Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
File:                     QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json)
Hash identifier:          u8gvQue+bC1hi8rYzmycgDoxbCqUnJSqAEyLCAPwrtc=
Subject key identifier:   A6:EA:D2:0C:22:D8:93:65:22:62:6D:16:57:2E:10:B4:9D:C9:9D:E1
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Certificate issuer:       /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial:       019A4D73D8BFA7FCB3634E68640D6DD1B1B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
Manifest number:          0AA4
Signing time:             Tue 04 Nov 2025 06:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:28 +0000
Files and hashes:         1: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: SB0JL/HHgFaN4Sl3ElO+2ugeoxVym2GCSDDc57GWw2Q=)
                          2: bcsuWSTOEvrNi8Bj_pY3ZTkyjTo.roa (hash: gzGAlBuK5OENfmUWRjaIU+LruIs+AOY9SmxU1Rg2h3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:d8:bf:a7:fc:b3:63:4e:68:64:0d:6d:d1:b1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
        Validity
            Not Before: Nov  4 06:00:28 2025 GMT
            Not After : Nov  5 06:00:28 2025 GMT
        Subject: CN=a6ead20c22d8936522626d16572e10b49dc99de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:a4:5b:f4:86:f4:8a:60:06:b8:ca:b0:33:
                    3b:3c:3a:6c:2b:1b:19:d0:c4:bf:22:60:1d:fb:a7:
                    f5:ea:12:53:32:3e:99:c3:0b:43:d8:d9:fa:23:79:
                    f4:bb:e0:6d:45:a0:0b:12:17:25:d5:c7:d2:91:0e:
                    8c:53:4a:89:8c:48:24:a3:ec:86:66:64:83:6f:29:
                    fe:91:6b:25:b2:a2:3f:ef:bd:e2:bb:84:cd:3c:a0:
                    89:7b:ae:12:ca:d7:63:ed:de:d2:b8:b2:f7:c3:9f:
                    d4:ab:34:72:c6:05:e9:1f:69:f1:b7:40:c2:bd:75:
                    8e:9a:48:17:ed:0d:e9:e8:2f:01:f4:83:e0:ec:e8:
                    91:c0:e1:d8:ec:1c:70:51:d5:68:16:96:82:5f:2e:
                    5c:62:2b:c9:d6:fc:a5:d2:5a:45:33:9a:c5:31:75:
                    52:0e:ec:54:1b:f2:a4:f5:ce:fd:ca:df:f5:90:26:
                    46:0c:11:3f:ed:9a:23:4f:83:2e:0f:eb:0a:b7:15:
                    93:c3:c8:15:5f:0e:f2:8f:4e:72:68:c8:51:e6:a2:
                    ae:f7:b1:61:3e:b4:8d:74:bd:dc:56:ea:f4:6e:e7:
                    89:4c:9d:76:f8:7e:cb:f5:a3:4e:6f:35:26:ad:e2:
                    2e:3d:4c:25:6d:54:c5:10:da:7c:f1:69:34:31:ed:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EA:D2:0C:22:D8:93:65:22:62:6D:16:57:2E:10:B4:9D:C9:9D:E1
            X509v3 Authority Key Identifier:
                keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:82:cc:47:6c:55:8f:66:fa:5f:bd:4f:c9:ac:d5:75:42:ca:
         bc:f9:d7:9d:ab:4f:65:bf:ec:1a:61:1e:a2:56:c2:92:cb:f0:
         2c:57:54:fb:ae:1b:1a:c6:6c:c3:cd:63:6c:f8:d7:6e:1a:5e:
         93:79:3c:5b:48:47:ac:8a:1f:cc:96:21:c8:b1:eb:a0:9f:38:
         29:28:0a:d5:e0:f8:0a:36:5b:3e:97:de:c3:49:ab:8a:03:a8:
         3a:a4:4a:f8:86:94:f4:38:a6:ae:5c:8a:6d:d3:60:36:9b:d5:
         9c:bc:cf:f2:ce:4e:b7:b5:c8:35:f3:9c:e5:c5:b3:71:b0:66:
         75:87:85:ab:c6:a8:4e:e6:2b:9d:56:c0:a7:37:50:f7:74:38:
         f3:2c:3c:bd:c7:eb:29:7d:17:41:57:ef:5d:fc:e4:0a:e2:64:
         10:b8:5d:ea:7e:47:80:53:c4:58:e0:3c:ba:d3:37:26:57:1b:
         29:f9:8c:b2:a4:9f:ee:35:eb:eb:df:17:ef:48:f4:db:a5:91:
         cf:e4:5a:ef:24:47:e0:0f:01:84:84:23:d1:a1:cd:3d:54:46:
         35:3c:69:07:7c:c6:eb:02:26:55:88:c0:06:61:7b:24:58:8e:
         40:d3:1e:91:0a:1f:b9:3a:45:4a:f0:45:1a:e4:99:18:fa:da:
         18:6d:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:48 2025 by rpki-client