5:b4:3c:
         3d:69:e0:d9:0c:51:e5:15:c5:61:72:2f:08:03:96:96:ee:ad:
         53:88:c9:f8:2d:3c:fb:e6:6f:fc:c4:5a:f0:83:73:17:d4:85:
         1e:c3:ec:3d:53:e3:b3:d0:e3:f2:e5:92:06:af:b3:c0:27:92:
         a0:91:5d:96:f2:f8:de:6e:81:8d:34:e0:ea:af:0e:8b:28:ec:
         c8:ba:17:f2:78:3d:ee:3a:ad:dd:a0:6c:bd:03:1e:c0:42:a6:
         bf:31:f8:23:44:39:5f:d5:ae:6e:ac:07:1f:c5:94:93:5c:5c:
         e7:d4:a8:ec:99:05:82:a5:b6:ab:11:f0:03:8d:ca:3f:47:99:
         d9:3e:fa:ad:d5:46:c7:65:ab:f3:e5:6f:8a:bd:4f:79:f4:54:
         d9:8d:f7:28:2a:01:f4:29:97:e1:84:16:d3:7b:5c:f4:ca:9b:
         2d:c6:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:35 2025 by rpki-client