Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File:                     qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier:          NisFyCsN3FGiEZaXNBJ3QPufr5PAnB6nTW1RD97thZY=
Subject key identifier:   67:56:16:C2:B1:0C:66:A4:37:63:FE:51:EB:28:8D:3A:3F:18:24:BD
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       019A1F1AAAA8FE6ED4047F9FDBFCF2BDE264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number:          116D
Signing time:             Sun 26 Oct 2025 06:00:32 +0000
Manifest this update:     Sun 26 Oct 2025 06:00:32 +0000
Manifest next update:     Mon 27 Oct 2025 06:00:32 +0000
Files and hashes:         1: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (hash: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=)
                          2: X_mEYYeWr9-8-K3hPb_xZPAlhyU.roa (hash: 6DNXGEiBb6ULQJ057yIjE1b50LAb3WIwVPg+KL0u4Kc=)
                          3: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (hash: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=)
                          4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: Wnv6cAu0+b00DnAwaaXL2Ol2/Vb7+7cysRDK/ML/4mM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:1a:aa:a8:fe:6e:d4:04:7f:9f:db:fc:f2:bd:e2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: Oct 26 06:00:32 2025 GMT
            Not After : Oct 27 06:00:32 2025 GMT
        Subject: CN=675616c2b10c66a43763fe51eb288d3a3f1824bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:04:c3:1a:65:10:bf:f4:be:ae:4c:b6:b9:
                    54:b9:f8:d5:0e:78:4e:e1:e0:ca:0e:6e:c1:9a:a1:
                    33:62:47:6e:f5:20:a0:a2:7e:9e:62:81:18:5c:1c:
                    f2:f3:09:e8:80:5a:1d:93:bd:46:d4:26:ac:bc:15:
                    93:16:5f:e3:88:9e:01:2b:c2:db:7f:61:71:39:98:
                    9d:e6:a3:e0:d5:ec:06:9f:e1:77:b6:af:04:02:44:
                    11:b1:0e:25:2c:02:3d:ca:66:24:98:18:52:89:7e:
                    b3:6f:81:6d:80:9f:24:2d:3e:6d:4d:58:85:0e:78:
                    aa:5c:eb:bd:f6:55:d9:f5:17:f0:f9:27:ab:cf:00:
                    3c:13:aa:ca:0f:dc:d6:6e:73:69:d1:ed:e2:db:2b:
                    a2:f5:02:ca:ca:1b:c0:9c:04:e5:23:f9:2d:dd:69:
                    9b:7f:7f:c3:e8:d5:4d:4e:83:4a:ae:37:5d:cc:c3:
                    d9:e3:6f:da:ae:ff:a5:04:e4:23:a2:41:f8:69:af:
                    2f:98:9d:79:6f:f7:f7:e0:ba:eb:51:8e:d3:44:f8:
                    e8:c9:ab:77:d9:5c:71:ef:13:1b:22:c5:25:19:87:
                    ad:a3:27:db:fb:3a:49:f3:a7:9c:9c:a5:9b:4c:ae:
                    39:50:73:d1:2f:c3:73:41:1e:3a:08:bc:c4:7e:3a:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:56:16:C2:B1:0C:66:A4:37:63:FE:51:EB:28:8D:3A:3F:18:24:BD
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bd:97:52:59:6c:1a:48:84:37:3e:de:06:9c:39:03:fc:2e:
         6e:bc:28:0c:52:f6:a7:53:a4:1f:ee:02:c4:a6:4b:5c:c1:26:
         38:45:9a:6b:2e:ae:89:c9:df:72:f9:62:fc:16:c4:a9:4c:d0:
         da:3c:50:80:86:ae:3d:8f:39:de:d1:05:09:d2:6a:80:fe:52:
         13:49:ae:c6:7e:72:3f:47:4e:88:6b:99:0b:49:af:b4:79:99:
         c6:9b:8f:dd:99:f4:d3:d9:f8:9e:1a:f6:bd:88:cb:7c:20:32:
         07:3b:a0:94:8a:53:c3:82:f1:16:91:42:29:7a:c9:3f:2f:eb:
         ed:8d:d5:19:22:94:d5:1f:b9:0b:5f:76:e2:5a:87:3e:e1:ac:
         c4:71:05:ea:11:15:b4:a2:b8:67:a7:ad:66:b9:aa:cf:35:7a:
         0a:e7:38:bd:02:94:16:94:50:5b:a7:86:b4:f4:27:5b:4a:c9:
         61:8c:de:35:01:31:21:25:57:8e:ec:32:83:c5:e6:a7:cd:73:
         0a:92:38:64:1f:56:4d:f7:3d:75:0d:05:f8:9d:90:b0:71:f2:
         f2:a9:72:52:02:b6:13:86:d2:1e:35:d5:c7:92:aa:dd:79:c2:
         03:77:2c:53:08:e0:65:e8:d0:a6:e4:5c:48:26:70:8a:f9:b5:
         c8:49:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:16:36 2025 by rpki-client