Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          qqdoB1qkAi9S53qwIqW2ZoAey0S1wlZakWiw7MCTxU4=
Subject key identifier:   C4:9C:84:82:93:BD:05:B3:94:06:EC:13:5E:E6:20:0A:59:32:04:4B
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       0199C67C9DF3613C8C5FA3F7C2229633425A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          16CA
Signing time:             Thu 09 Oct 2025 01:01:19 +0000
Manifest this update:     Thu 09 Oct 2025 01:01:19 +0000
Manifest next update:     Fri 10 Oct 2025 01:01:19 +0000
Files and hashes:         1: EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa (hash: APmjj8E3v76VLgRg+v7SdezJbT5vDpWvktN4FM1/GHk=)
                          2: QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa (hash: +v8M6N8Y0/MmQiQAMyBHFYzXCbEXjl19X7YGjBZ8sJQ=)
                          3: d3wHhLF7_F2drrnAq4ufIbIjpfM.roa (hash: KBpvQcL8WXArnGC0TPR+vAIeruDFeNliNeiATzVd2jY=)
                          4: hAVC08FxpJFnXfaeJz29NCq7Sug.roa (hash: ApHYhoJ0ZC5NYrtBeVMJI/3kAo+MHYIlbbcC8nWTcEw=)
                          5: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: Wysf7eSSWkkMLoY3/clxUPeXWbLpHBgVxMbUWsxsT/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c6:7c:9d:f3:61:3c:8c:5f:a3:f7:c2:22:96:33:42:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Oct  9 01:01:19 2025 GMT
            Not After : Oct 10 01:01:19 2025 GMT
        Subject: CN=c49c848293bd05b39406ec135ee6200a5932044b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:28:f2:57:dc:b6:c3:fd:f6:d3:6a:71:8a:
                    02:1c:1e:fd:00:74:26:30:61:de:b2:68:d4:53:a5:
                    e9:44:b6:6b:2a:53:d5:07:28:8f:94:27:ba:0a:7e:
                    08:c8:66:7e:b1:67:1a:3b:8f:91:84:90:58:ed:93:
                    69:4d:0f:54:2a:37:6e:d1:d5:ce:4d:b3:70:c7:f0:
                    2b:68:ef:b2:7d:9a:27:82:f3:e6:b4:a3:4b:3c:af:
                    99:a6:16:5a:d1:81:92:2e:6a:9b:2b:96:5e:61:e1:
                    1e:e2:6d:f6:44:76:6e:4e:d4:26:5a:91:34:2f:46:
                    3d:e5:69:99:86:67:b2:a0:20:c2:56:a5:28:7a:8a:
                    b3:eb:d7:09:9e:00:6a:6b:16:c6:54:3c:21:ca:72:
                    89:6f:44:ef:f8:22:83:83:86:f5:4b:02:df:37:ec:
                    e4:7b:d4:38:c1:0f:64:8a:84:7a:36:61:8d:1f:81:
                    72:3a:34:f5:8d:86:6b:6c:4a:b9:78:ae:7a:c4:42:
                    82:04:d3:11:47:3f:ed:e4:16:1d:2b:be:11:31:88:
                    03:85:a1:db:48:e3:20:70:7c:9a:b9:1d:eb:a6:32:
                    74:1d:3f:c9:27:a3:17:34:4b:dc:23:bf:af:ec:d6:
                    1d:26:50:be:e2:30:1f:59:d7:f3:81:11:3f:9f:c2:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9C:84:82:93:BD:05:B3:94:06:EC:13:5E:E6:20:0A:59:32:04:4B
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:31:df:22:9e:30:6f:3b:70:74:6b:df:ee:78:1f:cb:f9:
         ee:65:9d:74:cf:74:40:8f:27:64:ce:69:7c:55:a9:e9:48:cd:
         a5:a6:8d:2a:42:69:b8:8e:fd:30:05:31:de:dd:73:36:49:67:
         a4:7e:e8:5f:e5:3e:d1:94:41:36:1b:b7:5a:ae:bd:c7:c3:6a:
         2f:98:be:a6:b4:6a:e8:49:ac:11:0c:b9:30:04:21:f1:5a:af:
         f3:6a:bb:b3:33:3d:3e:8a:a1:a3:64:55:63:0b:da:b8:ed:54:
         48:07:9a:a7:94:5d:fe:ce:52:6b:1a:58:36:4f:65:de:bb:c1:
         75:2c:20:0f:f9:95:f4:02:a5:83:a7:0f:0e:6e:f9:fd:77:f3:
         c0:5f:66:f0:ff:81:9c:d7:f3:3e:22:b7:50:d4:22:0e:bc:92:
         36:0f:b8:18:29:ee:e3:42:6b:86:12:d8:55:83:5a:3f:d1:85:
         3f:36:7d:fa:80:1e:5e:26:98:cf:cf:ae:58:07:37:0a:c1:3c:
         cc:d6:f6:9a:6e:2a:ae:4e:fa:eb:c8:ba:78:10:60:87:2e:f3:
         b5:d4:b9:43:f7:c3:3d:3e:7f:49:90:1a:49:26:ee:6b:35:1f:
         fa:00:ec:26:e5:3c:c2:0d:20:01:f6:f6:f0:09:54:51:1a:a2:
         fa:b7:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:41:12 2025 by rpki-client