Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File:                     QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier:          BapZTCa78w5S3p0YTXoQ0PLE5XejeUw8m17kPscmuks=
Subject key identifier:   61:82:7F:79:49:B6:56:8D:AA:1B:E5:0A:E4:23:24:EA:95:5B:E0:36
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer:       /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial:       0199FB45A0659C23682366972A02097142ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number:          1440
Signing time:             Sun 19 Oct 2025 07:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:08 +0000
Files and hashes:         1: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=)
                          2: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=)
                          3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: MNbm6bOOZ59qLGL3ot5eB6eVndfyJUYshKzwdehjea8=)
                          4: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=)
                          5: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=)
                          6: XO9hryEjXx5kgKnr74JXjzCM8w0.roa (hash: w6sYmDLnWAclOfvxxkvq1DeKbEW8wcfpI5kQA52E9OY=)
                          7: ZCVtB8725E04xja-A_7tFv0UGbA.roa (hash: G23IAdwlc1DMlMrfpBBsuDs0R5mxQSfAIypWEkTSgDc=)
                          8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=)
                          9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=)
                          10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=)
                          11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=)
                          12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:a0:65:9c:23:68:23:66:97:2a:02:09:71:42:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
        Validity
            Not Before: Oct 19 07:01:08 2025 GMT
            Not After : Oct 20 07:01:08 2025 GMT
        Subject: CN=61827f7949b6568daa1be50ae42324ea955be036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:be:73:0a:c5:82:41:86:bf:1b:ea:b4:d8:e7:
                    a2:31:4e:a0:0d:29:7d:28:b9:87:1e:e7:bc:70:6c:
                    8e:6f:80:3c:31:cf:4e:6a:f5:fe:83:d3:ff:24:1b:
                    12:d7:d4:3e:fa:09:1f:01:17:f8:c9:c0:22:bf:09:
                    75:a8:7b:f9:38:b1:aa:3f:5e:0f:aa:fe:3e:32:9a:
                    f5:b4:86:2f:b3:02:47:bd:1d:ce:e2:01:3e:14:e1:
                    c6:27:42:ed:e1:60:59:6e:0b:2b:b4:c1:45:41:2b:
                    e1:94:d9:32:15:5b:54:d3:66:52:45:9d:31:91:42:
                    72:6a:ee:de:23:60:04:81:63:49:e1:bf:bd:f2:7a:
                    4a:ae:d0:80:91:5e:a6:cf:12:fb:8e:85:4c:0d:3b:
                    41:2d:73:53:14:e6:b2:2e:6a:48:8f:6b:f1:e4:04:
                    a3:fc:0f:47:b8:37:df:93:c0:4a:86:d8:89:d8:dc:
                    21:12:19:8e:f3:c4:49:95:e7:c4:70:00:d0:2f:55:
                    52:76:4e:a7:4f:3a:25:0b:f4:c0:ac:a8:82:49:7c:
                    fd:59:19:86:d3:e6:a1:6b:54:5c:7d:4d:e0:07:78:
                    e0:73:dd:ca:f3:6b:ac:02:dd:3b:0d:c8:9e:d6:3e:
                    19:a2:2b:ce:13:b5:ea:87:da:4c:3e:8a:fa:69:f6:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:82:7F:79:49:B6:56:8D:AA:1B:E5:0A:E4:23:24:EA:95:5B:E0:36
            X509v3 Authority Key Identifier:
                keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:03:1e:07:3b:16:5c:98:5c:67:b9:72:40:c2:97:9c:ad:f5:
         89:d7:ea:87:f2:b2:f6:69:6d:18:f4:c2:2f:64:11:85:31:71:
         58:04:83:65:46:7d:32:d8:0d:bf:ff:ab:a9:03:78:0d:ad:14:
         4a:47:88:a6:41:3a:a2:0b:bd:d2:4c:f1:bb:26:94:ea:9b:76:
         f4:10:c0:77:94:95:87:f4:f8:c7:95:e7:42:3d:76:b2:ce:73:
         00:b7:23:ae:cf:07:b9:f4:b2:87:a4:fc:6e:c4:30:f9:92:8c:
         69:12:b5:58:a0:8f:d0:51:66:62:a3:b7:7f:52:bb:db:d9:ec:
         36:f8:f0:59:1a:1f:7b:e4:d2:17:52:cf:4b:0f:c2:2f:c7:a7:
         86:18:f4:40:a6:fe:87:a4:69:bf:90:80:d4:0f:38:45:23:2e:
         59:ca:b7:cf:62:25:62:1c:eb:6a:0e:20:93:c2:ed:af:cc:2a:
         d9:7f:2d:11:c8:cd:3f:a7:bb:c5:b3:3a:97:f5:62:21:d4:40:
         24:71:f4:2e:2c:7f:7b:7a:11:c1:49:59:50:8b:52:cf:b5:ab:
         67:94:37:dc:38:39:12:23:76:9c:cb:5f:98:2e:45:1e:34:40:
         d0:36:a6:cd:27:d8:4e:5d:33:ee:9f:57:0f:cb:e1:86:ae:6b:
         17:ee:60:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:43 2025 by rpki-client