Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File:                     qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier:          zulLQfax3FXuxm587uLGYyfmgrVxLIz9itLCwQd3Tl0=
Subject key identifier:   0B:81:AD:61:75:97:35:79:C6:30:37:9A:34:7B:AE:81:62:9D:2E:03
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer:       /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial:       019A300EF96BB876C4DFF225A7DA218B6A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number:          1664
Signing time:             Wed 29 Oct 2025 13:01:18 +0000
Manifest this update:     Wed 29 Oct 2025 13:01:18 +0000
Manifest next update:     Thu 30 Oct 2025 13:01:18 +0000
Files and hashes:         1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
                          2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: rdtkmz16ZSQqReDNg6ozWSfIFyVAMZ5OBEWSmQLzwyc=)
                          3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
                          4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:30:0e:f9:6b:b8:76:c4:df:f2:25:a7:da:21:8b:6a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
        Validity
            Not Before: Oct 29 13:01:18 2025 GMT
            Not After : Oct 30 13:01:18 2025 GMT
        Subject: CN=0b81ad6175973579c630379a347bae81629d2e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:3a:f6:eb:7c:be:89:1d:fd:d7:80:84:09:
                    01:fe:b5:e8:96:d3:22:35:39:9e:ca:66:a5:20:b2:
                    18:92:ef:07:e3:2a:2b:a6:de:2e:81:70:cb:6e:0e:
                    83:46:7e:63:cd:aa:da:e8:fe:28:72:22:48:27:f8:
                    5c:8f:f8:03:ff:42:08:c2:b8:09:0f:ad:c6:8c:60:
                    24:42:46:d5:38:d0:1e:06:74:1f:20:82:23:66:1d:
                    54:1c:a3:c6:63:c9:6c:0d:a4:e4:00:09:a6:86:f0:
                    4f:89:ce:6a:fc:79:d4:4e:46:66:d9:3a:9a:a3:7e:
                    73:e2:9c:93:89:f0:99:8f:42:2a:d0:57:de:0d:62:
                    66:5f:ed:2b:49:28:56:43:9b:03:b7:b4:b8:7b:84:
                    27:09:f2:80:11:73:06:bd:07:3c:ae:a8:44:da:c0:
                    ae:c2:bb:34:46:d2:5e:7d:2a:84:25:4f:a3:eb:e5:
                    ca:77:80:a2:62:06:ff:3b:3c:00:ae:eb:d5:89:a4:
                    c5:8c:43:32:72:8f:8a:71:40:83:5c:61:26:d4:33:
                    bc:bc:8e:1e:bc:34:2b:b5:a6:80:bf:cd:53:81:f9:
                    14:e1:ef:df:67:a6:50:26:5d:58:a4:92:c2:2a:10:
                    06:f5:81:67:56:2a:4c:de:34:d8:b4:d6:ec:e7:7e:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:AD:61:75:97:35:79:C6:30:37:9A:34:7B:AE:81:62:9D:2E:03
            X509v3 Authority Key Identifier:
                keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:16:80:58:ad:1b:a8:38:41:39:c1:43:b4:bf:dd:ed:63:59:
         50:85:9a:a8:07:ad:0d:86:88:50:1c:5d:e5:b6:71:5b:ad:a8:
         7e:6e:64:dc:82:16:b3:c7:ad:31:e8:6e:72:e4:90:35:d9:f6:
         8b:07:2a:d7:05:6c:24:f5:97:82:72:55:a3:50:23:05:11:1b:
         aa:8e:c9:f4:c3:5f:1e:51:28:50:21:a4:7e:d7:66:15:64:e7:
         de:ad:3b:ce:d9:82:41:d1:9b:63:fc:06:38:0f:87:4a:09:ca:
         6e:1b:91:24:cb:e9:0d:dc:83:a1:b9:b2:97:ab:bd:04:83:d0:
         9b:a9:8b:c6:05:35:d0:e5:21:05:21:13:40:3a:ee:9a:d0:5b:
         0b:36:93:8b:5d:df:eb:22:49:64:a0:f0:1f:79:24:3b:db:ce:
         f7:2e:07:59:bf:f3:e5:2c:87:ae:dc:fc:70:74:56:3e:18:03:
         c3:85:d7:7d:63:54:a2:84:66:82:4e:12:a6:56:15:a0:f5:7e:
         10:f2:a5:61:fe:d3:fc:49:61:30:56:38:0d:92:01:a4:49:cc:
         68:6b:9d:53:f2:d8:55:4e:eb:ff:60:6a:36:3e:46:e2:6f:65:
         8e:d5:0f:c3:b8:9f:e3:bf:c2:1b:5a:3b:c9:87:ff:05:23:33:
         22:22:76:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:27:47 2025 by rpki-client