Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
File:                     Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft (raw, json)
Hash identifier:          Yb8fbyKxQbSM/W8zSVqtyTvpXFr48nBRYXamjq5Lsm0=
Subject key identifier:   A7:B6:D9:43:6D:AB:D8:5F:38:B9:71:71:CF:79:CB:F6:CB:FA:E3:EA
Authority key identifier: 43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21
Certificate issuer:       /CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
Certificate serial:       019A72259FA75D1BDDDD8E301E58254DC1F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
Manifest number:          13C6
Signing time:             Tue 11 Nov 2025 09:00:59 +0000
Manifest this update:     Tue 11 Nov 2025 09:00:59 +0000
Manifest next update:     Wed 12 Nov 2025 09:00:59 +0000
Files and hashes:         1: FIyTe6Z5c9SlUs06XwKmTie5dUo.roa (hash: uOWoCbldz8pcJx7RQheZzjsLIzs/KJyulSs2wwLgbgk=)
                          2: Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl (hash: tUecqjUm6GHFpMX6EL4tOQvN1gcULZElN14YmJIU1z4=)
                          3: odf_RloZld2f_C46K0BxlJYlBTY.roa (hash: EYo1H2ZwWe4UAQYrwYPYwqTrp1mcr6TNxmVLEo1rbg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:9f:a7:5d:1b:dd:dd:8e:30:1e:58:25:4d:c1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432ebe0b60bae2ecbf21ef14fc5fdc9ddb9a3f21
        Validity
            Not Before: Nov 11 09:00:59 2025 GMT
            Not After : Nov 12 09:00:59 2025 GMT
        Subject: CN=a7b6d9436dabd85f38b97171cf79cbf6cbfae3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:81:cb:e2:86:73:d2:69:d4:ab:90:77:5a:
                    d6:82:56:17:66:7f:7e:3c:2e:6b:d8:cc:00:c4:7b:
                    46:f0:d2:e7:ba:e0:fa:1a:aa:83:1c:14:2b:bb:ec:
                    66:f9:66:22:4f:b7:25:00:b8:9f:d9:3a:7a:21:19:
                    de:e6:6d:e1:99:0b:d3:2d:58:5c:d2:ef:b2:8f:a4:
                    be:a4:e4:b3:d8:99:b0:2d:9d:79:97:b6:78:cb:60:
                    06:05:48:22:32:8d:35:90:00:79:2a:57:b1:3e:53:
                    dc:7d:80:e1:08:18:71:53:dc:8f:79:fb:4b:f5:40:
                    76:db:10:90:f0:16:78:7a:58:70:c5:34:9c:df:cb:
                    fa:e6:16:fd:29:6a:cc:f4:8d:c1:08:de:1d:82:02:
                    54:75:cb:84:86:bd:6a:ac:9f:bf:42:2f:e3:97:58:
                    39:a0:80:8d:b8:0a:f2:6a:51:25:45:63:de:78:f1:
                    52:5b:3c:06:0c:da:a7:d9:98:3f:50:a1:f0:f9:ae:
                    a9:74:99:99:e4:ed:d2:26:f3:e2:7d:fc:f7:42:66:
                    18:f0:ae:26:2e:e7:4e:4d:ed:ee:b1:77:e8:bd:d5:
                    bb:6b:5a:f9:89:3e:4d:4b:b7:49:a3:b3:c4:b5:34:
                    fc:cf:2a:1d:75:61:bf:2e:70:32:85:f3:ad:d0:0d:
                    48:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B6:D9:43:6D:AB:D8:5F:38:B9:71:71:CF:79:CB:F6:CB:FA:E3:EA
            X509v3 Authority Key Identifier:
                keyid:43:2E:BE:0B:60:BA:E2:EC:BF:21:EF:14:FC:5F:DC:9D:DB:9A:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy6-C2C64uy_Ie8U_F_cnduaPyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/54c70d-f57a-4a56-b20c-1399ad37c4e3/1/Qy6-C2C64uy_Ie8U_F_cnduaPyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:13:bb:88:88:2c:c6:be:eb:2c:20:2d:8a:1b:27:5c:d9:e7:
         a4:19:a7:9d:ce:df:60:66:58:b9:2d:6b:a0:f8:f5:c3:45:25:
         37:45:18:7c:f4:ce:ef:ac:17:b1:e1:90:d6:d2:7f:50:7f:71:
         99:d3:d5:a7:a8:cc:8f:23:03:68:e5:9c:76:9a:28:ea:36:cb:
         48:d7:8c:b1:c6:97:7a:6b:04:70:0e:ec:67:dc:cc:d8:01:8d:
         90:a0:97:24:54:91:5f:a9:27:bc:a2:c2:af:97:89:6a:db:88:
         8b:c2:4a:b0:e9:22:0d:cb:b6:41:00:17:cb:94:bb:85:0c:a7:
         3b:4f:5f:16:03:f8:32:0c:48:15:95:34:56:eb:19:3e:86:ae:
         cd:ac:aa:7f:b5:f2:32:a4:36:ee:b6:83:ed:a6:4b:fc:c9:28:
         b5:50:7d:99:8c:f4:5d:f3:1d:27:f9:8b:88:af:a7:2b:ee:f7:
         14:d6:63:84:b9:a7:8c:f8:22:b1:9a:5f:d8:c3:a4:f4:fc:f8:
         e6:30:3a:54:6d:55:30:51:12:9c:eb:d1:cb:02:89:cd:66:d4:
         13:35:8f:97:2c:7d:c0:68:f1:54:24:ca:55:79:93:d2:91:f6:
         7f:7b:2b:eb:0a:b9:6e:e3:7e:d5:ce:64:18:a6:65:8a:29:85:
         c8:f8:78:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJZ+nXRvd3Y4wHlglTcH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmViZTBiNjBiYWUyZWNiZjIxZWYxNGZjNWZkYzlkZGI5
YTNmMjEwHhcNMjUxMTExMDkwMDU5WhcNMjUxMTEyMDkwMDU5WjAzMTEwLwYDVQQD
EyhhN2I2ZDk0MzZkYWJkODVmMzhiOTcxNzFjZjc5Y2JmNmNiZmFlM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZKBy+KGc9Jp1KuQd1rWglYXZn9+
PC5r2MwAxHtG8NLnuuD6GqqDHBQru+xm+WYiT7clALif2Tp6IRne5m3hmQvTLVhc
0u+yj6S+pOSz2JmwLZ15l7Z4y2AGBUgiMo01kAB5KlexPlPcfYDhCBhxU9yPeftL
9UB22xCQ8BZ4elhwxTSc38v65hb9KWrM9I3BCN4dggJUdcuEhr1qrJ+/Qi/jl1g5
oICNuAryalElRWPeePFSWzwGDNqn2Zg/UKHw+a6pdJmZ5O3SJvPiffz3QmYY8K4m
LudOTe3usXfovdW7a1r5iT5NS7dJo7PEtTT8zyoddWG/LnAyhfOt0A1IXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKe22UNtq9hfOLlxcc95y/bL+uPqMB8GA1UdIwQY
MBaAFEMuvgtguuLsvyHvFPxf3J3bmj8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NGM3MGQtZjU3YS00YTU2LWIyMGMt
MTM5OWFkMzdjNGUzLzEvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NGM3MGQtZjU3YS00YTU2LWIyMGMtMTM5OWFkMzdjNGUz
LzEvUXk2LUMyQzY0dXlfSWU4VV9GX2NuZHVhUHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERO7iIgs
xr7rLCAtihsnXNnnpBmnnc7fYGZYuS1roPj1w0UlN0UYfPTO76wXseGQ1tJ/UH9x
mdPVp6jMjyMDaOWcdpoo6jbLSNeMscaXemsEcA7sZ9zM2AGNkKCXJFSRX6knvKLC
r5eJatuIi8JKsOkiDcu2QQAXy5S7hQynO09fFgP4MgxIFZU0VusZPoauzayqf7Xy
MqQ27raD7aZL/MkotVB9mYz0XfMdJ/mLiK+nK+73FNZjhLmnjPgisZpf2MOk9Pz4
5jA6VG1VMFESnOvRywKJzWbUEzWPlyx9wGjxVCTKVXmT0pH2f3sr6wq5buN+1c5k
GKZliimFyPh4HQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:36 2025 by rpki-client