Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          4by7P5QwtE4Ge/Yxmx0q4vaTwVPxx2I6zxmHzPkX7ec=
Subject key identifier:   9C:0B:42:E0:CE:B6:AE:91:CA:DF:08:68:ED:3B:AF:4E:30:78:73:9C
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       0199C7580A7D22337295C10DF46879B76E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          16D6
Signing time:             Thu 09 Oct 2025 05:00:59 +0000
Manifest this update:     Thu 09 Oct 2025 05:00:59 +0000
Manifest next update:     Fri 10 Oct 2025 05:00:59 +0000
Files and hashes:         1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
                          2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
                          3: RXbwxnxv5i77bPKXOPNg3gLHQ2Q.roa (hash: Hb7ewCgNUReilTcVx5Y6r0li4yOFHBvAH9Jj35wZEN0=)
                          4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
                          5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
                          6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: MMf5w52TBkO+KJ6f1RpuNs2yTIGP2Uh+WheY6nZtOMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c7:58:0a:7d:22:33:72:95:c1:0d:f4:68:79:b7:6e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Oct  9 05:00:59 2025 GMT
            Not After : Oct 10 05:00:59 2025 GMT
        Subject: CN=9c0b42e0ceb6ae91cadf0868ed3baf4e3078739c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:3b:fe:c9:3a:80:4c:d7:f4:9c:9f:62:89:
                    1c:e7:a5:0a:09:4b:45:b2:8a:ef:3d:38:ce:d1:dc:
                    6b:3a:55:6d:81:90:40:e9:f4:e0:bf:4f:1e:86:b3:
                    35:18:66:36:d9:63:59:9e:ff:3c:69:07:21:4c:5d:
                    57:94:89:05:b3:b2:1b:20:85:e1:75:f2:61:92:e7:
                    c2:7d:60:5c:39:0e:28:a6:7f:23:8e:f1:86:60:6c:
                    1e:aa:8f:f1:58:4a:b9:42:05:81:79:4e:3e:47:ff:
                    57:0a:9b:ea:58:7a:91:66:05:90:37:2a:30:51:80:
                    da:62:4e:7f:5e:5c:7d:d7:9b:89:5d:c9:98:56:4d:
                    4e:ba:5e:80:61:e2:8b:84:c0:78:04:34:89:11:80:
                    6e:b4:dd:ed:5e:f0:b7:9e:1f:38:92:14:dd:8f:df:
                    ad:36:5c:06:eb:99:31:0e:56:af:09:28:2b:82:9c:
                    10:ae:83:0b:b0:6b:47:b8:8d:fa:42:c0:ab:fd:47:
                    0c:5d:d4:dc:74:7a:ed:b6:8d:d2:27:c6:7c:4b:bb:
                    b9:c0:cf:3d:fa:1d:40:e2:de:6b:6d:35:23:92:79:
                    ff:b2:db:6b:b0:1a:15:1f:49:91:71:38:70:85:6f:
                    b6:75:c2:26:69:92:9e:f4:fc:43:4a:85:6e:8f:69:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0B:42:E0:CE:B6:AE:91:CA:DF:08:68:ED:3B:AF:4E:30:78:73:9C
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:09:1b:ba:72:96:03:2f:ce:db:96:ce:48:a1:73:07:fb:15:
         25:62:8b:05:d9:d5:fc:59:3f:22:d0:d5:a9:b0:85:cf:66:3a:
         c0:f2:51:e2:45:d9:fd:0a:f9:2d:d6:25:5a:6a:7e:c3:45:d1:
         3f:1d:51:83:8e:62:13:b7:a4:7e:d9:cb:a0:bf:46:f0:be:e5:
         3b:2e:d3:f7:b8:58:b5:57:4a:5d:78:d0:81:94:fb:c1:a2:1f:
         40:05:43:42:05:4e:18:e4:81:dd:62:8b:4d:68:92:b1:67:a7:
         f5:19:3b:2b:9e:f5:63:b1:08:65:ca:2d:f5:b7:2b:f4:29:bb:
         ad:da:2c:d3:19:65:af:b9:d4:e0:8c:00:20:ab:88:c9:0c:cb:
         eb:af:5d:0f:3f:33:c0:b7:c9:0a:01:ee:3f:58:90:df:69:c5:
         a3:5c:f7:6e:a4:c0:91:ba:81:f6:e2:2a:9b:96:5d:18:dc:e1:
         e6:38:8f:5b:b7:fc:06:ba:cc:59:ed:6f:ac:10:ce:ba:c9:85:
         c8:9a:cb:e2:13:bf:35:5b:95:0f:2f:89:b4:4b:55:9d:97:49:
         df:5d:30:2c:da:a6:d4:b2:2b:e3:fc:69:18:bd:53:d8:07:5e:
         96:db:4c:24:cd:e6:9b:fa:fc:65:dc:91:80:c7:21:a9:b5:27:
         86:35:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:20:33 2025 by rpki-client