Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          JQSSjrJl/chQL0OPurA8TOaV0K7BAIupAmhZk6fBYBo=
Subject key identifier:   00:A6:72:2B:DA:80:BE:52:57:47:04:DF:F5:2C:69:01:AC:F9:E3:BF
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       019A0F0271BF4121BABBAD9E2A228733C629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          1745
Signing time:             Thu 23 Oct 2025 03:00:09 +0000
Manifest this update:     Thu 23 Oct 2025 03:00:09 +0000
Manifest next update:     Fri 24 Oct 2025 03:00:09 +0000
Files and hashes:         1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: VR7M4XupFZQ0uor30fO9o/nEFEIxdD6qlDLjpziKGsk=)
                          2: ND1NYLu6zZ2FEy12Pf1eVnXZPq0.roa (hash: mrFfu7/Lbvz3mzhATbipDaZp3Flqri4ba8NHOQprWCQ=)
                          3: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=)
                          4: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=)
                          5: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=)
                          6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=)
                          7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 03:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0f:02:71:bf:41:21:ba:bb:ad:9e:2a:22:87:33:c6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Oct 23 03:00:09 2025 GMT
            Not After : Oct 24 03:00:09 2025 GMT
        Subject: CN=00a6722bda80be52574704dff52c6901acf9e3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:7f:c9:70:f6:15:b5:90:53:99:de:b8:d6:
                    df:4c:65:3d:84:b1:3f:57:01:c3:f3:e3:6f:cf:61:
                    64:d3:10:14:52:7e:3a:1a:cd:b6:56:7c:92:dd:94:
                    42:e6:4b:6f:2d:7c:09:0b:a5:3a:d7:35:30:78:e0:
                    a3:f2:76:2c:dd:e7:f0:9c:d3:3e:11:a2:11:ac:1e:
                    70:02:71:63:f7:61:d1:ab:3f:90:c8:57:2c:77:66:
                    5d:dd:0b:dc:05:0f:13:81:5e:82:fd:ea:d3:88:da:
                    e3:81:5f:3d:2a:34:91:f7:d5:25:8a:19:3c:32:c3:
                    6a:8e:89:f5:31:82:38:f2:ab:48:78:57:ab:8a:f9:
                    78:16:34:cf:04:64:f2:5b:bf:7e:ab:f3:1d:cc:f8:
                    bd:59:13:c2:f5:07:6b:57:e9:2e:90:3a:5e:7a:43:
                    13:01:fc:2f:15:fe:11:68:03:f7:82:21:73:89:80:
                    53:86:dc:63:20:ab:2c:c9:0d:10:dd:3c:40:27:76:
                    31:62:54:1b:66:25:00:72:30:6d:70:bc:30:af:ac:
                    bb:a4:c7:08:e3:db:c3:97:76:9b:e4:0d:21:eb:57:
                    5d:1c:3a:ba:24:07:64:79:90:57:ab:f8:09:6f:67:
                    1b:32:44:58:ff:3d:e2:47:42:05:12:39:46:54:98:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A6:72:2B:DA:80:BE:52:57:47:04:DF:F5:2C:69:01:AC:F9:E3:BF
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:37:a7:ef:4f:b0:85:cc:61:7b:b4:b8:a0:69:81:ca:e8:
         94:00:be:46:2f:f5:b1:b0:c7:67:df:f9:65:1a:26:6c:d9:9f:
         5c:f0:bb:54:89:e7:41:ee:1f:58:25:f5:c7:58:da:ef:1b:29:
         3f:a7:8e:3d:dd:8d:10:c2:c4:c8:e9:b5:37:34:9b:48:b7:ab:
         4d:56:57:e4:a3:00:89:7f:56:72:d0:22:37:d6:b7:9e:93:0f:
         cc:3f:19:2f:67:ee:f5:11:f5:cd:0a:1c:9f:17:70:ed:b1:ed:
         60:9a:1f:74:a8:09:00:81:42:4f:6f:66:aa:6b:05:6f:29:81:
         06:a1:0d:06:02:e4:d4:ae:f4:03:b9:77:bf:9a:2e:2e:3d:d6:
         f9:0e:1d:9f:5e:90:36:89:0f:f6:f3:d5:fa:ee:1d:04:8d:0d:
         76:7f:e4:32:4b:6b:41:a5:22:23:44:ae:b5:24:30:53:4f:df:
         7d:31:95:c1:74:3e:ff:95:03:10:71:49:e7:aa:39:72:67:20:
         6d:72:cc:60:43:ac:13:10:09:a4:87:7f:aa:72:c7:1e:64:16:
         34:bc:fd:ab:da:8f:82:7c:28:88:87:83:8b:e7:44:ff:e2:93:
         7a:50:2a:d3:6e:76:64:b0:d6:cc:23:3b:ad:b1:47:15:1c:30:
         cc:ce:f8:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoPAnG/QSG6u62eKiKHM8YpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3
MWJlZjQwHhcNMjUxMDIzMDMwMDA5WhcNMjUxMDI0MDMwMDA5WjAzMTEwLwYDVQQD
EygwMGE2NzIyYmRhODBiZTUyNTc0NzA0ZGZmNTJjNjkwMWFjZjllM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9Z/yXD2FbWQU5neuNbfTGU9hLE/
VwHD8+Nvz2Fk0xAUUn46Gs22VnyS3ZRC5ktvLXwJC6U61zUweOCj8nYs3efwnNM+
EaIRrB5wAnFj92HRqz+QyFcsd2Zd3QvcBQ8TgV6C/erTiNrjgV89KjSR99Ulihk8
MsNqjon1MYI48qtIeFerivl4FjTPBGTyW79+q/MdzPi9WRPC9QdrV+kukDpeekMT
AfwvFf4RaAP3giFziYBThtxjIKssyQ0Q3TxAJ3YxYlQbZiUAcjBtcLwwr6y7pMcI
49vDl3ab5A0h61ddHDq6JAdkeZBXq/gJb2cbMkRY/z3iR0IFEjlGVJi3XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACmcivagL5SV0cE3/UsaQGs+eO/MB8GA1UdIwQY
MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt
ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz
LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWes3p+9P
sIXMYXu0uKBpgcrolAC+Ri/1sbDHZ9/5ZRombNmfXPC7VInnQe4fWCX1x1ja7xsp
P6eOPd2NEMLEyOm1NzSbSLerTVZX5KMAiX9WctAiN9a3npMPzD8ZL2fu9RH1zQoc
nxdw7bHtYJofdKgJAIFCT29mqmsFbymBBqENBgLk1K70A7l3v5ouLj3W+Q4dn16Q
NokP9vPV+u4dBI0Ndn/kMktrQaUiI0SutSQwU0/ffTGVwXQ+/5UDEHFJ56o5cmcg
bXLMYEOsExAJpId/qnLHHmQWNLz9q9qPgnwoiIeDi+dE/+KTelAq0252ZLDWzCM7
rbFHFRwwzM74Ug==
-----END CERTIFICATE-----
Generated at Thu Oct 23 12:04:02 2025 by rpki-client