Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
File:                     Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json)
Hash identifier:          NPTFux5JvqRkWYCszJT1ito7+B3e/6xflV7i5W91kSw=
Subject key identifier:   38:35:4F:45:73:66:6C:1A:9A:C2:D8:01:D6:6B:EA:E4:76:82:86:FD
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       019A51F59A5FA0269E30116021B92B8141E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
Manifest number:          172C
Signing time:             Wed 05 Nov 2025 03:00:41 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:41 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:41 +0000
Files and hashes:         1: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=)
                          2: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (hash: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=)
                          3: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=)
                          4: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: PO+5llxyATzYNgZVAr1g98fXAaVjKqOVIDxioEIQZjY=)
                          5: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=)
                          6: bDUFsRxvOWilElkS5MfCCIWk1XQ.roa (hash: mAKIKAHs72Ncw5cLpVcqx2omnJ6e82AfVTrRpnwNpJU=)
                          7: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=)
                          8: i4BvPEbIU0LE_KGbaw2Du_jwtCU.roa (hash: /Y2NvzZtZ5IYW3kWzP26GGHk2SWDVIrWTwCk4pyyB7E=)
                          9: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=)
                          10: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:9a:5f:a0:26:9e:30:11:60:21:b9:2b:81:41:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Nov  5 03:00:41 2025 GMT
            Not After : Nov  6 03:00:41 2025 GMT
        Subject: CN=38354f4573666c1a9ac2d801d66beae4768286fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:f2:fe:a0:3e:dc:16:bb:36:b5:1c:17:eb:
                    52:f3:39:38:a6:7e:ac:db:e3:4e:27:e2:5e:ae:bb:
                    3b:ad:f5:0c:d9:34:96:8b:c3:cf:4e:d9:28:8e:21:
                    f0:f2:aa:a6:97:35:61:08:67:87:68:7b:c4:68:6d:
                    b4:af:12:8d:30:d7:fb:c7:68:07:c0:13:58:a3:77:
                    f1:7d:78:02:75:34:2d:61:b4:62:61:65:8a:3e:00:
                    ab:01:c6:d8:83:ec:57:bb:b4:6e:a5:39:f7:74:89:
                    85:f3:d0:33:e2:c2:8f:3f:ee:0a:66:b9:b0:02:80:
                    74:fb:59:e7:86:00:85:5c:01:ca:a8:fe:32:dd:3d:
                    04:b0:4e:42:51:a3:21:69:58:f3:85:49:01:6d:3d:
                    33:26:c8:91:fe:52:70:97:20:9c:a7:95:d2:f4:f9:
                    ee:15:7a:73:d4:02:97:68:5a:0b:41:e5:f5:be:2a:
                    03:c2:54:80:19:d8:7c:8c:28:3a:13:b9:88:a6:d5:
                    6f:53:07:a8:0d:1b:97:5c:a9:3b:ce:5b:c6:d1:1b:
                    10:8d:fb:75:92:3e:26:52:22:e1:e6:ea:cf:51:3f:
                    42:84:db:52:a0:60:b4:96:fb:f0:a5:0e:c3:30:67:
                    cc:17:77:f5:47:59:9b:48:f0:dd:1c:6a:97:91:e4:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:35:4F:45:73:66:6C:1A:9A:C2:D8:01:D6:6B:EA:E4:76:82:86:FD
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:d8:f2:67:fb:26:75:10:90:64:23:7e:62:4c:69:41:9d:
         21:fd:05:a4:b7:9c:ea:6d:64:32:0b:72:19:95:a8:70:b3:05:
         d9:7d:55:f7:ba:e4:89:6d:0b:3e:0c:1c:24:d5:3e:ba:2f:f4:
         12:b6:af:c3:a3:3f:91:5e:d2:37:e1:c3:56:0b:b6:04:80:f5:
         dd:d5:41:e9:a7:07:72:69:b8:09:2a:46:47:78:77:ca:ef:ff:
         b2:85:a4:17:a2:ce:10:5b:68:4d:9d:00:40:64:32:5b:1d:bb:
         bd:c9:c9:4b:ba:9d:2d:42:75:22:3a:8c:b3:a7:a2:c6:c9:f1:
         a0:80:14:9c:ad:8e:b2:d2:2b:68:4a:56:41:2a:c4:ec:a2:c2:
         31:19:6a:af:02:66:41:a3:f3:6e:7d:0a:a1:c2:40:a9:b2:7f:
         15:0a:f6:a6:e1:b8:86:e5:b0:68:03:f4:2b:b2:06:94:ef:1f:
         d8:4d:db:b7:fb:61:89:ee:fd:30:e3:1e:40:b8:e9:7e:2d:b1:
         ca:c8:38:c9:e8:a4:c7:86:d8:6d:01:d8:33:93:85:72:1f:03:
         81:b4:a5:97:24:c6:db:15:7d:93:98:b6:0a:b5:a8:13:4d:45:
         ed:4c:f3:cc:e4:75:ab:d9:a3:b1:0f:da:e9:81:65:45:08:db:
         c5:97:4b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:33 2025 by rpki-client