Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File:                     qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier:          0rN7rRuhKd3vxCMDbaddM8fl0aPRgL7cfvxg6zPIisc=
Subject key identifier:   10:4C:F1:2D:C3:B1:49:15:66:12:99:AB:0E:F2:C6:00:A0:1B:37:31
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer:       /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial:       0199FBEA945FAA361BAE0056B2000E43EE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number:          08B5
Signing time:             Sun 19 Oct 2025 10:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:18 +0000
Files and hashes:         1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: u8Xz06S7stNzQ68sceujMK7PfgyJWoG4Z0a/s2eGU/w=)
                          2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:94:5f:aa:36:1b:ae:00:56:b2:00:0e:43:ee:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
        Validity
            Not Before: Oct 19 10:01:18 2025 GMT
            Not After : Oct 20 10:01:18 2025 GMT
        Subject: CN=104cf12dc3b14915661299ab0ef2c600a01b3731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:1e:8f:7e:89:d0:6c:0f:a9:17:33:88:23:
                    47:e1:90:90:a4:d5:74:15:87:10:91:d9:47:7f:36:
                    67:2e:71:0a:b0:1e:4b:0f:0f:78:52:6b:d1:03:7e:
                    14:6d:2b:2f:e1:36:ee:ce:59:d5:e7:cc:f2:79:72:
                    ea:82:72:c7:6c:8a:e8:c0:55:d2:65:0a:8e:27:12:
                    85:1e:43:0e:9c:c6:48:18:9e:ea:33:df:28:45:67:
                    db:66:d6:84:5a:b4:ba:d3:65:0f:d2:9d:a6:9b:52:
                    c0:91:16:79:50:52:63:03:6c:2d:91:0d:e9:2d:c3:
                    46:1e:50:c8:9b:77:2e:6e:12:72:d1:8a:97:97:e1:
                    f8:57:9b:9c:1d:62:a3:d1:ed:c0:0a:87:c3:0a:51:
                    bb:7c:fb:67:bd:97:78:28:1c:9e:4d:58:aa:9d:4c:
                    c1:1d:23:20:d4:d6:8c:f3:9e:19:f1:77:9e:43:47:
                    d0:eb:4e:30:0f:3e:3b:ed:aa:ac:28:bd:45:5d:cb:
                    62:cd:d0:b9:2a:4c:ed:44:fa:cf:d6:bc:1a:91:78:
                    06:41:d2:01:d3:57:2a:05:72:fc:91:6d:ee:d0:8f:
                    e0:b3:de:79:68:58:03:47:6a:4f:03:0b:c4:21:20:
                    86:18:a8:1c:9d:c9:b9:1b:6f:4a:9d:2e:82:fc:69:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4C:F1:2D:C3:B1:49:15:66:12:99:AB:0E:F2:C6:00:A0:1B:37:31
            X509v3 Authority Key Identifier:
                keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d7:26:9d:7d:4f:9f:60:82:c7:af:bc:d7:4a:3c:2c:ab:98:
         f1:ec:42:42:63:ee:09:ff:51:c5:d6:1b:3a:39:f2:5c:ad:d0:
         39:e1:7d:1f:71:a4:92:80:3b:52:05:a1:02:59:20:d8:94:8f:
         d3:fa:82:b9:40:27:d4:e2:27:2c:43:4c:b5:33:8b:05:f7:3f:
         b0:c7:f8:37:39:37:e5:2b:e0:1e:7d:09:55:ef:9f:92:61:2c:
         fe:b7:43:d1:b4:6c:56:1f:a5:55:0a:40:ee:f3:00:3a:f7:95:
         c8:29:4e:9e:a3:c2:df:75:81:32:2c:0e:1e:48:14:0c:64:8e:
         d2:8b:d4:1f:73:4c:fb:4a:c9:4e:84:b4:03:68:f2:5b:e4:3c:
         5d:44:ee:12:dc:dc:0f:b2:54:41:93:8e:f0:85:ca:ff:b8:86:
         26:9b:aa:cf:af:4d:ec:71:02:b7:9c:83:21:db:94:c2:4f:87:
         59:f4:32:af:a6:03:5a:1b:e6:17:dd:3b:39:9b:be:36:55:e9:
         1a:77:de:1e:5c:57:8a:97:a6:7b:e6:60:60:6f:17:f3:1a:59:
         37:a2:3f:aa:b7:d2:4a:6b:c8:7f:c5:c0:da:fc:e8:47:d8:64:
         64:9d:8d:c8:bb:84:8f:cb:86:be:9d:26:41:c3:63:60:24:ec:
         9c:af:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:15 2025 by rpki-client