Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File:                     qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier:          PW98Z7M5mfFn07jLSX/ZlwHmT3PN7+QbLZtgcCIQZpg=
Subject key identifier:   75:BA:5A:01:6F:BA:75:63:A1:81:D0:6D:83:2E:CA:B4:63:5F:7D:58
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer:       /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial:       019A5151203E583697E1E2A9F801101E574D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number:          079A
Signing time:             Wed 05 Nov 2025 00:01:02 +0000
Manifest this update:     Wed 05 Nov 2025 00:01:02 +0000
Manifest next update:     Thu 06 Nov 2025 00:01:02 +0000
Files and hashes:         1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
                          2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: 9lSvPqDemnKEo17AEmP8ZuzD67W2210SQLDszQu37wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:51:20:3e:58:36:97:e1:e2:a9:f8:01:10:1e:57:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
        Validity
            Not Before: Nov  5 00:01:02 2025 GMT
            Not After : Nov  6 00:01:02 2025 GMT
        Subject: CN=75ba5a016fba7563a181d06d832ecab4635f7d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:83:d2:40:c3:e8:38:dc:dd:ce:e5:ea:68:74:
                    ca:c4:76:1d:b6:97:68:1f:cd:50:4e:93:85:92:2c:
                    4d:56:7f:ab:33:01:2d:5d:35:41:94:42:b4:e2:14:
                    54:af:b5:3e:e9:ff:a9:40:7b:9e:e9:b8:c0:37:31:
                    cc:14:88:87:f5:69:32:e0:a4:c0:78:51:bc:90:a8:
                    0b:be:74:99:9d:cc:90:e4:4e:16:1d:7d:8f:0a:d0:
                    90:37:f9:6b:b1:7a:91:4a:62:c4:8d:50:37:15:5e:
                    b7:86:9a:56:6f:f2:0a:fb:d2:0f:86:da:d8:52:ff:
                    3b:b2:e6:3b:b1:03:b0:8e:e5:b1:34:7d:41:13:dc:
                    e6:62:77:0a:45:1f:69:fa:4d:9a:ec:50:0a:32:95:
                    05:71:17:53:0a:b4:5d:6e:a9:4e:8f:7b:62:fa:51:
                    0b:a9:ce:fc:26:91:21:89:d4:86:e7:f8:a2:f6:c7:
                    c6:f3:c1:0b:1d:0f:fa:f9:bd:f3:2e:58:76:37:fe:
                    48:a9:1c:0f:23:3d:4e:80:67:01:d4:58:38:79:2f:
                    71:e4:4f:fa:b2:a1:0a:c0:f4:b1:51:61:58:79:67:
                    e7:f4:f3:ac:49:6b:d3:b7:bc:eb:b2:cd:52:51:4f:
                    9c:de:b4:c4:d2:06:a7:fa:b9:7f:2d:f8:81:e4:48:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BA:5A:01:6F:BA:75:63:A1:81:D0:6D:83:2E:CA:B4:63:5F:7D:58
            X509v3 Authority Key Identifier:
                keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7c:59:d5:7d:bc:cc:0c:64:a7:ac:b5:5a:3d:4b:ab:1c:dc:
         8d:95:e4:c7:a6:7d:a7:fd:3a:4b:1d:ed:09:67:ce:17:df:48:
         94:6a:e5:17:94:20:e0:3b:fa:a8:af:ff:b2:a9:b8:b7:03:70:
         00:14:8a:45:c7:9d:a1:fa:25:ab:0a:dd:dc:50:1a:ce:86:f9:
         d6:a0:73:da:f2:9a:3c:65:d1:4a:a5:46:67:0f:21:b9:68:9c:
         c1:4e:9d:95:f8:b6:6f:37:bd:e5:bb:b4:95:3d:5a:98:48:71:
         34:10:4a:27:00:08:4e:af:5e:95:6d:f8:88:97:ba:d3:88:79:
         db:6c:96:50:20:e4:17:52:50:68:bb:14:0b:73:e1:0e:44:86:
         e5:c6:fd:63:b7:89:a6:c5:11:9f:a9:6f:94:74:af:f3:9d:a5:
         a0:a3:54:01:e4:3e:c4:69:4f:a6:f3:d4:ef:0f:69:e0:3a:a3:
         f9:27:40:f2:af:35:af:c1:b6:b9:bd:9c:98:35:63:70:45:b1:
         1c:be:1c:ee:0c:41:9e:07:43:a8:dc:e9:c6:76:03:2b:51:bc:
         5b:5f:6e:2e:38:36:34:17:ee:0b:a6:c4:a5:30:49:9f:9f:e0:
         e1:6e:29:ff:5e:ac:5b:dd:e3:84:68:f0:ab:bb:25:ee:d6:af:
         57:2a:c3:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUSA+WDaX4eKp+AEQHldNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj
OGU1NTMwHhcNMjUxMTA1MDAwMTAyWhcNMjUxMTA2MDAwMTAyWjAzMTEwLwYDVQQD
Eyg3NWJhNWEwMTZmYmE3NTYzYTE4MWQwNmQ4MzJlY2FiNDYzNWY3ZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IPSQMPoONzdzuXqaHTKxHYdtpdo
H81QTpOFkixNVn+rMwEtXTVBlEK04hRUr7U+6f+pQHue6bjANzHMFIiH9Wky4KTA
eFG8kKgLvnSZncyQ5E4WHX2PCtCQN/lrsXqRSmLEjVA3FV63hppWb/IK+9IPhtrY
Uv87suY7sQOwjuWxNH1BE9zmYncKRR9p+k2a7FAKMpUFcRdTCrRdbqlOj3ti+lEL
qc78JpEhidSG5/ii9sfG88ELHQ/6+b3zLlh2N/5IqRwPIz1OgGcB1Fg4eS9x5E/6
sqEKwPSxUWFYeWfn9POsSWvTt7zrss1SUU+c3rTE0gan+rl/LfiB5EjQqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHW6WgFvunVjoYHQbYMuyrRjX31YMB8GA1UdIwQY
MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt
ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0
LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHxZ1X28
zAxkp6y1Wj1LqxzcjZXkx6Z9p/06Sx3tCWfOF99IlGrlF5Qg4Dv6qK//sqm4twNw
ABSKRcedofolqwrd3FAazob51qBz2vKaPGXRSqVGZw8huWicwU6dlfi2bze95bu0
lT1amEhxNBBKJwAITq9elW34iJe604h522yWUCDkF1JQaLsUC3PhDkSG5cb9Y7eJ
psURn6lvlHSv852loKNUAeQ+xGlPpvPU7w9p4Dqj+SdA8q81r8G2ub2cmDVjcEWx
HL4c7gxBngdDqNzpxnYDK1G8W19uLjg2NBfuC6bEpTBJn5/g4W4p/16sW93jhGjw
q7sl7tavVyrDWA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:26:14 2025 by rpki-client