Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File:                     dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier:          mPYgUeRKrikEb9OYlh6j1TBJ6m5zaRdm/HUkRYmdqZ0=
Subject key identifier:   90:CF:40:CB:CE:00:39:0F:B7:AA:3C:D1:73:6F:B7:E8:17:F8:3F:E5
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer:       /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial:       019A228AD834D4CF64CCA58C620935039E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number:          1688
Signing time:             Sun 26 Oct 2025 22:01:55 +0000
Manifest this update:     Sun 26 Oct 2025 22:01:55 +0000
Manifest next update:     Mon 27 Oct 2025 22:01:55 +0000
Files and hashes:         1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=)
                          2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: 3j6GG/rw18oyt/2cqYW3FYf1tgZJiD+cmxE2g3ZvqG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 22:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:8a:d8:34:d4:cf:64:cc:a5:8c:62:09:35:03:9e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
        Validity
            Not Before: Oct 26 22:01:55 2025 GMT
            Not After : Oct 27 22:01:55 2025 GMT
        Subject: CN=90cf40cbce00390fb7aa3cd1736fb7e817f83fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:ff:d0:d7:d1:6e:0a:23:67:18:79:84:7e:
                    ee:34:80:7f:ca:26:b6:f1:cf:38:9e:40:57:bc:cb:
                    63:a4:bd:14:31:35:1f:db:8b:90:ed:ec:74:dd:c5:
                    c0:76:6c:fd:47:39:5e:47:2c:92:08:11:c2:9e:a2:
                    2e:64:d6:76:c4:f9:36:73:46:1a:b2:98:6f:c9:27:
                    b4:79:be:0e:a3:12:b5:2d:3d:11:f8:7e:25:ae:df:
                    89:4b:82:f9:5f:21:8f:77:ae:4f:dc:f7:b5:12:ff:
                    59:bb:ea:3c:51:b2:ad:49:f0:a9:0f:3e:a4:7a:4b:
                    9c:54:f3:e8:43:59:ee:96:24:91:7b:d3:eb:4f:33:
                    6a:3a:a3:bb:99:52:5f:9a:ea:de:1c:f8:24:43:10:
                    86:aa:f1:b0:29:9a:6a:94:b8:76:e5:26:dc:e7:95:
                    14:0a:b2:3c:cd:1f:f0:92:3d:61:a7:17:74:17:1d:
                    38:ab:b9:ab:f3:c2:d6:13:0b:b1:d8:0a:6f:70:b9:
                    42:89:ec:ac:a6:28:b0:8d:ba:a7:e3:e4:3b:e0:68:
                    33:3d:d2:eb:28:4e:bc:84:40:37:0d:f2:71:90:19:
                    e8:76:f8:a5:20:96:62:46:6a:ba:c0:58:42:8b:c2:
                    82:47:5c:b4:96:8a:47:6d:b7:3c:d8:b6:a5:11:d2:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CF:40:CB:CE:00:39:0F:B7:AA:3C:D1:73:6F:B7:E8:17:F8:3F:E5
            X509v3 Authority Key Identifier:
                keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:40:61:16:66:96:cd:d8:0b:32:8b:6d:23:3d:b2:73:17:
         3d:3b:c4:c4:75:75:0f:7b:cd:4c:d6:be:ec:16:52:a1:05:41:
         07:3a:80:6a:99:0d:58:e9:ab:64:51:a7:ca:20:ae:87:ac:18:
         51:bc:c1:7f:d8:4f:75:fe:92:1f:47:53:2a:aa:36:fd:39:f1:
         98:53:e8:2b:a7:46:b8:fa:f3:ff:12:33:ee:12:f9:ab:6b:92:
         3e:39:ee:3a:d6:95:82:53:cd:e0:44:a0:3a:ad:90:5b:87:94:
         ee:55:73:0e:a5:72:96:46:b1:b3:ba:79:8e:49:b4:41:39:43:
         c0:2a:0b:74:f9:11:5e:5c:32:d7:34:e3:e2:0c:b7:38:31:0a:
         1e:d3:53:88:1b:57:58:4a:1c:e1:63:b5:31:8d:c1:3a:23:0a:
         e4:53:50:1e:ba:6d:d5:c8:42:98:c2:b9:d0:85:4e:25:ff:b1:
         66:ea:03:2c:8c:bd:18:e0:7e:af:72:e3:ac:fb:81:9c:a3:2f:
         c0:9b:26:f8:29:93:09:4e:f4:7e:6b:ce:87:e5:c6:63:99:fd:
         de:40:19:b6:35:f4:20:62:b0:fa:4d:08:c6:19:51:73:2a:17:
         45:f1:e9:0a:50:17:7f:62:30:8d:8f:fc:62:91:78:c0:76:75:
         ca:ac:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:23 2025 by rpki-client