Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
File:                     qMbudsTo2UYU4IJQX_6MmRokr4o.mft (raw, json)
Hash identifier:          W7D33HdToI5qT6K/co1OsVHqAtmFbRUCE8I4klvKUtU=
Subject key identifier:   CA:BB:E4:E6:13:52:4E:60:DC:6F:B0:6F:B5:F8:11:29:9F:B2:5F:6A
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Certificate issuer:       /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial:       019A706E192AD3D056531607D836EB67DEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
Manifest number:          1383
Signing time:             Tue 11 Nov 2025 01:00:54 +0000
Manifest this update:     Tue 11 Nov 2025 01:00:54 +0000
Manifest next update:     Wed 12 Nov 2025 01:00:54 +0000
Files and hashes:         1: WTYKu26kIWjOTIQNkx9XhusumzA.roa (hash: jdR1zGE/VerZVpVMdByTcrJDOg5A7+iJoxqGyTD0+wQ=)
                          2: qMbudsTo2UYU4IJQX_6MmRokr4o.crl (hash: Y02Q06daLaQTqn9Vchw3wmMyuU0qu2u7//oeboiZ+eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:6e:19:2a:d3:d0:56:53:16:07:d8:36:eb:67:de:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
        Validity
            Not Before: Nov 11 01:00:54 2025 GMT
            Not After : Nov 12 01:00:54 2025 GMT
        Subject: CN=cabbe4e613524e60dc6fb06fb5f811299fb25f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:d6:b1:ef:32:81:fb:4c:be:b7:32:01:5d:
                    a6:a3:2e:43:7e:61:49:88:b8:23:ea:3c:92:5d:dc:
                    32:8f:5e:c8:70:50:24:7a:ca:ee:db:67:57:80:a1:
                    cd:5f:c2:69:9a:ca:41:da:5e:72:d6:ff:13:d2:59:
                    bb:ad:b5:bb:02:90:c1:84:ef:e3:9a:9a:51:5f:ce:
                    8e:74:06:fc:1f:bb:66:9a:a5:55:66:99:ed:48:92:
                    a2:a1:ec:91:4d:d5:c6:f2:19:cb:53:c2:d9:a9:81:
                    3a:ed:9e:35:f7:50:35:2e:1f:43:02:f5:bd:59:6d:
                    03:c7:c7:22:b2:bf:1c:c0:b6:f4:cd:20:27:2a:fd:
                    5f:2d:0f:29:61:06:58:f8:26:96:5f:dd:4e:0a:a4:
                    77:9f:86:df:ac:d3:f4:5a:93:e7:99:a2:37:33:49:
                    fe:6a:04:40:b9:4f:b0:3a:92:5b:69:0d:fd:57:43:
                    66:78:76:02:ec:62:05:11:d0:4b:5f:5a:74:1c:69:
                    52:04:59:31:d6:64:c6:2c:38:61:a0:34:db:39:61:
                    ef:67:1a:a5:f9:d0:eb:d6:1e:73:f4:6b:8d:bc:c6:
                    40:d8:fc:94:aa:19:98:ef:69:f8:3c:c0:27:d3:6b:
                    88:8c:32:61:ba:1f:ed:e7:40:69:ad:95:a2:01:87:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BB:E4:E6:13:52:4E:60:DC:6F:B0:6F:B5:F8:11:29:9F:B2:5F:6A
            X509v3 Authority Key Identifier:
                keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ea:0b:ae:9f:5a:24:69:d1:2e:69:63:f8:a8:1a:1f:5c:41:
         59:08:71:99:a2:05:ac:88:36:b0:83:35:75:4f:ef:e4:8b:46:
         fc:14:e1:8b:17:f4:37:5d:fd:16:f4:3d:f8:29:52:13:ad:84:
         a5:e3:bd:c9:19:91:7a:cd:95:3d:f3:86:d5:0d:a9:28:1a:2e:
         65:32:4d:dd:68:66:ab:33:db:2a:18:c9:fc:75:34:79:98:22:
         3a:e6:f2:d2:7b:ab:26:91:7c:78:12:88:5d:be:28:68:4f:56:
         59:f7:10:23:d6:59:d5:69:2a:ad:be:ce:b8:79:f8:2c:c8:8c:
         7e:c3:e6:b3:3a:99:2c:80:d5:83:b6:a7:ae:48:8d:16:b5:5a:
         32:9e:36:a8:0a:8e:67:e8:47:25:79:45:51:0d:a0:47:fc:4f:
         e0:2d:3e:33:81:67:aa:c0:a6:60:c2:b4:79:d1:91:96:08:9e:
         50:3e:0a:98:bf:5d:45:35:58:7a:a9:f9:c4:e8:34:bd:06:3d:
         c3:49:f8:c9:36:57:09:7f:8a:0e:e6:cc:52:a7:16:16:c6:07:
         46:a3:4e:9a:d2:77:7c:32:36:26:4f:77:39:28:ef:a3:90:8f:
         d1:cc:d2:e2:cb:9c:37:81:05:88:e0:d2:49:12:25:1e:cb:41:
         10:4c:80:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbhkq09BWUxYH2DbrZ96hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YzZlZTc2YzRlOGQ5NDYxNGUwODI1MDVmZmU4Yzk5MWEy
NGFmOGEwHhcNMjUxMTExMDEwMDU0WhcNMjUxMTEyMDEwMDU0WjAzMTEwLwYDVQQD
EyhjYWJiZTRlNjEzNTI0ZTYwZGM2ZmIwNmZiNWY4MTEyOTlmYjI1ZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmnWse8ygftMvrcyAV2moy5DfmFJ
iLgj6jySXdwyj17IcFAkesru22dXgKHNX8JpmspB2l5y1v8T0lm7rbW7ApDBhO/j
mppRX86OdAb8H7tmmqVVZpntSJKioeyRTdXG8hnLU8LZqYE67Z4191A1Lh9DAvW9
WW0Dx8cisr8cwLb0zSAnKv1fLQ8pYQZY+CaWX91OCqR3n4bfrNP0WpPnmaI3M0n+
agRAuU+wOpJbaQ39V0NmeHYC7GIFEdBLX1p0HGlSBFkx1mTGLDhhoDTbOWHvZxql
+dDr1h5z9GuNvMZA2PyUqhmY72n4PMAn02uIjDJhuh/t50BprZWiAYfRJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq75OYTUk5g3G+wb7X4ESmfsl9qMB8GA1UdIwQY
MBaAFKjG7nbE6NlGFOCCUF/+jJkaJK+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU1idWRzVG8yVVlVNElKUVhfNk1tUm9rcjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MWJmMDMtNjk1Yy00YmIxLWExMGMt
ZTdlZGViYTdiNzAyLzEvcU1idWRzVG8yVVlVNElKUVhfNk1tUm9rcjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MWJmMDMtNjk1Yy00YmIxLWExMGMtZTdlZGViYTdiNzAy
LzEvcU1idWRzVG8yVVlVNElKUVhfNk1tUm9rcjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOoLrp9a
JGnRLmlj+KgaH1xBWQhxmaIFrIg2sIM1dU/v5ItG/BThixf0N139FvQ9+ClSE62E
peO9yRmRes2VPfOG1Q2pKBouZTJN3WhmqzPbKhjJ/HU0eZgiOuby0nurJpF8eBKI
Xb4oaE9WWfcQI9ZZ1Wkqrb7OuHn4LMiMfsPmszqZLIDVg7anrkiNFrVaMp42qAqO
Z+hHJXlFUQ2gR/xP4C0+M4FnqsCmYMK0edGRlgieUD4KmL9dRTVYeqn5xOg0vQY9
w0n4yTZXCX+KDubMUqcWFsYHRqNOmtJ3fDI2Jk93OSjvo5CP0czS4sucN4EFiODS
SRIlHstBEEyAFw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:20 2025 by rpki-client