Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          nAN1hs6e1G/j86hB2/F/Cn6bsUQRLMqi96sTjFID5Qo=
Subject key identifier:   6E:72:FC:DF:5B:71:D6:54:50:A3:F1:13:45:31:62:B4:0D:B9:53:A5
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       0199FB7CDB17DE2C28763B30FAF6E56BA292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          1673
Signing time:             Sun 19 Oct 2025 08:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:27 +0000
Files and hashes:         1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=)
                          2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: 6lxycC86ztEG4VHiWS4zDa/QZvwOUmttKW/90oGdZqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:db:17:de:2c:28:76:3b:30:fa:f6:e5:6b:a2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: Oct 19 08:01:27 2025 GMT
            Not After : Oct 20 08:01:27 2025 GMT
        Subject: CN=6e72fcdf5b71d65450a3f113453162b40db953a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:c2:cc:c7:94:01:15:8f:bd:4a:52:33:09:
                    8d:19:c3:1c:b7:b5:d0:18:17:f5:73:be:6c:41:b3:
                    30:b9:b1:07:04:3c:2f:48:10:29:eb:5b:56:98:16:
                    e7:1e:18:7c:74:f2:bd:8e:64:2c:e8:bb:9c:c7:5e:
                    a2:dd:b5:c8:eb:f2:d9:f7:25:61:1d:a7:15:7d:43:
                    ae:0a:47:58:24:e1:1e:6b:7c:ec:0b:60:19:9b:b4:
                    76:01:cd:1d:f4:ee:d0:c5:d5:d0:ba:44:03:0f:eb:
                    39:28:b4:e1:3a:bf:b7:b8:0c:e4:b9:de:f3:58:00:
                    a3:0c:98:1d:8d:45:e0:07:1a:1f:cb:d3:13:6e:a2:
                    5a:74:12:05:84:d5:2c:7f:e3:04:80:1e:c8:fd:ac:
                    db:23:77:29:93:7a:95:ca:54:e8:0f:73:b0:4c:92:
                    02:2b:ac:56:69:79:a4:b3:86:fe:c4:03:37:48:d2:
                    04:39:55:e1:88:29:75:6e:64:72:9d:48:ee:93:47:
                    cc:48:67:af:ae:f2:c0:d2:58:f4:22:41:bc:c1:42:
                    42:32:ac:0c:f0:72:67:93:59:df:e6:b2:73:99:db:
                    e4:d8:c7:70:f3:7d:c5:46:b5:82:bc:3c:3b:be:55:
                    4e:56:cd:ae:5d:9c:4a:f2:50:2c:bd:d7:40:26:78:
                    55:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:72:FC:DF:5B:71:D6:54:50:A3:F1:13:45:31:62:B4:0D:B9:53:A5
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:65:c6:4c:32:7f:b2:97:5a:fb:bd:b2:ab:1f:29:df:95:d1:
         a0:41:5e:5c:46:31:48:88:4f:d9:79:59:f4:1b:61:e7:dd:98:
         52:bd:5a:77:80:56:87:c3:83:d1:63:28:47:6e:a1:d0:2d:4a:
         d1:9e:30:9d:b1:a8:3f:5d:c9:e9:96:c5:0f:2d:23:48:2c:26:
         1f:05:cd:dd:2f:8c:3f:9e:d0:ac:f8:5f:95:56:eb:2d:74:2c:
         69:90:85:7c:b1:ed:62:9d:1f:85:8a:61:b2:2b:d0:1a:bf:54:
         dc:e8:20:e7:e7:92:da:c6:87:0a:16:93:27:26:5a:32:a8:d7:
         0c:d6:90:64:23:5b:9a:4f:f6:e1:c2:d8:db:5e:9e:84:48:f3:
         c0:f9:5f:6f:46:45:6c:93:69:a7:aa:79:80:42:5f:60:43:5f:
         a8:b8:34:ad:3c:bf:16:12:58:96:27:4b:51:2b:0b:1e:6d:10:
         7c:6e:e1:f3:b3:c3:a5:3e:37:22:ab:4d:55:1e:62:22:ce:ea:
         b6:b6:aa:21:3d:5d:28:b2:ca:5e:f4:15:52:db:22:29:1b:fb:
         c8:20:82:b6:4a:09:79:15:c9:8a:c0:70:5b:ee:98:cd:cf:99:
         34:75:d6:b6:a2:72:62:c1:ba:e6:28:88:ef:ec:71:2f:1b:94:
         eb:3c:fc:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNsX3iwodjsw+vbla6KSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl
MzlhYzYwHhcNMjUxMDE5MDgwMTI3WhcNMjUxMDIwMDgwMTI3WjAzMTEwLwYDVQQD
Eyg2ZTcyZmNkZjViNzFkNjU0NTBhM2YxMTM0NTMxNjJiNDBkYjk1M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFrCzMeUARWPvUpSMwmNGcMct7XQ
GBf1c75sQbMwubEHBDwvSBAp61tWmBbnHhh8dPK9jmQs6Lucx16i3bXI6/LZ9yVh
HacVfUOuCkdYJOEea3zsC2AZm7R2Ac0d9O7QxdXQukQDD+s5KLThOr+3uAzkud7z
WACjDJgdjUXgBxofy9MTbqJadBIFhNUsf+MEgB7I/azbI3cpk3qVylToD3OwTJIC
K6xWaXmks4b+xAM3SNIEOVXhiCl1bmRynUjuk0fMSGevrvLA0lj0IkG8wUJCMqwM
8HJnk1nf5rJzmdvk2Mdw833FRrWCvDw7vlVOVs2uXZxK8lAsvddAJnhVhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5y/N9bcdZUUKPxE0UxYrQNuVOlMB8GA1UdIwQY
MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt
YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm
LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2XGTDJ/
spda+72yqx8p35XRoEFeXEYxSIhP2XlZ9Bth592YUr1ad4BWh8OD0WMoR26h0C1K
0Z4wnbGoP13J6ZbFDy0jSCwmHwXN3S+MP57QrPhflVbrLXQsaZCFfLHtYp0fhYph
sivQGr9U3Ogg5+eS2saHChaTJyZaMqjXDNaQZCNbmk/24cLY216ehEjzwPlfb0ZF
bJNpp6p5gEJfYENfqLg0rTy/FhJYlidLUSsLHm0QfG7h87PDpT43IqtNVR5iIs7q
traqIT1dKLLKXvQVUtsiKRv7yCCCtkoJeRXJisBwW+6Yzc+ZNHXWtqJyYsG65iiI
7+xxLxuU6zz8hg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:46 2025 by rpki-client