Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File:                     qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier:          r0edDRcKPtDQbfDvXZ4edTVDAU6IQRL3t0k1BbGilbs=
Subject key identifier:   AA:FB:44:1A:68:36:D5:A2:66:41:81:F4:2C:0B:95:2C:C6:34:3A:61
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer:       /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial:       0199FF596F3C24653DD4092125CAC0C041E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number:          053A
Signing time:             Mon 20 Oct 2025 02:01:15 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:15 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:15 +0000
Files and hashes:         1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=)
                          2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: KJzxsMTMVt1WNNINBOoa6SVn3OAJ3zkrME9KbFDLmrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:6f:3c:24:65:3d:d4:09:21:25:ca:c0:c0:41:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
        Validity
            Not Before: Oct 20 02:01:15 2025 GMT
            Not After : Oct 21 02:01:15 2025 GMT
        Subject: CN=aafb441a6836d5a2664181f42c0b952cc6343a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f3:65:78:f5:63:9a:8d:b8:69:15:9c:30:80:
                    3e:91:b7:40:fa:90:f4:27:5b:ce:b9:8d:8e:2d:3d:
                    4d:46:2b:ef:43:54:47:06:cf:e3:0b:17:a4:ff:1f:
                    f9:82:8f:a1:97:cd:cf:a9:a7:05:45:33:a4:ed:e1:
                    65:c4:e7:fb:36:ec:2b:ef:94:28:1a:f5:cd:5a:0a:
                    c9:6c:90:a2:ad:24:c4:da:87:53:aa:9f:ad:c4:a8:
                    76:27:56:21:63:5e:5c:d1:7f:57:fb:11:f3:27:88:
                    16:c4:1d:2c:e0:dd:41:63:7c:3a:6e:e5:b0:29:91:
                    59:30:e1:ec:cc:f9:0e:b5:25:ce:30:36:9f:48:3b:
                    d8:f3:c5:d2:e9:c0:d4:ae:a9:38:0a:02:93:69:4c:
                    48:1f:1d:d3:25:1d:00:b2:2d:ae:6f:49:c6:3a:28:
                    a9:39:c2:87:c1:b3:92:81:e8:eb:d7:a7:c5:d9:75:
                    e0:7d:cd:36:06:71:b5:d7:86:96:da:ce:10:36:54:
                    b7:41:39:62:ac:e4:e5:14:26:5c:17:f3:97:a7:52:
                    d8:7a:cd:72:a6:9e:8e:8d:09:05:76:a5:8b:d1:b3:
                    7f:59:e8:44:f2:17:8b:63:55:e8:c1:b5:39:fe:9c:
                    68:01:78:e2:a2:58:3f:65:d5:d6:7f:31:c4:40:07:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FB:44:1A:68:36:D5:A2:66:41:81:F4:2C:0B:95:2C:C6:34:3A:61
            X509v3 Authority Key Identifier:
                keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:27:03:dd:ea:73:f3:00:0e:67:84:0b:6c:ca:d7:ec:df:82:
         03:e6:d2:f2:db:5a:c8:32:53:d4:d9:71:1f:13:4e:c3:0f:3a:
         61:86:f9:9d:58:cf:65:2e:cf:5e:3e:87:29:e2:c1:58:f6:37:
         0d:78:09:4e:ce:c9:00:e0:d0:2d:f1:32:c6:68:4f:23:a2:93:
         0e:9e:61:65:78:27:f8:a5:fc:06:92:fb:77:8a:1f:64:c0:be:
         c2:b8:ed:7f:d7:2c:32:ad:02:db:77:3d:6f:b5:32:d3:28:1b:
         0d:5c:f9:e0:be:34:d5:2b:55:c3:b5:82:ec:91:d4:07:c7:b8:
         1c:3a:46:b8:71:3c:9d:71:b6:a1:12:c2:c8:04:1a:1a:04:11:
         9b:98:9d:a2:89:45:88:d4:df:8d:d6:47:d9:8a:90:17:17:91:
         f8:e5:d7:89:19:c5:77:97:5e:48:bd:61:c3:96:1c:1c:d9:17:
         9b:83:fd:bb:69:3f:99:3c:44:20:2b:65:d7:95:5b:1d:6d:d4:
         18:1b:af:74:12:6e:59:c9:79:fe:9c:ac:7c:80:4e:a6:7d:da:
         ff:53:eb:a0:01:39:a5:ce:14:b9:fe:be:5d:62:d8:98:1f:07:
         4f:a8:56:e2:e6:36:50:d2:a9:9b:9f:5e:4a:e4:dc:05:2a:50:
         c0:c0:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:03 2025 by rpki-client