Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File:                     q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier:          OUIIW/5X5tXCILxN0e9BNulGy7KF8BJ1WJVBXBZtPcY=
Subject key identifier:   54:6A:74:03:E0:61:07:C8:72:3B:5D:D1:38:90:CC:FC:9E:F8:F4:C9
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer:       /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial:       0199FEB496D495CA71432036099738FB6FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number:          1727
Signing time:             Sun 19 Oct 2025 23:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:11 +0000
Files and hashes:         1: OWpwpyh1mzp7VRLchsqWjA7Bd6c.roa (hash: oss82o3LFtVmuDKRa45drAtMghVcyPl5JboekWr/Lf4=)
                          2: VAImUOtIDMTUQI76JnLfRrvllyo.roa (hash: 4SRj/s3ojBfQysGt03CIZScJZWxzkyEXZbgo7Y3hEkk=)
                          3: a-k-PpKc_hbf1tf8ym45DzWV9JI.roa (hash: CGjB95jiiaCzW7zL6nSnhujYT7ypy6568fnCUOok1Hk=)
                          4: cqMsKKEpjqP4gOzkP6YxkMm3WxE.roa (hash: cpcpc/9CzEy+wkt4CwIjle5PkQNTLuHjrssCk9RjDo4=)
                          5: hJ2Q_kNZVtX9DYCp6pRdbULfToU.roa (hash: Bj3orwiHHH0lwtlViSgWz8igoGg/S7618D6XjO8Tllo=)
                          6: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: YMJbVqH5J9WAoSly5UyvWi5irq8mddUd9ZA/G597AFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:96:d4:95:ca:71:43:20:36:09:97:38:fb:6f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
        Validity
            Not Before: Oct 19 23:01:11 2025 GMT
            Not After : Oct 20 23:01:11 2025 GMT
        Subject: CN=546a7403e06107c8723b5dd13890ccfc9ef8f4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:5c:90:28:69:c1:f3:6e:8d:63:5d:f0:80:
                    c0:ac:bb:d2:7e:40:37:7a:84:9e:c7:c2:d0:df:03:
                    8a:23:9b:4a:db:83:73:c8:d9:30:80:6a:31:53:5d:
                    17:ac:84:e4:c2:89:2f:76:70:8e:c7:fe:5a:15:95:
                    9d:3e:ea:f1:fe:f3:4a:f3:ae:13:7b:28:e6:64:d7:
                    96:fe:43:20:58:de:4b:bf:e2:75:bd:77:d5:1e:e6:
                    ad:c9:4a:af:29:0b:b9:87:24:4e:97:d7:d7:45:4c:
                    40:a8:12:7f:d4:67:5e:25:bc:58:95:79:09:1a:aa:
                    1a:3f:0a:ad:81:00:59:61:1a:c8:85:4d:96:26:b4:
                    c2:f7:fe:84:e5:c6:81:e2:0e:cf:9c:9b:91:2c:bd:
                    fd:d1:6e:d3:b3:49:0d:d8:80:54:04:af:6c:34:94:
                    27:c3:4b:a0:61:7e:7a:85:45:14:82:42:0d:a0:4b:
                    c7:7a:c3:2b:a0:70:12:66:db:28:0f:0a:05:92:1a:
                    3d:e0:46:ad:5f:e6:ed:37:49:25:a5:3d:5f:e7:03:
                    90:50:00:cc:c1:60:c1:fd:92:f0:20:6e:75:4e:53:
                    89:56:bb:d6:e2:d5:1c:1d:8f:ab:16:e1:e5:38:4c:
                    c7:5f:5c:77:3a:8c:9c:a1:be:74:52:13:18:1e:f7:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6A:74:03:E0:61:07:C8:72:3B:5D:D1:38:90:CC:FC:9E:F8:F4:C9
            X509v3 Authority Key Identifier:
                keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:54:80:cd:d1:d2:50:90:39:1e:95:0e:8d:29:5c:ee:99:43:
         f6:e9:0a:6f:fa:57:3c:9b:76:57:fb:65:84:db:dd:6c:44:ac:
         95:cd:82:5c:8e:ff:d3:2d:55:13:2e:c1:82:fb:2d:9d:5d:9f:
         fe:67:ec:58:ef:d4:ac:b7:e0:5a:ac:f6:1e:18:f2:79:2c:b9:
         1a:48:4a:ee:07:bc:a3:91:6b:c0:92:11:f8:71:e3:29:a8:b2:
         75:d8:8f:78:d1:bb:56:3a:d3:57:fa:82:de:2c:94:5c:8f:cf:
         e9:a6:01:48:ce:ef:99:ac:fb:36:39:3c:02:03:66:7c:33:53:
         8c:54:1f:eb:f4:86:d9:fa:1b:19:b6:14:7d:d0:e2:3b:78:eb:
         db:b5:26:d2:61:b6:8a:cc:34:6e:c2:be:1b:6b:e3:87:cf:52:
         f4:35:45:ab:49:62:1d:da:60:ba:79:8f:cd:88:54:29:c1:54:
         03:e2:7e:77:32:03:f8:a6:4c:11:08:3e:61:82:41:d4:9e:c2:
         d5:a7:90:a6:97:8a:e5:3d:e6:0e:4e:aa:1f:61:bb:dc:12:dc:
         ca:d6:11:8e:e4:a2:d9:31:29:f0:fa:4e:8d:d8:4f:36:95:5d:
         90:f5:f4:e4:08:3d:a6:b2:0a:74:8d:cb:db:7a:7d:59:26:22:
         61:1c:39:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tJbUlcpxQyA2CZc4+2/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmFkM2RlODMxZGE5NDIyMmMxYWRkMTA0Y2FmNGMzMjQ3
Njg5YWMwHhcNMjUxMDE5MjMwMTExWhcNMjUxMDIwMjMwMTExWjAzMTEwLwYDVQQD
Eyg1NDZhNzQwM2UwNjEwN2M4NzIzYjVkZDEzODkwY2NmYzllZjhmNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhBckChpwfNujWNd8IDArLvSfkA3
eoSex8LQ3wOKI5tK24NzyNkwgGoxU10XrITkwokvdnCOx/5aFZWdPurx/vNK864T
eyjmZNeW/kMgWN5Lv+J1vXfVHuatyUqvKQu5hyROl9fXRUxAqBJ/1GdeJbxYlXkJ
GqoaPwqtgQBZYRrIhU2WJrTC9/6E5caB4g7PnJuRLL390W7Ts0kN2IBUBK9sNJQn
w0ugYX56hUUUgkINoEvHesMroHASZtsoDwoFkho94EatX+btN0klpT1f5wOQUADM
wWDB/ZLwIG51TlOJVrvW4tUcHY+rFuHlOEzHX1x3Ooycob50UhMYHvc2TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRqdAPgYQfIcjtd0TiQzPye+PTJMB8GA1UdIwQY
MBaAFKu6096DHalCIsGt0QTK9MMkdomsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDct
NTVjNDM0ZWVjOTZjLzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDctNTVjNDM0ZWVjOTZj
LzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1SAzdHS
UJA5HpUOjSlc7plD9ukKb/pXPJt2V/tlhNvdbESslc2CXI7/0y1VEy7BgvstnV2f
/mfsWO/UrLfgWqz2HhjyeSy5GkhK7ge8o5FrwJIR+HHjKaiyddiPeNG7VjrTV/qC
3iyUXI/P6aYBSM7vmaz7Njk8AgNmfDNTjFQf6/SG2fobGbYUfdDiO3jr27Um0mG2
isw0bsK+G2vjh89S9DVFq0liHdpgunmPzYhUKcFUA+J+dzID+KZMEQg+YYJB1J7C
1aeQppeK5T3mDk6qH2G73BLcytYRjuSi2TEp8PpOjdhPNpVdkPX05Ag9prIKdI3L
23p9WSYiYRw52w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:25:18 2025 by rpki-client