Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
File:                     _QsmgyFXCqBCF7NThHwQv3MSVLU.mft (raw, json)
Hash identifier:          erEE2j9PruPz7uv2+mO9hUYfgqN9GpOBsist+ZAYkcQ=
Subject key identifier:   3E:76:59:99:CE:E2:AD:CE:50:A9:05:56:29:27:E0:EF:A9:A4:F8:A5
Authority key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Certificate issuer:       /CN=fd0b268321570aa04217b353847c10bf731254b5
Certificate serial:       019A1F1B07847D485F2C05D608A89BA4F6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
Manifest number:          16F5
Signing time:             Sun 26 Oct 2025 06:00:56 +0000
Manifest this update:     Sun 26 Oct 2025 06:00:56 +0000
Manifest next update:     Mon 27 Oct 2025 06:00:56 +0000
Files and hashes:         1: Th8E4wMERzzrtf61mMlHU7T-O1E.roa (hash: fBxF7gzjtDOzJ+1yYpryOgnsRtCjhNj/m+OItkfcoW4=)
                          2: _QsmgyFXCqBCF7NThHwQv3MSVLU.crl (hash: +Vwu0uWZGstIm4jV/k7Xim2nIIDEzmq5qCiO0bLEG0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:1b:07:84:7d:48:5f:2c:05:d6:08:a8:9b:a4:f6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd0b268321570aa04217b353847c10bf731254b5
        Validity
            Not Before: Oct 26 06:00:56 2025 GMT
            Not After : Oct 27 06:00:56 2025 GMT
        Subject: CN=3e765999cee2adce50a905562927e0efa9a4f8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9f:17:16:fd:dd:07:cd:3c:a0:27:e9:0c:5f:
                    ef:32:85:d9:ec:1b:ec:ce:6a:e8:39:ee:e5:1a:45:
                    61:7b:9b:8f:f2:51:89:d7:95:fb:6b:bb:53:a2:4f:
                    d5:ea:73:d2:ab:1a:09:e8:86:50:97:a6:6e:b9:e5:
                    32:20:84:1f:d3:c4:0d:78:c8:87:14:6e:62:7a:39:
                    dd:01:a8:60:16:9f:83:a2:e5:53:c3:a1:1b:82:8a:
                    1b:68:65:09:78:87:cd:73:ed:1c:3b:4d:f4:44:da:
                    53:31:b0:c9:32:85:47:6a:c7:eb:14:1b:47:05:af:
                    30:47:82:c6:5f:35:2f:0f:b2:44:94:02:47:7a:31:
                    d2:33:f0:9b:60:66:e4:53:f8:88:ac:64:4b:9f:ce:
                    7f:34:e5:37:42:9e:fa:99:61:2b:14:49:78:5f:cb:
                    57:3c:78:64:93:3d:5e:7f:52:ad:30:04:01:ed:71:
                    e7:e7:6b:eb:3c:df:8d:1a:55:5c:c3:4c:d0:52:fb:
                    90:f6:24:55:70:c1:b1:a7:24:ca:8d:cd:6a:76:68:
                    ed:9d:1d:a4:b3:b3:d3:c4:23:96:03:a6:8c:d1:92:
                    31:bf:8f:0e:84:fb:97:04:07:76:45:1c:aa:c8:5f:
                    65:17:56:4f:5e:18:2e:bf:cd:90:7a:78:0e:e1:d0:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:76:59:99:CE:E2:AD:CE:50:A9:05:56:29:27:E0:EF:A9:A4:F8:A5
            X509v3 Authority Key Identifier:
                keyid:FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a7:57:40:d3:a9:fc:51:18:5a:76:ba:12:04:28:53:7d:83:
         c5:56:b1:f6:dd:3d:b6:ad:d6:05:04:bd:89:a0:ba:a0:65:ce:
         63:89:3d:78:c5:7e:67:16:74:42:f7:d7:06:a7:de:a6:b4:b9:
         bd:ff:d1:5f:f8:9e:e3:2c:d3:5d:f3:bd:d1:5a:dc:e5:29:4d:
         6f:60:18:1e:57:6c:5f:4a:8d:70:55:58:cc:25:2b:34:33:16:
         a1:48:05:04:f3:2e:5b:d9:fb:14:06:c1:b8:68:ef:55:81:14:
         b1:f7:d1:64:db:b3:9c:fd:e3:9b:67:89:b8:90:15:ce:14:51:
         10:f0:4a:b0:d1:b7:92:73:83:13:1c:f1:12:7d:0b:ad:eb:1d:
         5c:24:5a:bb:c9:a8:31:de:8b:31:38:7d:c7:f4:ab:f7:15:a8:
         12:4d:b5:39:0e:97:12:67:4d:d4:09:36:5f:0c:88:d7:62:3b:
         f5:db:f2:ba:7c:08:df:df:d9:96:ec:91:68:0c:b3:06:de:e3:
         5d:ea:6c:d3:bb:26:ad:2b:25:02:4f:0e:65:1f:41:c1:8f:48:
         91:d9:ef:a5:3b:fb:13:62:b3:82:bd:5b:41:68:db:86:2a:40:
         15:6e:6a:27:d9:8c:97:1e:82:94:8d:1c:e2:98:d8:3c:c7:23:
         a6:99:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:53:19 2025 by rpki-client