Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File:                     QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier:          ilXyTcNGh3skp9HU8khpcY1WzNs3m9W0o6sVXjCUFlo=
Subject key identifier:   7F:04:BC:D9:02:74:01:B2:2C:DD:EA:75:8C:08:16:73:8E:C9:41:57
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       0199FB459C903741A2E3034AD53EF2FE03D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number:          16F9
Signing time:             Sun 19 Oct 2025 07:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:07 +0000
Files and hashes:         1: 0esZKuZd06vTF3egbk7SFqajsIo.roa (hash: P0O/NDwq3sTeK/AsSKKPK6Qr+cdWA34yW0U7UgVxZHg=)
                          2: 1-F-5SWsecFgzI5NahgeczUF5j-k.roa (hash: AjzylbQuDtMZ4CoZ2EqAKKte+m5xBNBNs+Oy65Y8EM0=)
                          3: 18mEs4Z6fHdJG430-23p2cFj4nQ.roa (hash: XgIw9SVi9pdHmgi87nMtAixIsiQxYMsUyuBvpp1vRoM=)
                          4: 4URO2C3ml1u1p3j0aVym-OypCmw.roa (hash: FBodq3AGj9I/WrFusJYGhp0BteIh9N9SY38AbrciYWk=)
                          5: 4kN15Qz33KWG-k_wyu7EQgr4Ils.roa (hash: DH8jYa3viVWroHhQ/Zl/Da/2bPMlT/7wPrIYxkW1NQg=)
                          6: 7qGCgpIfKLXoJsT35rezDziDBhA.roa (hash: 5kmqeNrinp9lsuCAyZflpq/OiszbJU7jNmzUel6IR+E=)
                          7: GAgtr-CLltTm3C54wjvqWFoClvc.roa (hash: T0Jdg0AtA8XIyCNcIqmAhfTPx4CQ0IlZ0iFHA879hp4=)
                          8: HiGziAUktoRlyueuC0_hHiCDmQ8.roa (hash: Zd8qY4C57ymLYCj+tu0BUy3+rQ0+nsTQu2oauKzI3OY=)
                          9: HxipHT46tv6qA61seP-3FDc3m84.roa (hash: dvYRTvtnN6xoSKyBzydQ1i2HWHdep/QnlIOV+ZIODek=)
                          10: JcQ4XnNNuhCFCptegJ4OikKt6EI.roa (hash: V4uiHg1qNVTGH4cwLosCcAcAuUHU5FHwvSgPuESRx7Y=)
                          11: Niv5CXzjZlzpP3fTeYmPHJ-i0lU.roa (hash: R9xWi9BNSSwcGXEc8iJXQHOFaaQnnZvq83WcJjO5BE8=)
                          12: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: 1mP/uNzO00hwrjTXQpAplldJFkhhbAWZLAz7MnF+izo=)
                          13: QVpDsEjXaPZQ4FGjN9dHcrQXvHg.roa (hash: HCD6w2XxMAQn0SFhGHQKXXLIjCxVrY39/u5TIy7CNM8=)
                          14: Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa (hash: xVEwITmL9MXivRj3o3NBJyNSskTvQ/xcCcoWznjHvCA=)
                          15: RNDoaXvvOX22MpXmc3Ff_6K2Zr0.roa (hash: 9ScFJyBJ0ntBcGgka6vn0/EsUriLP41MonbDidIqsxk=)
                          16: UtpSRhJuNLlPda0ealCAV2oOOIs.roa (hash: 6zNva/R7MgFInq/rTlig5RzR+MH92GbfZMeRaso1csA=)
                          17: V8-ToP-No1rRKocG9Fs66tbVPI4.roa (hash: 3qNiQpHlS6gZhDgIm5wv39p+3u8Q/oiUqHr5QNsynkQ=)
                          18: aCzvft-4bbV7rBYNhvjtTU8ZwVY.roa (hash: LyfD0ZqEZ95kmtswsVkI/tj5kthO2U488G+9z2mp6gg=)
                          19: anyb0S2isVZ6Se4Mftij8iSLpPk.roa (hash: 8kZzLUilTF5CneX4LxuRFJNuwebJiucwE+f4bJOwZpY=)
                          20: cLHJ9pzG4jNGxgoAoRMirT2Ejso.roa (hash: Jzxa7wOrH3SZg3F+/QPuNnZeQarhGQ5yhFav2kPWjJ0=)
                          21: fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa (hash: 05oduoCdD8sRASgQ0YU8ZbDS+ABzI42Cxlh4jYIQnOQ=)
                          22: g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa (hash: T/0IJy2q1IYoff/aamZ+EqRudnpk7iGpLvKCXPLYje0=)
                          23: glVWs7IQA6E4icmC8qXaL1BO1oU.roa (hash: wAwxqn0T2Tg7SmJ7QKis7shqbxTq4mypLKV5b5C3kXg=)
                          24: kL3chxghDnQX5YSzwgkNCMx_3uM.roa (hash: ARDIceVeEM1YjdBNdcn8ziSYK6i63yZ+Nxd3mBgB/OM=)
                          25: khxB07onbtl0gHz8-6pLaDUUqYo.roa (hash: MoQ9KdSAj5hEESTK4yNZR+E8klzqWct22REysr25b/w=)
                          26: lKXrokKPFOF3aznjmWojVE7APiQ.roa (hash: PRGVlrmspET+S9gMw9HSgp3fT7nUxwmOOvlgERWds3M=)
                          27: lwFhyNroYMkQgFt_MTCY-0ovIkY.roa (hash: 1cg2wbluv89aBz3Ew/AMkAQmXEZmttxmEyT4CRchZCk=)
                          28: mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa (hash: 7m/WWG8HyJT1ynclkVB1QY12OwlKq+o8CXSQO/8ksHU=)
                          29: nGljitgno8Zg_3gTd1NL8ga4UlY.roa (hash: rg8O6DW4r5DhXeJAjPcwuhjgZqT37lpRRlPUN2MFmGk=)
                          30: pfnbvP54fI2mKR09iIt0xfdp0co.roa (hash: TpvSBeXjgBs6iHcMA91RD8MXDqtM3kW6rNOmftw2zXc=)
                          31: twN006NWSqIAzyJjBefGoakpUcI.roa (hash: Dw9Jbr5s1oT+R6tnGBJCmZXohfgBB+1HIADmJwaJ7IA=)
                          32: vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa (hash: furrlju/pz4ChU7gEiXr6biSh/xldhy2BubaPv4xD0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:9c:90:37:41:a2:e3:03:4a:d5:3e:f2:fe:03:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Oct 19 07:01:07 2025 GMT
            Not After : Oct 20 07:01:07 2025 GMT
        Subject: CN=7f04bcd9027401b22cddea758c0816738ec94157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:f9:00:cc:bb:5f:5d:fa:14:8c:4a:96:50:
                    e3:12:d2:8c:fd:ae:57:9a:5a:af:cd:82:50:c5:96:
                    cd:fb:8e:b1:85:6c:ee:e1:f2:9d:b3:ca:2b:c0:65:
                    9e:20:07:06:0a:3d:0e:23:ac:a2:d1:2f:6a:4c:5a:
                    a3:c9:7d:a4:7e:33:b6:c1:82:8c:e7:c6:9f:cd:f2:
                    76:12:e2:02:01:01:6d:51:3d:fe:2e:6c:89:e4:51:
                    9b:19:06:2e:3d:1f:c2:ec:2d:22:8d:b6:e1:26:cb:
                    bf:9f:eb:17:ab:b4:81:73:8c:d6:e3:d0:c6:03:84:
                    ec:f7:6f:74:2c:fd:ca:3f:c6:25:95:ba:71:d1:b2:
                    39:3e:d0:8e:68:a2:23:62:fb:82:d6:f3:4d:12:53:
                    b9:51:d3:64:42:de:b1:01:74:fc:29:9f:4b:fd:e9:
                    15:84:b6:51:70:7f:be:5a:9f:08:09:fc:00:e8:6f:
                    93:7b:e1:65:0f:cc:38:40:9d:65:10:f7:85:6c:18:
                    1a:fc:b2:89:eb:a0:86:51:59:1a:09:7d:7f:75:78:
                    ef:5a:d6:88:4d:58:8b:97:94:98:9d:f9:a5:32:22:
                    5b:b6:2a:c6:80:88:ab:38:4a:3c:bd:d3:2f:04:f1:
                    7e:69:87:ac:3e:0a:e5:55:fc:f6:77:04:6f:d2:9b:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:04:BC:D9:02:74:01:B2:2C:DD:EA:75:8C:08:16:73:8E:C9:41:57
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:95:d8:da:9c:fc:2b:52:3f:11:ca:d0:fb:c2:88:73:7f:fc:
         00:65:41:8a:8a:be:a7:d1:26:28:f4:c8:ec:a6:46:e2:5d:36:
         4d:36:f5:9f:af:f4:9b:c1:68:80:42:fb:47:01:b1:49:d2:17:
         24:cf:ed:aa:f0:cf:c0:6b:2d:a0:5d:5b:fe:ae:79:8b:80:24:
         5f:2e:c6:67:e3:01:ed:88:3e:81:ae:6f:a1:d8:f7:9a:8e:19:
         fe:75:0a:ca:9e:e2:87:cb:ed:07:90:fc:ac:7d:d0:d4:8d:7c:
         f8:8c:e8:07:b7:9c:5b:66:18:02:7f:71:1c:c0:bc:c0:78:a4:
         0d:cf:80:24:5e:80:92:5d:d6:65:08:42:45:fd:0f:3f:f2:48:
         19:e3:d7:65:c2:da:d1:4e:30:d6:98:3b:9d:e0:70:41:c4:ac:
         f6:f7:5b:d4:46:51:3c:51:75:df:19:9a:36:ca:c5:cd:62:6a:
         8e:16:13:4d:8a:2e:04:0d:95:c9:22:c0:f3:29:85:c7:9b:c0:
         0a:a4:87:6a:80:a6:56:d9:fd:52:24:06:e9:57:8f:11:dd:c5:
         76:5d:f5:ba:d1:45:17:67:a6:43:31:8c:8f:5a:11:50:c9:56:
         8b:22:e5:f0:28:25:6a:f7:1a:7d:bb:9d:ec:6e:ef:cf:31:65:
         f4:7d:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:51 2025 by rpki-client