Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
File:                     qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft (raw, json)
Hash identifier:          HqimdFeTLChVBtEq2lwc6qK4RDuak2ND18T8jq8h+mo=
Subject key identifier:   14:0A:3F:77:57:19:D2:38:FF:2F:9E:FC:1E:3D:5B:A0:57:68:B4:5B
Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A
Certificate issuer:       /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
Certificate serial:       019A25C171A93ADC46DE12BADB2748CF0CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
Manifest number:          0F53
Signing time:             Mon 27 Oct 2025 13:00:25 +0000
Manifest this update:     Mon 27 Oct 2025 13:00:25 +0000
Manifest next update:     Tue 28 Oct 2025 13:00:25 +0000
Files and hashes:         1: qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl (hash: eMvwt2Cnt5bAblhLYL4xqjj+O20MeTuzwOaO/Nt+yJs=)
                          2: z4Rtmz6t6c3uqXsk7WGqLCCEERI.roa (hash: JZepL6D/k4nJl6/C5sz18t6zxYuNfxZeSTEwoJkeNs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:c1:71:a9:3a:dc:46:de:12:ba:db:27:48:cf:0c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
        Validity
            Not Before: Oct 27 13:00:25 2025 GMT
            Not After : Oct 28 13:00:25 2025 GMT
        Subject: CN=140a3f775719d238ff2f9efc1e3d5ba05768b45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:ed:16:40:4b:02:25:b5:dc:be:68:09:a7:
                    6b:38:ee:c6:3c:10:29:03:a8:de:66:98:47:41:a4:
                    20:83:1e:c5:b3:0f:d6:d4:32:da:aa:d5:11:d9:dc:
                    af:55:09:a4:97:40:15:99:84:63:27:96:11:d9:d3:
                    4f:b4:fe:99:0f:52:20:5d:ed:b6:33:8d:ba:e8:84:
                    62:4d:75:14:ec:0c:1f:27:bb:a3:8e:57:6c:7b:14:
                    f5:33:f6:88:64:82:c5:d7:8c:68:08:6c:6d:da:e4:
                    9b:04:75:30:31:ae:92:c2:ad:65:bf:67:a1:df:08:
                    e4:da:ac:00:e3:da:0d:57:a5:30:ed:39:5d:f3:3f:
                    cc:49:c2:47:95:9c:95:84:67:71:52:b1:6a:88:44:
                    73:73:60:36:9a:13:b9:95:66:7d:75:74:f4:a0:d1:
                    d9:c4:2b:2c:db:65:ee:c7:e4:d3:c6:c4:c9:bc:08:
                    7a:6f:48:cc:b9:04:d5:65:f1:16:65:f3:f2:0d:86:
                    e4:a6:af:d4:31:40:32:ce:db:f5:ce:87:ed:9d:f3:
                    29:e1:13:6e:16:fa:df:81:c1:49:e4:98:89:65:1d:
                    22:ed:b4:f1:2f:37:73:b2:dd:aa:0f:99:d3:5a:de:
                    8f:a7:93:1b:28:64:82:21:4c:39:41:fc:89:76:1c:
                    a9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0A:3F:77:57:19:D2:38:FF:2F:9E:FC:1E:3D:5B:A0:57:68:B4:5B
            X509v3 Authority Key Identifier:
                keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:f5:c7:61:e7:ae:85:6b:77:18:1f:ce:1c:0a:e3:a0:aa:
         06:85:a8:22:1f:48:c7:37:29:89:b6:c7:71:e9:18:f1:93:70:
         07:8e:f1:af:28:55:13:8b:2d:cb:00:81:c4:46:21:7b:45:c0:
         31:5a:fc:3c:2a:8d:9a:89:78:ae:13:86:8a:ed:6f:61:3a:2a:
         20:84:77:74:3f:08:62:f8:d0:78:ec:25:eb:c7:63:4c:e8:7c:
         b8:3f:5d:ef:2d:18:5b:dd:11:11:d0:9b:90:ec:bb:15:93:5c:
         19:30:45:d0:47:31:cc:2c:c1:eb:5e:97:03:54:66:5c:ed:83:
         c6:2a:5b:18:80:b4:49:26:62:92:61:6c:40:a0:4a:73:a5:9a:
         65:9f:e5:da:b8:be:d7:a3:34:59:8c:a4:35:b0:2a:16:67:ca:
         0a:cc:a2:df:4c:76:65:eb:44:dd:0a:2b:b1:e8:1d:94:15:b6:
         07:be:6a:2c:9f:fd:a8:93:66:3e:2c:14:03:91:4f:58:40:dc:
         fe:15:4b:96:d3:45:12:cd:4d:16:19:67:6a:a1:c0:d4:87:d3:
         31:cf:fd:28:4b:4a:7b:b0:7f:9d:aa:5d:ff:25:98:ac:27:af:
         c7:0d:26:ad:e5:9d:b1:d4:49:17:97:bd:a9:2b:20:15:2b:94:
         86:b9:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:08:35 2025 by rpki-client