Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          kxLK4SeyoXUcTnp8OmInDPw/TUO/JmpbRtQLntfn6wI=
Subject key identifier:   FC:FC:51:92:5F:3E:CF:51:59:C4:6F:5D:26:D5:01:5E:9B:6A:26:50
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       019A5FB151750BA648003AF0C66D8332A9CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          171F
Signing time:             Fri 07 Nov 2025 19:00:47 +0000
Manifest this update:     Fri 07 Nov 2025 19:00:47 +0000
Manifest next update:     Sat 08 Nov 2025 19:00:47 +0000
Files and hashes:         1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=)
                          2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=)
                          3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: JuMiR6dYUxH0ozgmt8uQAMA4DtUS8+LCdy4cAtfRRjE=)
                          4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=)
                          5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Nov 2025 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:5f:b1:51:75:0b:a6:48:00:3a:f0:c6:6d:83:32:a9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Nov  7 19:00:47 2025 GMT
            Not After : Nov  8 19:00:47 2025 GMT
        Subject: CN=fcfc51925f3ecf5159c46f5d26d5015e9b6a2650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:02:f2:46:75:0c:aa:f6:fe:22:48:18:69:
                    d2:44:7d:30:23:b2:62:0d:70:cf:89:cc:9b:5f:e2:
                    b4:23:29:6d:89:06:27:b7:94:ab:1c:a2:f7:57:17:
                    4e:b2:3c:6d:01:21:58:75:df:e5:ce:5d:22:e3:b5:
                    bc:1e:63:65:1d:2e:f4:f5:b9:3e:ee:41:f5:47:8a:
                    68:1c:a4:33:31:b8:f0:3f:78:89:a4:73:a9:2c:c4:
                    ef:3a:05:f1:5e:19:10:c5:61:39:0a:6c:61:fb:d2:
                    a9:82:67:f0:f8:8f:ed:31:71:a8:0d:81:1e:27:98:
                    97:c7:fc:b9:20:3b:7a:83:fa:c1:2e:73:df:3c:c4:
                    03:80:cd:57:33:c2:35:45:17:31:58:72:59:96:c8:
                    cd:97:de:ad:63:f4:5c:c5:89:45:ae:f0:0c:92:6e:
                    32:08:77:41:54:07:a9:47:c3:be:46:63:c5:a2:d4:
                    96:e0:9c:91:13:92:f5:d1:3a:50:8f:e7:57:80:bd:
                    7a:02:6c:da:27:ee:16:a7:5e:a9:c5:01:bd:8c:2b:
                    4b:8b:5b:46:e4:13:82:d5:f2:2e:e5:87:6d:50:ce:
                    9e:eb:87:d3:ba:9a:85:3a:d4:05:43:e4:fc:66:8a:
                    4a:16:a4:6b:7f:3a:fe:19:70:56:06:68:52:15:11:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:51:92:5F:3E:CF:51:59:C4:6F:5D:26:D5:01:5E:9B:6A:26:50
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:04:9a:83:99:3a:50:c3:66:66:e6:a6:68:42:6e:a2:03:3c:
         f0:c7:3d:eb:26:cf:ca:54:a0:50:32:ad:d6:2b:7b:52:ba:e3:
         66:99:c9:54:73:cf:d8:b6:30:69:a0:4d:c3:55:f2:67:7c:0b:
         08:4b:a1:f4:5e:d2:de:2d:ef:de:0a:28:e8:b5:48:15:06:b2:
         49:8b:27:32:85:c1:da:8c:c6:4c:c8:4e:20:f0:d7:5a:fe:b2:
         1a:58:6f:90:c7:23:73:8e:10:d6:d1:92:c2:28:13:d5:ea:72:
         56:d7:7c:48:d4:82:5a:d5:37:d9:9c:82:7b:5e:56:d6:3b:e9:
         e1:3e:56:e3:76:64:07:a6:49:11:7c:58:b5:a2:2e:bb:cd:d0:
         e9:df:89:69:d9:02:dd:f8:e3:44:bd:a7:3d:15:fa:2d:54:03:
         95:a0:f4:1d:55:2e:6e:18:3c:63:b5:6b:48:66:26:eb:f8:fd:
         45:f3:48:8e:11:fb:84:de:c8:b9:ee:36:dc:55:6d:fe:fd:3f:
         3f:01:7e:77:3d:69:91:de:34:09:99:e2:1b:af:43:c5:21:89:
         68:a4:eb:a7:30:c6:fc:91:92:87:9a:43:9d:33:93:a2:df:31:
         7a:06:00:87:93:45:b4:d6:27:95:fd:ee:38:bb:d0:18:ce:a8:
         54:86:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 23:42:15 2025 by rpki-client