Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File:                     pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier:          eFdqbYSBRqf73NzXM0axj2gYxpVN2tik4lYSOsK1K1Q=
Subject key identifier:   10:16:9A:72:71:7F:99:9F:59:00:C4:F6:98:DA:4D:EA:53:9C:4E:01
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer:       /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial:       019844AC9BE11DE829DA2D142420DD90655F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 03:00:19 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:19 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:19 +0000
Files and hashes:         1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
                          2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
                          3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
                          4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: M+9iQZCyA4IOzooHbnNGU+qRYs1b++dbSv04Lst8hY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:9b:e1:1d:e8:29:da:2d:14:24:20:dd:90:65:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
        Validity
            Not Before: Jul 26 03:00:19 2025 GMT
            Not After : Jul 27 03:00:19 2025 GMT
        Subject: CN=10169a72717f999f5900c4f698da4dea539c4e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:d2:57:8d:b8:3f:8e:7b:20:c5:e1:8c:a2:
                    4f:db:fb:75:98:02:f0:e4:d6:fe:8b:48:59:36:50:
                    f9:14:c3:42:27:c8:36:c4:54:75:2e:d0:72:77:dd:
                    7b:7d:e3:f6:b9:33:94:16:4a:26:13:42:e3:6e:1f:
                    cd:68:a8:72:10:ab:5b:ea:0b:67:e2:c1:e8:6d:79:
                    a1:f5:1e:82:95:7a:35:a3:a4:28:7f:86:12:2b:c7:
                    77:34:8d:a9:bd:ba:e2:35:ea:64:a3:2f:85:99:58:
                    ec:7a:20:cd:f0:9b:6c:6e:39:86:7e:a3:18:4e:b8:
                    ce:b0:fe:82:18:12:f1:32:f0:ca:80:5f:96:10:03:
                    d5:8d:24:9e:da:70:41:34:b4:da:41:75:58:85:12:
                    37:a3:5c:ab:8f:99:19:8a:da:fb:c3:63:f1:9e:ad:
                    ff:7d:d4:f3:51:59:57:44:b9:d1:39:ff:52:d4:71:
                    e6:bd:01:2b:f8:53:df:49:62:2a:b5:16:27:a5:1d:
                    df:4a:7e:ef:07:e6:3d:fa:0c:92:5c:17:12:d6:64:
                    55:ad:a3:35:0b:5c:1d:b5:b7:86:13:ab:e7:ab:9e:
                    c1:6d:82:68:b8:a4:f0:58:38:96:b2:45:ad:71:40:
                    98:d5:c4:12:dd:c8:84:22:f0:55:9f:43:ba:bd:09:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:16:9A:72:71:7F:99:9F:59:00:C4:F6:98:DA:4D:EA:53:9C:4E:01
            X509v3 Authority Key Identifier:
                keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:61:aa:03:dd:9a:78:9e:bf:71:70:0e:5d:12:c2:f2:5e:
         fe:d9:79:a2:80:8b:cd:05:19:2e:e2:b7:5c:9c:13:8e:0b:ac:
         a8:33:6d:e4:15:f4:3b:aa:08:ef:78:49:44:e3:3f:f1:7d:f3:
         50:93:c3:c0:f6:b5:15:ac:4e:b5:4a:43:af:e3:45:f6:37:ae:
         ec:33:a6:a4:77:60:2b:9a:b6:b3:01:b6:2d:09:c7:03:2b:bb:
         e4:47:8e:a1:27:05:2e:f9:5a:41:ff:5c:13:95:52:e3:9c:fa:
         12:c6:c6:0f:b7:05:19:5c:57:37:78:7f:7d:f7:5a:51:74:f4:
         af:0b:98:67:99:31:75:a1:29:82:7b:90:9e:32:f6:1f:dc:d7:
         df:10:d2:8a:3a:87:c7:e4:2f:48:8c:13:b9:00:6d:bb:26:ee:
         54:1c:cd:d1:7d:c4:c1:00:25:75:a8:9d:15:b9:62:fd:ba:3c:
         d0:a1:94:9e:af:b9:e0:d7:e7:fc:b2:7b:3d:64:91:2f:d2:16:
         ec:ca:06:de:bc:82:a4:5f:0d:d0:fd:a0:a3:d9:b6:6a:a6:86:
         0f:c6:9c:28:1a:f6:60:2d:e8:13:a1:32:90:eb:5f:0e:38:8a:
         1a:9b:6d:14:51:4f:2b:6a:cb:86:3d:c6:42:2a:ed:01:ca:fc:
         20:16:54:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErJvhHegp2i0UJCDdkGVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjUwNzI2MDMwMDE5WhcNMjUwNzI3MDMwMDE5WjAzMTEwLwYDVQQD
EygxMDE2OWE3MjcxN2Y5OTlmNTkwMGM0ZjY5OGRhNGRlYTUzOWM0ZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7nSV424P457IMXhjKJP2/t1mALw
5Nb+i0hZNlD5FMNCJ8g2xFR1LtByd917feP2uTOUFkomE0Ljbh/NaKhyEKtb6gtn
4sHobXmh9R6ClXo1o6Qof4YSK8d3NI2pvbriNepkoy+FmVjseiDN8JtsbjmGfqMY
TrjOsP6CGBLxMvDKgF+WEAPVjSSe2nBBNLTaQXVYhRI3o1yrj5kZitr7w2Pxnq3/
fdTzUVlXRLnROf9S1HHmvQEr+FPfSWIqtRYnpR3fSn7vB+Y9+gySXBcS1mRVraM1
C1wdtbeGE6vnq57BbYJouKTwWDiWskWtcUCY1cQS3ciEIvBVn0O6vQmOWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAWmnJxf5mfWQDE9pjaTepTnE4BMB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuJhqgPd
mniev3FwDl0SwvJe/tl5ooCLzQUZLuK3XJwTjgusqDNt5BX0O6oI73hJROM/8X3z
UJPDwPa1FaxOtUpDr+NF9jeu7DOmpHdgK5q2swG2LQnHAyu75EeOoScFLvlaQf9c
E5VS45z6EsbGD7cFGVxXN3h/ffdaUXT0rwuYZ5kxdaEpgnuQnjL2H9zX3xDSijqH
x+QvSIwTuQBtuybuVBzN0X3EwQAldaidFbli/bo80KGUnq+54Nfn/LJ7PWSRL9IW
7MoG3ryCpF8N0P2go9m2aqaGD8acKBr2YC3oE6EykOtfDjiKGpttFFFPK2rLhj3G
QirtAcr8IBZU0A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:35:12 2025 by rpki-client