Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          9JsOWMxK8l8r3xXhgnXXMpL2mwEDA3e92pjr1yohuEo=
Subject key identifier:   95:52:B5:A1:40:3F:BD:DD:77:DA:D9:8E:94:67:67:3E:72:77:1C:66
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       019A2C9F930624234359DA2DB26258F84A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          16FE
Signing time:             Tue 28 Oct 2025 21:00:46 +0000
Manifest this update:     Tue 28 Oct 2025 21:00:46 +0000
Manifest next update:     Wed 29 Oct 2025 21:00:46 +0000
Files and hashes:         1: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: eh+eXd0BuCz3+o72ERyN/YfjA3zBHEgwrOB522tgnUI=)
                          2: S6s1MZvjGFTRPk9vZPziFkYY6qM.roa (hash: ToU3MZhIjvRp74FUEtCCsRrFPES+LOdbmLPRk+Oahhc=)
                          3: dsWRyZzKIXE-_o05dhzwQLK-Lbk.roa (hash: VWsGICYRCZ2YCd/cztWs6r3W91Apf8NSGDgQ7RjrOcc=)
                          4: g-0mYXlZCCbY8bUpprXLVbOiC9A.roa (hash: hFmcyS+hXU9/y3wiy+mf+wC/haCuFA1o+qKC1n/PUV4=)
                          5: o1EPY-XxVbxJyaIoWSUC8RQCjcc.roa (hash: Kquty1N0A29MJH0xvyL5yuCvTt71jZz0jcczxSEKzL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2c:9f:93:06:24:23:43:59:da:2d:b2:62:58:f8:4a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Oct 28 21:00:46 2025 GMT
            Not After : Oct 29 21:00:46 2025 GMT
        Subject: CN=9552b5a1403fbddd77dad98e9467673e72771c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:49:2b:08:10:3d:24:41:b7:b1:56:f0:c2:
                    6a:cd:9a:cc:0b:55:a2:f6:48:48:e8:ac:d6:18:c2:
                    14:3a:c4:8f:a9:03:9a:d3:48:ca:85:c7:a1:e8:62:
                    d4:4c:18:f2:a4:6a:00:a0:63:76:19:f1:bc:44:d8:
                    b9:6c:aa:a9:41:32:90:ec:c2:9b:d9:bb:c1:3c:d4:
                    c9:04:a0:b4:db:0e:76:ec:b1:6a:b9:50:78:3f:95:
                    8d:68:94:84:54:f0:20:86:87:ff:ed:ed:00:6c:35:
                    70:9a:98:e5:ac:3e:df:ad:22:d9:22:3f:ec:11:9d:
                    8a:9e:87:5c:79:00:0e:a0:3e:54:0c:84:f2:1c:9f:
                    3f:18:fb:71:45:79:bc:30:4e:02:ff:40:a5:bd:55:
                    6a:d1:2d:85:59:57:54:31:98:03:53:43:46:2e:09:
                    c2:11:fb:d5:89:d5:a1:85:ce:58:88:8f:47:e6:23:
                    51:1f:96:36:46:76:af:50:a1:cc:46:a3:43:38:93:
                    e9:17:4e:22:64:e4:da:37:44:d7:04:b8:3a:4d:8b:
                    68:4a:11:d0:bb:87:31:2f:b5:b0:3f:62:eb:03:9c:
                    ce:cb:cb:16:17:2c:d0:bf:fa:ad:bc:c4:46:5a:4d:
                    4e:e0:05:46:00:e5:96:9c:00:8c:f3:c1:bb:e2:08:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:52:B5:A1:40:3F:BD:DD:77:DA:D9:8E:94:67:67:3E:72:77:1C:66
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:28:d8:80:6e:f7:1c:7e:b5:34:21:98:d5:ed:56:93:ab:a0:
         06:da:bb:80:74:be:f9:27:04:69:af:f8:3f:c5:2c:d5:68:fb:
         48:60:14:4a:03:fe:36:d3:e5:b7:f4:97:76:98:af:72:74:f7:
         95:32:36:31:ad:49:83:1c:fe:61:63:83:dd:82:60:3b:35:c5:
         a8:3c:fd:1d:31:10:c5:a9:13:2b:74:b0:fd:2d:e9:3e:3f:b2:
         88:26:db:0f:3e:a7:94:f6:e0:8b:60:12:6c:e7:29:8d:ea:c8:
         09:42:18:89:d5:d2:43:a0:96:fb:31:74:66:f1:cd:83:31:6c:
         ce:96:ff:4d:b3:61:2d:94:f0:17:f4:48:75:a2:6a:8a:53:55:
         1f:23:73:a6:ac:0f:cc:10:34:de:63:e6:df:26:44:de:93:92:
         29:66:de:27:4f:50:0e:d8:53:96:61:81:b6:39:59:cb:5b:4a:
         21:32:7f:fa:d9:7f:a0:71:e3:85:1b:01:47:6a:a8:9b:1a:f3:
         3f:03:e8:5e:9c:43:7b:47:ac:74:52:01:10:c3:4e:07:6e:9e:
         a7:3a:4a:8e:d7:2c:ae:b8:8b:d4:53:17:f6:d2:a3:c3:44:08:
         6f:34:e4:ef:1b:95:3b:62:ea:c1:f4:40:69:a2:a4:cf:65:af:
         c4:42:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:09:47 2025 by rpki-client