Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
File:                     quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft (raw, json)
Hash identifier:          9ro1yH6r5X5JKiGUlGQ4wP2s7onsuWiushn5a/zFWXo=
Subject key identifier:   BE:B1:D0:D4:0B:B8:19:40:75:34:4C:5D:06:5B:FE:C2:3B:E5:8F:70
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Certificate issuer:       /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial:       019A4F990DA69BD3C5C0CB3E5C8933A55B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
Manifest number:          1711
Signing time:             Tue 04 Nov 2025 16:00:21 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:21 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:21 +0000
Files and hashes:         1: EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa (hash: APmjj8E3v76VLgRg+v7SdezJbT5vDpWvktN4FM1/GHk=)
                          2: QoKbYN7OmRBdNux8ZVRQTZeJ0po.roa (hash: +v8M6N8Y0/MmQiQAMyBHFYzXCbEXjl19X7YGjBZ8sJQ=)
                          3: d3wHhLF7_F2drrnAq4ufIbIjpfM.roa (hash: KBpvQcL8WXArnGC0TPR+vAIeruDFeNliNeiATzVd2jY=)
                          4: hAVC08FxpJFnXfaeJz29NCq7Sug.roa (hash: ApHYhoJ0ZC5NYrtBeVMJI/3kAo+MHYIlbbcC8nWTcEw=)
                          5: quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl (hash: UfBISY8da8FkXuvKvvjQLV3w64Hp8m1jKsro5qRTSmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:0d:a6:9b:d3:c5:c0:cb:3e:5c:89:33:a5:5b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
        Validity
            Not Before: Nov  4 16:00:21 2025 GMT
            Not After : Nov  5 16:00:21 2025 GMT
        Subject: CN=beb1d0d40bb8194075344c5d065bfec23be58f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:9d:36:78:df:2d:df:85:02:ff:a9:7d:d4:
                    1a:da:93:e5:b3:d4:af:57:14:ad:7c:e2:b4:cd:5b:
                    e7:ba:50:8d:43:5d:be:56:24:5c:90:ad:9c:39:4b:
                    5e:20:2c:4b:16:b1:88:1c:15:ec:7e:9f:ee:27:b8:
                    6b:db:59:44:78:68:42:46:03:78:aa:95:4b:2a:1f:
                    82:47:75:cf:11:a6:48:5c:c8:b4:0a:9c:b7:2d:ea:
                    10:73:f7:57:12:cc:99:08:34:28:0f:24:50:33:03:
                    49:e4:fc:b5:e7:b9:b7:cd:bc:65:18:86:6c:1a:80:
                    86:bb:2e:44:c2:75:75:53:68:df:39:8c:58:06:3b:
                    fb:89:46:e8:46:2b:b4:d5:3d:a5:29:3c:4a:01:cd:
                    bc:70:dd:23:41:64:cd:d4:18:30:7e:6a:89:24:06:
                    b2:ae:58:b4:f1:50:a6:c9:49:a8:41:22:5a:af:21:
                    d7:e4:25:5d:49:57:ac:15:dc:b3:b8:a0:c3:bb:fb:
                    a2:b2:dd:5f:2a:2b:ed:1f:7b:10:7d:28:f2:b4:32:
                    48:c7:4d:22:64:b7:75:01:84:92:3f:7c:72:71:8b:
                    b2:dd:d3:c4:de:04:24:77:15:d8:94:78:08:c2:6e:
                    2b:68:94:ae:38:2e:d7:e3:81:99:25:73:f2:86:ed:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B1:D0:D4:0B:B8:19:40:75:34:4C:5D:06:5B:FE:C2:3B:E5:8F:70
            X509v3 Authority Key Identifier:
                keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ea:38:54:c3:ee:c7:44:e9:db:e9:10:93:b4:21:da:13:28:
         0d:85:96:a3:15:05:0f:59:4f:d5:38:9e:8a:7d:c7:15:70:21:
         65:e5:bd:d2:7e:01:e1:4f:41:08:60:ee:f2:b2:c4:d5:54:53:
         e4:a2:71:42:4a:ed:4b:f7:a7:0a:c6:65:83:a9:3e:fb:2b:88:
         d7:a6:e0:0d:e5:3c:e3:1a:98:2c:1e:c6:63:5e:6e:2e:cb:81:
         dd:18:1e:87:33:e2:06:03:27:71:49:cc:86:e0:2d:cd:94:d8:
         1e:06:73:83:05:da:1c:17:a3:00:47:9d:be:51:24:b0:22:4f:
         0d:9f:1f:77:68:e2:13:25:05:9e:47:7e:81:6e:da:d7:96:ed:
         ef:63:ac:d3:fe:14:83:01:97:af:fc:6c:87:76:fc:fb:d9:8b:
         66:e2:45:2d:d2:52:d2:00:4e:f4:1f:09:7b:06:07:fb:71:dc:
         5f:0b:82:56:a8:89:24:65:9a:ac:62:e3:10:22:44:17:ca:7d:
         86:ad:58:10:c9:b0:32:43:d2:c5:80:69:b7:49:88:74:d3:9f:
         0b:a8:d2:81:a5:db:e8:9a:0e:48:31:b8:dc:0e:3b:3e:99:a7:
         e5:dc:aa:d9:6d:73:1c:13:4e:40:c8:8d:b4:94:af:ad:26:03:
         96:37:89:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:57:52 2025 by rpki-client