Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
File:                     93QnJYYrkL2kUQoC6AT-860RQtw.mft (raw, json)
Hash identifier:          MjloXryjgGNdHqArmg8M0Jm3OAo41hKtY3hnk5lKRkg=
Subject key identifier:   86:58:20:A4:AC:8D:76:94:12:92:5F:48:B8:54:61:D4:EF:E4:67:B1
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Certificate issuer:       /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial:       019A4EF519C123D9A214AC8995A15529CD56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
Manifest number:          1715
Signing time:             Tue 04 Nov 2025 13:01:17 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:17 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:17 +0000
Files and hashes:         1: 4l2SdYqRsWw1Dk6UbRmpiphQbzs.roa (hash: 7zhBmWshcVx2YPgcfMNIybRxMDlVE/wBUohnRkB+ivQ=)
                          2: 93QnJYYrkL2kUQoC6AT-860RQtw.crl (hash: IVWfE8lTTzKkYKC4lT5q0gk4hErrQWpaWIR4xYO5hG8=)
                          3: MBPuW0pCdoE27mcTarwCxJOcl0Q.roa (hash: YEUs/arUcZV/nic4XPWhvdmwMlBlDW7ohpW4jTH5q/0=)
                          4: dpObP3s4Eqe9wi_vu_EEzcThWpQ.roa (hash: NHvLjXCF4TN/3v6KfZ74ieQjWaZi6N8hN7TgIQgZa00=)
                          5: eWaWhd41MCwWzpBDWAZrpJOP8-Y.roa (hash: LRzDWqlekWiXipOXvEsZHcHb0hr7sMlO30lOBYzQlnA=)
                          6: kNm6ddrvxozowyByoQF78uhJgYE.roa (hash: RwT/hXh1MfTD8gmNW+o+TVC0jUdT6l112GMG0VUSGVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:19:c1:23:d9:a2:14:ac:89:95:a1:55:29:cd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
        Validity
            Not Before: Nov  4 13:01:17 2025 GMT
            Not After : Nov  5 13:01:17 2025 GMT
        Subject: CN=865820a4ac8d769412925f48b85461d4efe467b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bd:90:44:dc:10:60:9a:45:de:67:d5:04:97:
                    e6:4a:0b:9d:a7:c0:89:19:38:b9:44:7a:a9:cf:5d:
                    5a:11:58:09:25:02:bc:51:23:27:7d:fc:ce:59:81:
                    4d:29:b7:b0:d4:b0:44:fc:6c:ba:13:9e:46:95:ad:
                    41:38:8b:60:dc:f5:57:34:28:b4:ff:7a:07:a7:d9:
                    c2:7f:3a:6e:b7:3f:a1:3d:b0:15:48:74:16:ce:1f:
                    6e:48:ea:5b:4b:01:15:78:8f:f6:3f:e6:32:3b:5e:
                    aa:45:1b:2f:59:b8:53:bb:f3:73:37:44:1d:e2:97:
                    f4:f4:ca:33:73:02:94:a5:ed:36:9e:78:81:f4:f3:
                    9e:d4:92:b3:7b:5c:77:43:66:68:74:bb:38:5f:63:
                    7b:e3:a1:71:65:62:f7:43:3b:8c:9f:e6:66:6c:2d:
                    3e:16:a3:9b:7e:d6:5a:7e:bb:c4:c2:9e:80:83:a9:
                    df:7b:af:b2:9f:ce:53:cd:6e:26:9b:ed:3b:46:07:
                    78:f4:99:d9:e7:4d:de:15:e6:df:af:2e:b4:3a:83:
                    da:4b:d3:74:b8:05:c9:08:0f:c9:6c:72:e9:de:0d:
                    61:5c:f7:a0:2b:be:cc:1c:4f:49:af:ae:4b:c0:de:
                    63:86:37:2f:32:90:e0:15:87:13:ee:f6:58:4a:f6:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:58:20:A4:AC:8D:76:94:12:92:5F:48:B8:54:61:D4:EF:E4:67:B1
            X509v3 Authority Key Identifier:
                keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:d4:57:08:d2:07:53:9f:4f:f7:5c:14:39:1f:da:ba:81:
         74:f3:1f:27:9a:56:c1:e6:45:82:d5:67:ce:5e:05:d3:76:cf:
         44:0a:8e:12:3b:36:9a:35:b8:27:0f:f5:db:ec:f5:a8:51:eb:
         fa:39:22:50:c5:3b:16:94:ed:bd:60:bd:c3:43:58:55:fd:82:
         a7:f6:37:d2:8f:a6:7f:46:33:65:66:66:cc:c6:fe:f8:69:27:
         95:3b:f4:97:08:7d:9b:a5:7b:8a:bb:0e:23:3f:6c:ea:11:98:
         53:a2:76:76:1c:a4:d5:04:9f:c4:b2:46:ee:31:60:40:2e:0c:
         27:b2:51:e0:b6:16:f1:2a:20:ea:e4:63:f1:5b:f5:1c:1c:09:
         f6:d3:3a:58:b6:d0:7f:17:bb:23:3d:8c:ab:29:37:f3:92:e1:
         ff:22:66:fa:1f:75:bd:79:2d:37:4d:7b:56:80:43:29:7c:61:
         77:b1:19:0f:41:4c:b9:6d:82:eb:8e:fa:f2:1a:96:95:28:da:
         25:01:3d:bf:71:e0:a8:62:c9:65:b2:92:31:6b:54:25:3e:2f:
         23:65:3e:9c:ed:35:1c:63:70:b3:95:c1:41:8a:c9:04:3e:b7:
         82:2e:b9:a7:e0:4f:79:21:ac:72:06:7f:b6:7c:15:1b:87:a1:
         11:a8:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:03 2025 by rpki-client