Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File:                     qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier:          rX9uQmbWkbN5koIOPPTGRviwhmMUcScbV+zFcI92H4k=
Subject key identifier:   62:37:2A:E0:68:53:6B:D3:77:41:7F:5F:17:4D:7A:9D:35:A6:0A:A0
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer:       /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial:       019A02FE3CFCA6EC8A050AA3FAFAB42E12D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number:          151B
Signing time:             Mon 20 Oct 2025 19:00:07 +0000
Manifest this update:     Mon 20 Oct 2025 19:00:07 +0000
Manifest next update:     Tue 21 Oct 2025 19:00:07 +0000
Files and hashes:         1: cl6-xP7qlNVenXtKej75GmET20w.roa (hash: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=)
                          2: ftPX6ru82FwqHJ4CTaIfY0kPRSU.roa (hash: iKc9aP9F91n3SzRk10qNjCoKwRfXAgJ0qpka/jBdSo4=)
                          3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: eM+UL+OAjeFY6PTyGBGmBpaCCj1anG75CTN0TUltPQ0=)
                          4: tJWty-Myp1bMv-YOuzd4M1wDOVI.roa (hash: g/a3N7RSWTo3iJRyoUMcVa6AkUH9ej5k+J2S9ybi0Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:fe:3c:fc:a6:ec:8a:05:0a:a3:fa:fa:b4:2e:12:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
        Validity
            Not Before: Oct 20 19:00:07 2025 GMT
            Not After : Oct 21 19:00:07 2025 GMT
        Subject: CN=62372ae068536bd377417f5f174d7a9d35a60aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:b2:f4:9e:3d:89:13:11:ff:07:c2:ae:2c:
                    fd:22:67:c4:c5:ff:96:80:64:2e:1f:cd:4a:3f:d2:
                    78:e6:5d:b3:a0:a9:dc:1d:d3:f7:c6:4e:ec:9f:48:
                    e8:9f:a2:ca:b0:1d:67:2c:d1:45:f8:4c:a6:0d:55:
                    c5:f9:28:ed:52:1b:18:91:5f:ab:4d:a9:3e:5c:ef:
                    9a:8d:c7:9e:ae:7c:5e:b9:58:97:7e:4d:7c:7a:f9:
                    8f:af:45:1f:8e:6b:e2:97:bf:7c:41:e6:5e:95:1f:
                    ca:d8:48:f6:68:1f:1c:b3:02:83:54:af:d1:95:f7:
                    2e:a4:ec:b5:2b:83:7b:ae:5b:74:0d:9a:e0:a2:bc:
                    a4:b9:7f:67:9f:f6:d8:56:b3:d2:f6:e2:90:e7:f1:
                    a6:09:ee:19:24:cb:4c:92:7d:c8:58:88:fd:5b:54:
                    60:0d:6b:64:e5:63:9c:1a:24:23:dd:e7:fb:f9:ad:
                    b5:21:da:06:20:e8:9f:24:8c:3d:68:d4:3f:39:38:
                    ae:b7:e4:d1:bb:5b:52:be:30:e7:a1:eb:b2:cf:4e:
                    26:3d:aa:81:3d:16:2f:9f:cb:6e:dd:aa:32:a2:48:
                    d3:64:58:3f:0c:1c:d0:2a:02:9d:d8:a9:fc:93:b8:
                    77:aa:7f:f6:8e:cd:91:ea:b1:89:74:e3:9a:db:b7:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:2A:E0:68:53:6B:D3:77:41:7F:5F:17:4D:7A:9D:35:A6:0A:A0
            X509v3 Authority Key Identifier:
                keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:81:75:e4:af:f9:bf:94:00:1c:73:a4:f2:27:0c:01:91:70:
         ed:4f:82:76:7d:fa:03:1e:5c:63:c8:86:99:9c:43:cf:04:90:
         7b:cd:18:15:ff:15:7f:b6:ca:23:d6:f2:03:c8:5a:f4:8a:cd:
         f4:79:59:2c:eb:19:c4:f6:0e:77:fc:ea:99:00:2f:dc:58:ae:
         d5:db:f9:62:a7:ad:f8:0d:80:f0:b0:a8:54:09:ff:1d:cb:f4:
         66:5a:21:f2:a4:09:61:91:6e:82:43:ef:0b:fd:e6:75:7d:23:
         87:e5:7f:cd:c8:7f:92:b1:d5:3f:42:09:55:31:73:f5:04:a5:
         12:6f:27:9c:d5:fc:67:8b:e9:95:bf:8b:70:55:89:53:01:01:
         c2:fa:01:71:c3:4e:ee:b6:22:f5:85:c2:5d:58:a1:87:af:df:
         0c:bb:1f:26:ed:9e:a0:d8:ad:24:79:93:b6:02:05:b7:82:a8:
         9d:81:6c:58:ae:1a:9b:06:64:32:a1:fd:99:ae:68:a8:4f:ed:
         6a:3d:b7:bc:65:bb:4a:6e:a1:19:1b:6d:4f:0c:2c:06:78:9d:
         6b:03:e5:42:47:c4:a9:b9:18:72:3b:59:f0:e2:c6:2c:cf:48:
         4d:14:09:56:dd:32:27:6a:a5:29:fc:7c:f9:a9:78:10:72:45:
         de:d3:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:53:54 2025 by rpki-client