Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
File:                     _08Gv_OluFFRtlcFtDCOmvsf2Pc.mft (raw, json)
Hash identifier:          1GvnLLPNQGeFYKxLQfI15+6X4ObtqsSVVWhGyQC3MI0=
Subject key identifier:   2F:02:1E:01:A1:1A:2A:A5:45:F6:AE:B2:A0:A9:B3:32:FD:0D:64:10
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Certificate issuer:       /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial:       019A4E4FE2AA442BA48F8024830087674608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
Manifest number:          1714
Signing time:             Tue 04 Nov 2025 10:00:49 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:49 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:49 +0000
Files and hashes:         1: 7cMsuu_jwZ4DOvuoBVdx2pi1zRQ.roa (hash: /MIDEJVEQSp9V1rCF5ezc9jg3qtYKJbL8o4PDhdKQ+g=)
                          2: _08Gv_OluFFRtlcFtDCOmvsf2Pc.crl (hash: mMDNspZozBsy2nNzkFxouABXfud+ZGAaLGYaoGXlXRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:e2:aa:44:2b:a4:8f:80:24:83:00:87:67:46:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
        Validity
            Not Before: Nov  4 10:00:49 2025 GMT
            Not After : Nov  5 10:00:49 2025 GMT
        Subject: CN=2f021e01a11a2aa545f6aeb2a0a9b332fd0d6410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2f:47:a1:db:13:2d:06:75:4a:d1:56:48:f9:
                    54:85:53:dd:97:4e:77:8c:9a:e7:bd:8f:70:eb:f3:
                    e4:08:12:b0:bb:59:de:6c:8c:3a:43:d0:4a:0a:a3:
                    a8:94:c7:9b:e4:09:a8:4c:8a:10:52:49:ab:6f:24:
                    d6:f7:84:37:70:7f:f6:0a:e7:90:cf:61:05:26:b3:
                    36:ed:02:88:73:cf:16:d2:e2:ca:36:f7:8a:37:32:
                    c6:57:05:47:9e:54:93:c2:89:2a:c2:3f:3c:11:e7:
                    a2:4e:18:8b:f4:0f:db:aa:bf:af:ce:86:8d:7d:ec:
                    1d:62:c6:94:ef:01:1d:30:c8:29:47:45:7a:c3:18:
                    b6:03:5b:b7:c2:e2:67:70:74:de:9d:d5:de:0a:07:
                    56:bf:3f:19:ed:a9:25:64:2a:49:2b:60:fc:bd:d9:
                    8b:71:6e:cc:0f:84:56:e0:54:dc:62:da:d4:62:81:
                    6a:a0:ac:05:79:f8:5e:19:bf:e4:58:9a:b0:1d:cc:
                    a6:43:d5:bc:c4:48:26:d6:b1:e0:79:0c:62:45:c7:
                    b5:06:dd:e8:52:21:b4:f0:0f:81:c4:0b:91:f6:07:
                    66:40:95:6f:3e:47:99:0c:94:88:bf:d4:72:47:14:
                    36:8c:4a:6f:03:3a:03:54:2d:e1:73:23:6c:48:d0:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:1E:01:A1:1A:2A:A5:45:F6:AE:B2:A0:A9:B3:32:FD:0D:64:10
            X509v3 Authority Key Identifier:
                keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:34:c1:29:bd:34:46:5e:1e:3f:e9:76:45:47:05:0b:f2:
         21:41:bc:7b:5d:41:fb:8e:22:94:6f:a4:0e:45:23:0a:af:7c:
         c4:1a:18:47:c6:20:c7:fe:8e:e9:ce:19:87:43:77:3f:cd:a8:
         17:21:28:5c:c8:ca:7a:cf:cd:04:5b:c7:d6:6c:d8:77:f4:ba:
         37:a5:27:d3:0f:e6:88:01:b6:44:9a:98:6a:7b:0d:09:4b:60:
         12:8c:8f:96:55:2d:6e:91:b4:cb:f1:ff:67:e1:ee:08:a1:6c:
         39:19:a5:d7:bd:a7:8a:7c:d2:3c:64:65:90:61:08:95:60:02:
         96:7f:a2:bd:e9:56:80:21:25:ac:80:3c:22:fa:a9:28:8c:5e:
         8d:9d:68:75:0f:69:eb:d1:84:bf:24:65:18:b7:7c:90:9a:f9:
         a2:9f:5c:51:16:d0:11:9b:cb:6e:a1:89:95:b0:9d:cf:5e:77:
         94:ea:64:1e:47:be:79:59:ac:53:bf:6c:7a:ee:00:f9:a9:4a:
         97:99:de:6f:14:c5:97:ee:3c:2a:af:88:9c:e5:93:7e:06:d7:
         1c:29:4a:95:ee:22:9c:a4:d4:cd:c9:35:49:e7:da:58:69:f5:
         d6:6a:10:07:93:97:87:e3:24:f6:18:0e:a8:d3:96:b3:44:91:
         65:4b:40:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT+KqRCukj4AkgwCHZ0YIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGYwNmJmZjNhNWI4NTE1MWI2NTcwNWI0MzA4ZTlhZmIx
ZmQ4ZjcwHhcNMjUxMTA0MTAwMDQ5WhcNMjUxMTA1MTAwMDQ5WjAzMTEwLwYDVQQD
EygyZjAyMWUwMWExMWEyYWE1NDVmNmFlYjJhMGE5YjMzMmZkMGQ2NDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9C9HodsTLQZ1StFWSPlUhVPdl053
jJrnvY9w6/PkCBKwu1nebIw6Q9BKCqOolMeb5AmoTIoQUkmrbyTW94Q3cH/2CueQ
z2EFJrM27QKIc88W0uLKNveKNzLGVwVHnlSTwokqwj88EeeiThiL9A/bqr+vzoaN
fewdYsaU7wEdMMgpR0V6wxi2A1u3wuJncHTendXeCgdWvz8Z7aklZCpJK2D8vdmL
cW7MD4RW4FTcYtrUYoFqoKwFefheGb/kWJqwHcymQ9W8xEgm1rHgeQxiRce1Bt3o
UiG08A+BxAuR9gdmQJVvPkeZDJSIv9RyRxQ2jEpvAzoDVC3hcyNsSNBmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8CHgGhGiqlRfausqCpszL9DWQQMB8GA1UdIwQY
MBaAFP9PBr/zpbhRUbZXBbQwjpr7H9j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2Et
MjVlZmZkZDc5NmRjLzEvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yZmI4YmQtZTFhMC00NTRjLThiY2EtMjVlZmZkZDc5NmRj
LzEvXzA4R3ZfT2x1RkZSdGxjRnREQ09tdnNmMlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRM0wSm9
NEZeHj/pdkVHBQvyIUG8e11B+44ilG+kDkUjCq98xBoYR8Ygx/6O6c4Zh0N3P82o
FyEoXMjKes/NBFvH1mzYd/S6N6Un0w/miAG2RJqYansNCUtgEoyPllUtbpG0y/H/
Z+HuCKFsORml172ninzSPGRlkGEIlWACln+ivelWgCElrIA8IvqpKIxejZ1odQ9p
69GEvyRlGLd8kJr5op9cURbQEZvLbqGJlbCdz153lOpkHke+eVmsU79seu4A+alK
l5nebxTFl+48Kq+InOWTfgbXHClKle4inKTUzck1SefaWGn11moQB5OXh+Mk9hgO
qNOWs0SRZUtAVg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:00 2025 by rpki-client