Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File:                     pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier:          fhIxGWRHTLuYqB3eqSQfqhrBiXFp4lSWNIgqi9kcu3g=
Subject key identifier:   25:DB:E2:DB:1E:88:B0:72:7A:F8:05:27:85:5F:65:3C:50:74:92:C9
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer:       /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial:       019A500776B8170155A9A484CAC188DCB068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number:          1711
Signing time:             Tue 04 Nov 2025 18:00:57 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:57 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:57 +0000
Files and hashes:         1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
                          2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
                          3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
                          4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: NaeYSOS0f8FLgFfMU/iPCY7FF7SqNGEv2q1R2/yAVmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:07:76:b8:17:01:55:a9:a4:84:ca:c1:88:dc:b0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
        Validity
            Not Before: Nov  4 18:00:57 2025 GMT
            Not After : Nov  5 18:00:57 2025 GMT
        Subject: CN=25dbe2db1e88b0727af80527855f653c507492c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9e:bc:94:e7:61:f6:32:f8:92:1e:5c:35:ec:
                    0c:61:1b:ed:5f:15:cd:b3:61:92:ee:1a:ab:94:5e:
                    33:c0:89:ad:60:05:c2:65:cd:c1:db:85:66:9b:a4:
                    33:8c:17:c1:13:e3:13:c5:d7:2f:e0:51:8c:a7:93:
                    83:05:53:de:83:ee:ec:b3:d2:51:05:ad:ed:82:cb:
                    67:6c:50:87:7e:a9:a2:8a:d2:d9:84:3e:af:65:b7:
                    69:1b:b8:d4:41:8c:2e:96:1a:da:fa:12:bb:2d:6a:
                    63:88:e4:36:f3:2c:8d:21:ea:a1:55:d8:65:5f:e5:
                    e2:bb:e6:02:3d:1b:2b:a6:2a:d3:9a:19:9e:19:d3:
                    c5:1d:cc:39:d0:fc:fe:3d:ef:c2:7d:9f:b4:3e:4d:
                    28:1b:ba:f1:5e:6b:d4:a7:78:3a:f8:d4:44:79:f4:
                    dc:55:20:91:37:ea:c3:f5:2d:79:65:d1:f9:28:81:
                    65:e2:c5:09:33:18:41:41:a7:af:92:1b:81:4d:58:
                    d6:19:9d:49:d0:da:9e:f1:0c:89:72:2b:8d:65:5f:
                    80:d8:d4:25:90:13:57:2d:a7:1e:c7:ea:34:a7:92:
                    da:40:51:3b:95:d7:f6:e3:92:84:08:c5:d2:a7:75:
                    e1:17:d1:e7:f9:0e:99:8a:8c:f6:08:51:54:3d:86:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DB:E2:DB:1E:88:B0:72:7A:F8:05:27:85:5F:65:3C:50:74:92:C9
            X509v3 Authority Key Identifier:
                keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:42:1c:c3:05:e8:90:b2:a9:f8:95:9f:f0:a8:58:00:19:
         a1:5b:0d:ed:66:0a:cf:44:fd:20:7d:c4:99:f0:09:9d:24:f0:
         d2:e4:e3:d6:02:7b:20:86:80:92:81:b7:02:38:d1:88:d4:c8:
         76:94:14:07:a9:fa:52:21:1a:85:3b:ea:35:66:d6:69:dd:32:
         63:da:9d:cc:94:a4:37:87:ba:ba:25:da:22:e4:7c:55:55:19:
         80:be:97:4e:1c:2b:6f:32:0b:0f:20:e7:b8:8c:c0:de:30:41:
         d6:4c:94:34:4b:9b:d2:24:30:a9:c7:32:4a:a2:d9:e4:78:2e:
         9a:e7:7b:4e:62:e6:2d:00:5b:43:1e:00:4d:23:32:c4:10:09:
         6c:ba:b3:61:c5:e7:f8:17:0f:7a:e6:64:3f:91:70:63:58:12:
         11:10:cb:55:39:f7:ae:36:f7:42:fa:52:3e:b0:da:8b:19:81:
         3b:b5:3d:6b:68:6b:c0:24:61:dd:5e:fd:f7:78:46:7d:2f:00:
         c7:6a:28:2d:1c:ef:e8:a8:c2:c6:c3:70:67:61:dd:bb:a5:2e:
         b9:75:ae:9e:59:7b:92:28:79:40:b4:c7:30:5c:bb:a6:d9:92:
         85:8b:0d:db:dd:3d:ff:3e:d6:01:17:7a:24:a5:ab:de:51:ca:
         84:c8:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:38:22 2025 by rpki-client