Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          TOHYSOGGNpba7acYy2D2HwfOTkN9kzCgoGVFcGxsQY0=
Subject key identifier:   F3:27:6B:4C:5A:C2:48:9C:BA:D2:E2:0C:0F:CA:EE:15:13:4F:32:8B
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       019A7225E8A51B226A2BF710BA56AF573B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          1750
Signing time:             Tue 11 Nov 2025 09:01:18 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:18 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:18 +0000
Files and hashes:         1: 1-C7o4Sg1w_tMM8v1-Zzbx0qKuw4.roa (hash: 5hM/OQJSa5W9fafk6DZMK61IDj/N7aS0aUIw68dp1I0=)
                          2: b_NE7DVIfDXKb-MpYj6nT1XXano.roa (hash: p2sDMI4p8wkfemzISoM/DEW8q7cpoFG20Gw6CbldWQQ=)
                          3: bjYWIiRDJQJHClBhm5lHGbc7p3c.roa (hash: 2CHXRgaX05mE8dTCdvnAxjehUb/UlBCUBvMnngQZ4pY=)
                          4: e9ro14Q2CkVWo9tx9mS_DRjKoG0.roa (hash: hdEGtzXmNsVqaiQbsKpplmaz4uwwkN9r2YZS335CDho=)
                          5: eLM1tMA2-Prx-6AJmPfSxPTQ8ws.roa (hash: x3TEJF+lEhYQXreBGO5p/2V/eqc0Q9Afb2MZe1Qg0wg=)
                          6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: 1NaoOLKgZPZsxU4j00ie+i+SKWbk2Z40eppiryh41Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:e8:a5:1b:22:6a:2b:f7:10:ba:56:af:57:3b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Nov 11 09:01:18 2025 GMT
            Not After : Nov 12 09:01:18 2025 GMT
        Subject: CN=f3276b4c5ac2489cbad2e20c0fcaee15134f328b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:cd:c6:17:d5:3f:3d:e6:59:a7:53:a5:f6:
                    88:8f:82:b5:be:73:ee:96:8d:20:f8:06:5a:b5:ad:
                    48:1e:25:79:4f:7e:86:c9:84:86:80:bd:3d:fc:f7:
                    f8:7e:f7:01:3b:93:aa:22:f5:cf:f9:3a:d1:49:b6:
                    2d:04:a2:0f:2b:55:a9:8a:3c:62:be:92:e0:66:cf:
                    4a:7e:8b:5c:3d:29:bf:4d:33:b7:2c:c5:6b:62:22:
                    1d:3b:c0:14:b1:8f:6e:5a:6e:75:33:68:a7:2b:d1:
                    de:d3:70:72:4d:68:7a:ed:62:8b:d0:32:7c:f1:d9:
                    ae:41:88:e3:ac:8a:50:1d:fb:ea:e7:d4:51:9c:7d:
                    83:92:aa:69:ef:41:84:51:ff:1c:0f:d2:46:a0:bb:
                    fb:e0:ff:6d:43:fc:7e:c3:2a:ad:82:b0:da:35:4a:
                    60:dd:6d:28:43:89:33:4d:3f:52:72:11:58:d4:36:
                    5e:94:a0:af:a5:2b:dc:76:bd:1d:8d:0b:68:d4:a9:
                    51:24:fb:24:51:60:67:90:c6:84:ee:c4:bd:f2:27:
                    97:33:ad:01:87:09:77:56:16:20:c0:a2:1d:61:aa:
                    64:c7:04:2b:96:42:32:b2:34:84:f9:82:68:59:e0:
                    54:96:a1:2f:12:7f:a7:4b:1f:d7:e4:df:15:88:b5:
                    30:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:27:6B:4C:5A:C2:48:9C:BA:D2:E2:0C:0F:CA:EE:15:13:4F:32:8B
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9b:2b:26:6d:1d:93:63:fc:05:a8:11:20:dc:58:d4:4d:0e:
         19:29:84:8f:6a:55:5d:ac:3e:1f:e3:2a:17:05:6e:31:e7:d0:
         85:ec:0f:bc:64:fc:34:07:51:e2:33:9e:73:dc:0c:52:f9:9a:
         35:0d:e2:a0:79:77:73:a2:42:9c:a7:28:ca:48:e7:af:5f:27:
         7a:f0:39:b0:6f:a1:00:d2:c8:9d:fc:f0:73:47:7b:9e:5d:b9:
         b4:fb:5d:ac:11:b2:a3:44:e2:c0:8c:65:0f:70:49:86:e7:14:
         a2:9e:66:b3:12:4e:7e:d5:71:8e:c9:e7:4f:76:d5:34:de:89:
         e7:97:af:88:7d:1a:1d:e6:99:82:58:99:ef:4e:73:fc:ea:c4:
         bb:99:b9:ab:1a:60:65:a7:7e:ff:fa:d7:66:db:b3:e8:5f:85:
         b0:d5:15:82:9b:e5:05:3c:7a:5d:f7:b6:80:f8:f6:d7:c5:54:
         a5:60:62:e3:31:e0:1a:11:08:b8:91:cd:8f:4e:41:eb:3f:a7:
         31:8d:42:a9:bd:76:30:69:c7:db:4e:f6:4b:99:30:7a:a0:89:
         b5:ec:8f:b9:9b:ab:95:93:e7:a8:4a:53:53:a3:11:96:c0:77:
         e9:2f:2b:05:cb:df:80:be:10:5a:21:a8:f7:ac:02:2f:c4:c6:
         7c:67:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:41 2025 by rpki-client