Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File:                     2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier:          1gZLLj1bd9gZOmobZHpdVtAR72U5rfYAV6mR21jDlhk=
Subject key identifier:   95:7B:77:77:5A:AA:00:57:76:62:B2:0D:96:3B:1E:02:84:7B:FC:2B
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer:       /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial:       019A00A2FA684EE4A86E7C8A4E9708CCE6F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number:          04F0
Signing time:             Mon 20 Oct 2025 08:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:12 +0000
Files and hashes:         1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: ifNv0T5XST7nDj5Hspb7u/E7xOAvtuVIbzZczJPYnso=)
                          2: kZsXR7fR0Ou_RuvSVexqd7WF5Zw.roa (hash: VeB6BvnRbCRLPDDkoYsxbMM4NdMeIicaUa0njjeL7mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a2:fa:68:4e:e4:a8:6e:7c:8a:4e:97:08:cc:e6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
        Validity
            Not Before: Oct 20 08:01:12 2025 GMT
            Not After : Oct 21 08:01:12 2025 GMT
        Subject: CN=957b77775aaa00577662b20d963b1e02847bfc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:23:d8:01:cc:a6:c8:18:2c:f4:37:f0:74:
                    f9:1d:c5:8a:7d:3c:48:97:1a:35:70:73:69:1a:c5:
                    1a:42:8c:a0:9f:4e:b2:58:e3:df:91:6e:a9:4c:63:
                    22:d2:7f:9c:1f:56:b2:e2:42:df:5d:e3:67:91:b1:
                    39:df:e4:96:7d:0f:ae:bf:82:48:61:b7:e2:88:c3:
                    5f:4d:31:4e:5a:a7:35:84:c7:e5:82:b3:60:30:f7:
                    fe:f7:e0:c8:e8:28:f2:d8:8c:ec:a3:ba:77:7f:b9:
                    37:1c:48:81:34:91:a9:02:47:e4:b3:0f:71:1b:12:
                    94:48:63:2e:5e:a8:39:31:0b:74:56:bc:50:82:9a:
                    a2:24:52:db:a0:3d:d4:be:d4:fe:0f:28:5d:a4:6a:
                    15:40:c9:0d:9a:8f:7f:95:31:70:69:30:69:48:04:
                    b3:36:af:29:b8:57:4f:68:15:fc:1c:84:51:df:15:
                    d0:6b:70:47:8c:0c:c9:c3:aa:a8:49:5f:98:ce:08:
                    35:aa:30:4f:cc:f6:6a:50:20:2e:4e:86:00:2a:74:
                    73:97:80:dd:e3:05:b8:77:40:c0:ba:38:86:6a:7b:
                    f7:44:d9:4b:b6:3d:54:40:ab:0d:a1:6d:fd:92:88:
                    6c:bb:b5:e2:cf:06:ac:40:63:c1:d0:b6:be:8c:43:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7B:77:77:5A:AA:00:57:76:62:B2:0D:96:3B:1E:02:84:7B:FC:2B
            X509v3 Authority Key Identifier:
                keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:17:aa:e3:c5:f8:7c:0e:46:aa:97:95:19:53:39:2d:04:b8:
         c5:95:4a:35:13:2e:48:c0:c2:64:c2:df:72:e2:63:44:1a:4d:
         cb:e5:64:11:eb:ad:11:cb:1f:fb:fa:fe:9c:77:63:6e:72:de:
         ba:07:b1:c8:02:07:a1:e3:a9:e3:38:c6:fa:9e:3e:e6:4f:cf:
         37:cb:33:0a:97:66:9f:8c:0c:42:8b:37:5c:cd:3c:4f:3b:74:
         5c:38:9f:7e:9a:01:2c:17:2e:29:dd:3b:e7:ed:df:14:61:72:
         24:fc:40:11:26:5d:80:b6:91:d1:e0:91:98:a0:61:12:36:2b:
         4e:ec:13:8e:53:b7:e7:ba:28:b1:be:25:d8:5a:92:5c:58:51:
         54:1c:24:7a:26:1d:63:5b:b6:1d:09:5e:27:31:1a:9b:4e:ea:
         42:27:76:cf:79:a7:4d:06:84:04:5b:86:62:dd:0e:b4:a1:37:
         27:fb:74:d8:78:48:2c:d8:5a:00:fe:62:18:b0:72:59:4d:5d:
         31:14:5d:3f:26:1a:c1:fb:78:c2:ea:9f:b8:fb:74:6e:c1:57:
         c1:f6:6f:28:90:15:22:51:14:e3:0d:93:42:07:f8:23:9a:60:
         a9:56:cb:a1:9a:9f:8d:c8:48:a1:6c:38:33:15:41:5b:7e:8b:
         47:73:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:23 2025 by rpki-client