Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          AIJPmpL7LhaNDLzfjJZRGjUyHrwgFdkgB0jTbKQ0zEk=
Subject key identifier:   66:36:B1:FD:14:F4:7D:20:58:8B:6A:A0:C2:6E:B7:A2:1C:29:90:8A
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       0199FF596555D2B88D6141F4F5748D62984F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          16F3
Signing time:             Mon 20 Oct 2025 02:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:12 +0000
Files and hashes:         1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
                          2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
                          3: RXbwxnxv5i77bPKXOPNg3gLHQ2Q.roa (hash: Hb7ewCgNUReilTcVx5Y6r0li4yOFHBvAH9Jj35wZEN0=)
                          4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
                          5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
                          6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: XMHO1F84DnzOWCPsz5nzpemI1iQoO8UFZGBIm/ewEEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:65:55:d2:b8:8d:61:41:f4:f5:74:8d:62:98:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Oct 20 02:01:12 2025 GMT
            Not After : Oct 21 02:01:12 2025 GMT
        Subject: CN=6636b1fd14f47d20588b6aa0c26eb7a21c29908a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:d2:aa:87:d4:9d:d3:a9:01:14:8e:14:7d:
                    f2:da:7e:4e:de:9a:bb:1c:d9:54:d2:86:5f:23:e8:
                    7e:e6:6b:0c:f9:87:fc:76:ae:fe:f9:6f:35:09:3d:
                    2d:09:fa:4d:f2:77:f3:65:6c:ea:d9:ca:db:01:ec:
                    32:f9:29:94:8b:7c:c9:82:3f:25:96:b1:2e:7e:17:
                    aa:9a:45:0b:cc:98:20:55:98:2a:30:c6:fd:dc:a4:
                    01:ea:9d:aa:3e:46:91:50:16:c7:dd:d3:89:c5:31:
                    f2:4e:9a:ba:bf:a7:3c:5f:46:dc:85:88:7b:71:69:
                    56:29:f5:46:40:b6:38:80:5d:40:01:28:cd:76:9a:
                    25:0b:79:62:18:03:7e:d7:83:7e:e2:75:a2:a6:f6:
                    24:07:c7:dc:24:60:c9:22:b9:50:f9:88:20:9e:99:
                    f3:c1:7d:92:0c:5a:d8:50:af:2c:c1:9c:65:27:ff:
                    ce:46:e2:34:0b:f5:ea:05:1b:5a:ff:3d:d9:3c:1e:
                    f5:24:00:b2:e2:60:f8:62:e1:f3:06:ed:4e:20:aa:
                    62:a9:b3:97:e5:e3:e5:15:86:79:34:24:b8:bb:6a:
                    c7:a4:d7:a1:10:13:1a:c8:ac:95:f2:eb:fb:3b:d5:
                    eb:e6:59:35:a6:8e:95:dd:2f:aa:a7:42:ab:76:61:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:36:B1:FD:14:F4:7D:20:58:8B:6A:A0:C2:6E:B7:A2:1C:29:90:8A
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:c2:01:11:c2:d3:8f:a2:88:74:35:24:10:ff:a3:6b:8f:
         a8:22:30:be:3a:59:9e:d7:21:f3:80:08:41:39:06:d2:ed:f9:
         48:1d:50:62:26:2c:97:7a:dd:43:1f:1b:3a:39:89:42:7f:ec:
         c0:06:af:00:f3:ef:e1:b3:28:5a:ad:36:89:b8:6e:9b:4d:cd:
         e9:9d:a4:ec:54:c0:60:a2:f7:20:59:73:eb:58:e6:9b:01:8d:
         bd:9b:4a:23:1b:ba:5e:19:91:f8:4a:ce:55:7a:83:11:65:da:
         32:92:25:45:4f:d5:13:74:eb:26:94:ad:60:25:80:8c:4e:4b:
         d0:f0:28:2a:6e:1b:ca:46:33:59:42:66:1e:d6:c9:21:c2:cb:
         2f:66:ce:9d:d5:7b:f6:1c:e8:0c:51:28:0e:d0:b0:7b:cc:24:
         1a:2d:ef:ff:bd:9e:86:48:cd:93:d7:b0:8e:3e:4d:4c:20:b7:
         d6:11:de:6e:d6:cd:a9:32:9a:de:e7:02:9c:ab:9e:2b:b8:73:
         9c:ec:a4:a0:b8:17:54:ff:ec:89:11:50:95:95:19:0e:22:a2:
         3f:8b:2a:58:b9:f8:1b:b9:91:fe:72:f5:05:36:9f:10:35:e7:
         10:60:1b:48:bd:d1:17:cf:d3:de:78:db:b1:7d:db:37:f6:7a:
         0e:1d:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:27 2025 by rpki-client