Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
File:                     QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft (raw, json)
Hash identifier:          ykFQVk77uXl1DmGWciYNiZTR2mRg6BF3jkCl6rVHibc=
Subject key identifier:   AF:9C:19:89:3B:BF:7D:04:6D:28:87:12:13:F4:AE:22:C2:A2:35:A0
Authority key identifier: 42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
Certificate issuer:       /CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Certificate serial:       0199FDD8C5D24566EAABE316E31DECFF0E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
Manifest number:          0CE2
Signing time:             Sun 19 Oct 2025 19:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:05 +0000
Files and hashes:         1: Pi86dWn6x9Vtc8GH3REzDrMrSX0.roa (hash: geFyDSt8c1EYU/IR6IGQVBM3q8GhN/Mt5BfwBL1upLs=)
                          2: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl (hash: qV3dSN489MG8BjiDIBIKT1zewFCiVD0fa23CH8sBZHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:c5:d2:45:66:ea:ab:e3:16:e3:1d:ec:ff:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
        Validity
            Not Before: Oct 19 19:01:05 2025 GMT
            Not After : Oct 20 19:01:05 2025 GMT
        Subject: CN=af9c19893bbf7d046d28871213f4ae22c2a235a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:db:6e:07:dd:26:ba:3a:7b:a8:87:31:95:
                    0e:03:30:22:99:84:a7:69:ff:ec:e0:c0:5b:2e:63:
                    1a:e0:f5:56:67:39:35:ad:b5:fe:a6:62:93:3e:0c:
                    1f:34:c1:e8:65:ae:5e:47:df:f1:61:fb:15:fd:30:
                    bb:ad:7c:78:2e:de:b8:c4:0b:6d:66:94:37:36:d7:
                    62:24:5b:3e:b8:0f:04:fd:ae:3f:e4:eb:6f:fe:02:
                    9a:f1:ce:06:ef:0b:38:7b:9a:92:20:84:33:e2:8d:
                    36:a4:54:15:b1:e8:03:6a:76:ec:46:bb:9c:51:fc:
                    0d:56:db:08:ec:e7:b3:bf:e0:67:ef:92:8f:59:75:
                    6b:08:f2:a7:8a:a5:f9:7c:b6:9d:6d:a1:0e:0a:21:
                    a0:a4:0a:05:39:ed:eb:cc:53:64:6b:01:41:24:21:
                    4a:95:3c:ab:2e:0b:e3:8b:c3:12:09:db:5a:62:c9:
                    ab:5b:60:0e:6e:15:00:e7:c6:b5:4f:ec:14:96:7b:
                    22:78:5c:6a:93:8a:c8:20:84:b0:62:07:4f:5e:4e:
                    e1:1e:0c:cb:93:0b:ad:07:55:dc:bd:90:82:d4:de:
                    1f:d8:29:29:ac:0b:b6:34:71:50:bd:46:d2:ef:0d:
                    eb:f2:6b:26:3d:aa:ae:38:ca:ed:6d:0e:bd:a9:c4:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9C:19:89:3B:BF:7D:04:6D:28:87:12:13:F4:AE:22:C2:A2:35:A0
            X509v3 Authority Key Identifier:
                keyid:42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:44:18:9a:51:e0:3d:95:e8:f2:08:4d:78:98:1c:34:f1:30:
         5f:d6:be:2d:28:ed:52:3e:16:8a:9d:8f:f5:8d:f6:3c:aa:da:
         5c:77:b8:ba:3c:7a:97:5b:73:14:c6:3e:cf:ca:bc:1a:1e:55:
         be:f9:ca:0d:03:68:e3:9b:fe:96:c5:d7:ae:d5:5d:e9:82:19:
         9a:1b:3a:49:56:dc:31:3d:23:f6:da:ea:d1:8e:19:04:82:e5:
         a5:8a:65:a2:31:47:41:48:15:83:74:26:3f:65:5b:de:6d:23:
         1b:3b:59:d5:44:eb:16:74:02:f0:8f:6c:e3:dd:33:78:a1:2a:
         e1:b6:75:f4:c4:f0:79:49:47:4e:b7:2a:06:20:eb:d1:5a:65:
         f2:fb:4a:0d:ad:1f:16:42:28:bb:fc:64:4d:99:8c:de:f1:e8:
         d6:60:94:e4:76:84:c1:26:6f:5c:fb:2f:6e:67:16:ba:03:2c:
         6a:50:bd:10:01:01:f2:2c:ad:4f:30:08:d6:64:3f:f5:60:c4:
         1f:bc:76:71:a1:38:46:d6:ab:d5:c7:4b:c0:b4:b8:c8:55:a0:
         d5:ea:1c:04:22:d4:4a:5f:ab:c6:b7:79:4e:5e:fb:d8:a1:46:
         10:59:11:8a:fe:e3:83:69:f5:be:e9:68:18:ff:33:5d:14:d9:
         1a:6c:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:13:56 2025 by rpki-client