Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
File:                     FbWVJg9ywiJUesPjZ_LIh644o_w.mft (raw, json)
Hash identifier:          yicWsLVOLbnL8Vl6R6B9zNG0GfemWToiucT9tCHDChA=
Subject key identifier:   DF:0B:F7:82:5F:A1:B1:82:BC:D0:0D:FD:47:29:A1:98:2F:A9:C0:54
Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Certificate issuer:       /CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Certificate serial:       019A4E1909C94DB0E738CF732BA8941CD593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
Manifest number:          14B6
Signing time:             Tue 04 Nov 2025 09:00:54 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:54 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:54 +0000
Files and hashes:         1: FbWVJg9ywiJUesPjZ_LIh644o_w.crl (hash: Ftf9/1h7QYHbZgkp1yc+C7+aBWMjJ/bGOJlU1SdPpzk=)
                          2: gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa (hash: m0n0mKFLG+q3BgRaxr/RvXon3zAIOWdnRruNeP120aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:19:09:c9:4d:b0:e7:38:cf:73:2b:a8:94:1c:d5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
        Validity
            Not Before: Nov  4 09:00:54 2025 GMT
            Not After : Nov  5 09:00:54 2025 GMT
        Subject: CN=df0bf7825fa1b182bcd00dfd4729a1982fa9c054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:1b:44:e2:09:fa:f0:78:c9:6c:50:53:47:
                    83:dd:bd:34:a9:a6:8b:11:39:33:69:8c:02:99:9b:
                    b7:d0:12:40:07:d9:1c:4d:d3:89:68:5c:d5:d7:93:
                    4a:3d:30:6c:37:3f:1d:a8:68:a6:fe:26:c8:dc:87:
                    62:7d:cc:9a:5c:2e:12:6a:ad:68:37:c2:5a:fc:76:
                    2f:fd:77:07:b5:a1:7d:d6:d6:36:aa:63:32:ff:5b:
                    f3:ed:e8:3b:50:11:00:18:fb:83:a7:6c:15:2c:13:
                    8b:6c:42:db:4b:0b:ad:58:8a:91:76:82:75:7c:ff:
                    03:f6:00:38:44:c3:3a:53:f4:3e:7f:f4:8d:86:98:
                    dc:22:3d:4e:c7:88:49:b0:fe:ff:ee:e1:f8:8b:ca:
                    bb:79:71:95:fa:f8:da:e0:9e:4b:97:c1:4d:89:57:
                    5d:a5:20:7b:37:b7:18:b5:e9:e2:5c:41:15:45:54:
                    4c:62:38:2f:c9:17:f5:25:b7:10:89:d8:7b:03:cf:
                    87:e1:56:2c:fe:b5:4a:40:a1:e9:39:35:44:15:c6:
                    b3:25:cf:8d:17:30:ea:db:75:b0:8b:15:61:de:0c:
                    96:ac:ac:4d:c3:8e:e1:b5:a6:3c:be:ae:01:f8:1d:
                    9a:32:bb:f8:f4:db:89:b7:b5:54:ff:54:5b:f9:53:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0B:F7:82:5F:A1:B1:82:BC:D0:0D:FD:47:29:A1:98:2F:A9:C0:54
            X509v3 Authority Key Identifier:
                keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:8e:e6:42:90:d7:47:42:52:c2:a5:df:87:2f:f0:a4:d3:
         41:22:d6:ed:d1:f0:04:86:a9:f0:7e:cf:1a:1a:d5:92:36:86:
         ac:59:38:b3:62:95:8b:c6:59:11:08:2e:02:21:94:73:c6:aa:
         bf:21:38:2b:0f:09:21:35:e9:f3:df:a2:06:36:22:90:f8:63:
         81:3b:3c:11:be:a2:bb:78:5a:ec:99:60:0d:0c:fa:ec:1f:01:
         48:25:56:4d:91:42:a0:e9:b6:97:c2:0f:c4:2b:9a:74:5f:94:
         46:1c:dc:d7:04:f0:c7:eb:39:e8:9a:6b:66:14:95:c7:9e:e9:
         59:28:25:7f:ad:8f:44:bb:f9:d2:ca:e3:c8:8c:3a:fb:c7:8a:
         74:7d:04:29:cf:65:cd:28:70:5f:e8:a9:a6:12:7e:3e:05:b9:
         dc:94:8e:ad:39:10:4a:dd:88:3f:61:f9:9b:d8:0e:8a:e3:44:
         95:9a:64:f8:3c:15:1f:e5:4d:e1:3c:61:de:f8:1e:48:1c:b1:
         bc:d0:25:bd:ed:c7:77:6e:1e:f7:10:2f:1d:52:0a:f3:39:46:
         9a:e8:3a:8c:41:70:74:fe:e2:46:0c:2e:17:ae:dc:1b:45:82:
         16:fb:e0:f3:2e:7a:b5:02:5f:54:0e:3f:fa:1d:f5:2d:8c:bd:
         90:2e:a8:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQnJTbDnOM9zK6iUHNWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YjU5NTI2MGY3MmMyMjI1NDdhYzNlMzY3ZjJjODg3YWUz
OGEzZmMwHhcNMjUxMTA0MDkwMDU0WhcNMjUxMTA1MDkwMDU0WjAzMTEwLwYDVQQD
EyhkZjBiZjc4MjVmYTFiMTgyYmNkMDBkZmQ0NzI5YTE5ODJmYTljMDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtkbROIJ+vB4yWxQU0eD3b00qaaL
ETkzaYwCmZu30BJAB9kcTdOJaFzV15NKPTBsNz8dqGim/ibI3IdifcyaXC4Saq1o
N8Ja/HYv/XcHtaF91tY2qmMy/1vz7eg7UBEAGPuDp2wVLBOLbELbSwutWIqRdoJ1
fP8D9gA4RMM6U/Q+f/SNhpjcIj1Ox4hJsP7/7uH4i8q7eXGV+vja4J5Ll8FNiVdd
pSB7N7cYteniXEEVRVRMYjgvyRf1JbcQidh7A8+H4VYs/rVKQKHpOTVEFcazJc+N
FzDq23WwixVh3gyWrKxNw47htaY8vq4B+B2aMrv49NuJt7VU/1Rb+VPMzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8L94JfobGCvNAN/UcpoZgvqcBUMB8GA1UdIwQY
MBaAFBW1lSYPcsIiVHrD42fyyIeuOKP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmJXVkpnOXl3aUpVZXNQalpfTEloNjQ0b193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MTRkNjQtMzdkMy00YmJjLThmM2Qt
YjQzY2Q0ZDk3YzhlLzEvRmJXVkpnOXl3aUpVZXNQalpfTEloNjQ0b193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82MTRkNjQtMzdkMy00YmJjLThmM2QtYjQzY2Q0ZDk3Yzhl
LzEvRmJXVkpnOXl3aUpVZXNQalpfTEloNjQ0b193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6eO5kKQ
10dCUsKl34cv8KTTQSLW7dHwBIap8H7PGhrVkjaGrFk4s2KVi8ZZEQguAiGUc8aq
vyE4Kw8JITXp89+iBjYikPhjgTs8Eb6iu3ha7JlgDQz67B8BSCVWTZFCoOm2l8IP
xCuadF+URhzc1wTwx+s56JprZhSVx57pWSglf62PRLv50srjyIw6+8eKdH0EKc9l
zShwX+ipphJ+PgW53JSOrTkQSt2IP2H5m9gOiuNElZpk+DwVH+VN4Txh3vgeSByx
vNAlve3Hd24e9xAvHVIK8zlGmug6jEFwdP7iRgwuF67cG0WCFvvg8y56tQJfVA4/
+h31LYy9kC6oXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:55 2025 by rpki-client