Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File:                     QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier:          UtIIsRBxYu9eJjryUz1T3SpiPPbTJfoLWE+qzLnukXw=
Subject key identifier:   6F:E1:2B:46:49:C4:35:1B:5F:24:06:50:F0:CD:87:7A:9D:86:0D:88
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       019A537621BD5BE2F88FEA045DAB5BE8848A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number:          1727
Signing time:             Wed 05 Nov 2025 10:00:41 +0000
Manifest this update:     Wed 05 Nov 2025 10:00:41 +0000
Manifest next update:     Thu 06 Nov 2025 10:00:41 +0000
Files and hashes:         1: 0esZKuZd06vTF3egbk7SFqajsIo.roa (hash: P0O/NDwq3sTeK/AsSKKPK6Qr+cdWA34yW0U7UgVxZHg=)
                          2: 1-F-5SWsecFgzI5NahgeczUF5j-k.roa (hash: AjzylbQuDtMZ4CoZ2EqAKKte+m5xBNBNs+Oy65Y8EM0=)
                          3: 18mEs4Z6fHdJG430-23p2cFj4nQ.roa (hash: XgIw9SVi9pdHmgi87nMtAixIsiQxYMsUyuBvpp1vRoM=)
                          4: 4URO2C3ml1u1p3j0aVym-OypCmw.roa (hash: FBodq3AGj9I/WrFusJYGhp0BteIh9N9SY38AbrciYWk=)
                          5: 4kN15Qz33KWG-k_wyu7EQgr4Ils.roa (hash: DH8jYa3viVWroHhQ/Zl/Da/2bPMlT/7wPrIYxkW1NQg=)
                          6: 7qGCgpIfKLXoJsT35rezDziDBhA.roa (hash: 5kmqeNrinp9lsuCAyZflpq/OiszbJU7jNmzUel6IR+E=)
                          7: GAgtr-CLltTm3C54wjvqWFoClvc.roa (hash: T0Jdg0AtA8XIyCNcIqmAhfTPx4CQ0IlZ0iFHA879hp4=)
                          8: HiGziAUktoRlyueuC0_hHiCDmQ8.roa (hash: Zd8qY4C57ymLYCj+tu0BUy3+rQ0+nsTQu2oauKzI3OY=)
                          9: HxipHT46tv6qA61seP-3FDc3m84.roa (hash: dvYRTvtnN6xoSKyBzydQ1i2HWHdep/QnlIOV+ZIODek=)
                          10: JcQ4XnNNuhCFCptegJ4OikKt6EI.roa (hash: V4uiHg1qNVTGH4cwLosCcAcAuUHU5FHwvSgPuESRx7Y=)
                          11: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: e9w0VOhQt0V5HLjl9WvLx6s7tA9TrEw38vG7OEocAV0=)
                          12: QVpDsEjXaPZQ4FGjN9dHcrQXvHg.roa (hash: HCD6w2XxMAQn0SFhGHQKXXLIjCxVrY39/u5TIy7CNM8=)
                          13: Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa (hash: xVEwITmL9MXivRj3o3NBJyNSskTvQ/xcCcoWznjHvCA=)
                          14: RNDoaXvvOX22MpXmc3Ff_6K2Zr0.roa (hash: 9ScFJyBJ0ntBcGgka6vn0/EsUriLP41MonbDidIqsxk=)
                          15: UtpSRhJuNLlPda0ealCAV2oOOIs.roa (hash: 6zNva/R7MgFInq/rTlig5RzR+MH92GbfZMeRaso1csA=)
                          16: V8-ToP-No1rRKocG9Fs66tbVPI4.roa (hash: 3qNiQpHlS6gZhDgIm5wv39p+3u8Q/oiUqHr5QNsynkQ=)
                          17: aCzvft-4bbV7rBYNhvjtTU8ZwVY.roa (hash: LyfD0ZqEZ95kmtswsVkI/tj5kthO2U488G+9z2mp6gg=)
                          18: anyb0S2isVZ6Se4Mftij8iSLpPk.roa (hash: 8kZzLUilTF5CneX4LxuRFJNuwebJiucwE+f4bJOwZpY=)
                          19: cLHJ9pzG4jNGxgoAoRMirT2Ejso.roa (hash: Jzxa7wOrH3SZg3F+/QPuNnZeQarhGQ5yhFav2kPWjJ0=)
                          20: fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa (hash: 05oduoCdD8sRASgQ0YU8ZbDS+ABzI42Cxlh4jYIQnOQ=)
                          21: g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa (hash: T/0IJy2q1IYoff/aamZ+EqRudnpk7iGpLvKCXPLYje0=)
                          22: glVWs7IQA6E4icmC8qXaL1BO1oU.roa (hash: wAwxqn0T2Tg7SmJ7QKis7shqbxTq4mypLKV5b5C3kXg=)
                          23: i0SRNYFClBpsrpbhFOr7mlXd-Z0.roa (hash: FXPbRklervmd45xmbEYe/MPOs8yYCmIiv2omfM8/Zyw=)
                          24: kL3chxghDnQX5YSzwgkNCMx_3uM.roa (hash: ARDIceVeEM1YjdBNdcn8ziSYK6i63yZ+Nxd3mBgB/OM=)
                          25: khxB07onbtl0gHz8-6pLaDUUqYo.roa (hash: MoQ9KdSAj5hEESTK4yNZR+E8klzqWct22REysr25b/w=)
                          26: lKXrokKPFOF3aznjmWojVE7APiQ.roa (hash: PRGVlrmspET+S9gMw9HSgp3fT7nUxwmOOvlgERWds3M=)
                          27: lwFhyNroYMkQgFt_MTCY-0ovIkY.roa (hash: 1cg2wbluv89aBz3Ew/AMkAQmXEZmttxmEyT4CRchZCk=)
                          28: mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa (hash: 7m/WWG8HyJT1ynclkVB1QY12OwlKq+o8CXSQO/8ksHU=)
                          29: nGljitgno8Zg_3gTd1NL8ga4UlY.roa (hash: rg8O6DW4r5DhXeJAjPcwuhjgZqT37lpRRlPUN2MFmGk=)
                          30: pfnbvP54fI2mKR09iIt0xfdp0co.roa (hash: TpvSBeXjgBs6iHcMA91RD8MXDqtM3kW6rNOmftw2zXc=)
                          31: twN006NWSqIAzyJjBefGoakpUcI.roa (hash: Dw9Jbr5s1oT+R6tnGBJCmZXohfgBB+1HIADmJwaJ7IA=)
                          32: vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa (hash: furrlju/pz4ChU7gEiXr6biSh/xldhy2BubaPv4xD0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:76:21:bd:5b:e2:f8:8f:ea:04:5d:ab:5b:e8:84:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Nov  5 10:00:41 2025 GMT
            Not After : Nov  6 10:00:41 2025 GMT
        Subject: CN=6fe12b4649c4351b5f240650f0cd877a9d860d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:e0:fc:fc:48:a3:b4:39:49:74:93:f2:e1:
                    24:1f:7b:d3:e5:32:db:61:4f:1f:56:11:4d:61:7b:
                    63:51:df:18:6b:7d:4f:c3:9a:f9:a9:9f:f8:e0:09:
                    ff:4a:08:53:26:4b:48:1f:98:bb:c0:a1:95:55:70:
                    99:09:c2:98:74:dc:05:3a:5a:12:0e:20:e7:3f:7b:
                    15:f1:d4:3d:a0:bb:95:65:47:98:cc:b9:34:af:fd:
                    c5:b8:06:5f:60:71:87:0c:f2:26:09:50:92:c6:e7:
                    30:2e:b8:17:86:2a:8c:07:35:05:c8:90:03:3d:14:
                    62:bb:c7:b5:a6:3f:0d:4b:42:1a:ae:75:61:a9:d2:
                    28:4f:09:6a:6f:39:c7:ce:24:a8:68:44:09:6f:da:
                    ed:51:53:58:0a:16:10:56:4b:2d:49:63:e1:bb:f1:
                    78:2c:07:0c:1c:a0:37:93:00:ca:8b:f1:94:ce:81:
                    df:c4:94:9c:11:26:27:8a:63:18:f4:ca:08:5f:02:
                    53:22:6e:6d:e3:63:66:93:77:ee:5e:5c:0b:75:39:
                    b6:6b:70:f7:7d:20:3f:0c:4c:68:51:6f:95:cd:dd:
                    87:ff:2f:0f:c6:67:07:43:58:b1:1c:18:a4:37:3f:
                    86:69:91:27:f0:37:97:e5:3c:d1:1c:e7:ad:66:c2:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E1:2B:46:49:C4:35:1B:5F:24:06:50:F0:CD:87:7A:9D:86:0D:88
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:16:4c:bf:f7:df:47:6a:f5:e3:d1:ed:ad:7b:f7:ad:96:eb:
         5f:82:42:af:ec:89:80:36:b1:8e:22:55:2d:1e:3a:55:23:54:
         f9:34:35:86:8b:3a:26:34:c1:3e:cf:c8:fe:09:50:c9:86:e6:
         b3:c1:7b:51:91:47:a8:9f:7b:98:43:4c:74:ab:f1:db:5c:a2:
         cb:40:67:53:88:89:cb:6b:d7:04:95:a7:99:4a:ba:0c:1c:76:
         04:f2:58:2b:ee:90:a0:29:c3:9a:3d:d6:73:b7:69:6a:b9:8e:
         d1:8f:4f:0b:68:dc:b2:48:04:6f:dd:e9:76:0b:63:57:b5:8e:
         7f:e8:32:1e:5e:2d:60:60:9a:2c:85:09:b7:ae:bd:8f:41:78:
         d7:10:a3:7e:1e:06:4a:8a:9b:5f:37:76:7c:30:4c:31:50:10:
         d9:b2:62:3a:f0:f8:f1:87:27:a9:fd:59:15:b4:3d:89:f4:87:
         42:88:06:0b:6a:36:b3:e6:45:63:0a:a7:42:88:92:6c:93:3e:
         74:1c:ee:14:0a:1f:6e:84:d0:e1:07:06:4f:74:bf:e3:aa:57:
         bc:37:cd:5a:f8:77:96:df:89:8e:d2:b7:d4:7c:1a:7f:71:76:
         9b:42:10:62:0c:cb:bf:5c:da:ab:d7:52:80:a6:1b:08:e2:5b:
         c5:cd:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:20 2025 by rpki-client