
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          xq7vE1NflMAypUIrZ4DQee5ouIAiUh+IeBjTukZyP+s=
Subject key identifier:   C2:9D:B4:A8:97:1A:39:0D:1A:32:B3:BA:3E:A3:38:2D:2C:11:A6:5F
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       019A4DAAD31A24D1C299588C64CC0465837D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          1716
Signing time:             Tue 04 Nov 2025 07:00:31 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:31 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:31 +0000
Files and hashes:         1: AMzNvjmZwk2houvOqkqFV0cvo5A.roa (hash: HTkAYw+c3eaFcRD2e31KCt/aUCDK4fI60P5ZxmtXtPo=)
                          2: B1Iex8uRRf8aok8aKmx-BCttbhY.roa (hash: CY4dRMbgt1Iq8US/eF21ip9+rYukOasx0o91wxBlE/A=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: FNYG5v7Lem2gd6IfCvOMQ23LdgJ2YjJqX/41sIi5jrs=)
                          4: duD9YQ4jRA3telkah1i-OVhA3pE.roa (hash: i34mTgchsjKccKSOftsEFIiydrQaMy7yIQu1TGf6N/I=)
                          5: sRpgMS5rykA5fxygTnmzWxlNSfM.roa (hash: Ubkf69/8EGo039fbIMx4UoElCOwq3uf2Zv/l74NdEPQ=)
                          6: x525jdZJUsYoxHJwzP0o_5TQ2io.roa (hash: IRj2BJAlnspTo/r0lchgNs138Ds47a20I5Smpndeux8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:31 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:d3:1a:24:d1:c2:99:58:8c:64:cc:04:65:83:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Nov  4 07:00:31 2025 GMT
            Not After : Nov  5 07:00:31 2025 GMT
        Subject: CN=c29db4a8971a390d1a32b3ba3ea3382d2c11a65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:18:03:32:58:28:6f:16:87:e9:45:13:37:
                    b8:cc:5f:45:ce:58:b0:fb:93:bd:f2:56:dd:15:fe:
                    e6:64:18:d6:96:20:e4:18:94:37:69:20:fd:1b:1f:
                    cd:d3:1e:f8:5d:f6:ae:ae:15:5a:38:f7:dd:e4:fe:
                    35:4f:58:71:62:ce:69:d9:73:39:61:5d:c6:16:b5:
                    05:a9:35:9a:ea:f9:97:9c:93:f1:d6:a3:d5:b4:a8:
                    3b:2d:3c:e5:cc:b5:ab:28:a8:a1:88:a8:72:ef:1a:
                    02:34:08:56:d2:0d:de:9b:1c:eb:a7:85:00:6c:ab:
                    7a:2b:59:8e:1a:bd:49:0f:b1:2b:41:a5:9c:fc:08:
                    0c:90:fd:eb:2c:11:38:c3:4e:29:83:12:93:33:b2:
                    00:49:54:8c:51:4d:f5:6e:1b:d7:49:b8:1c:53:92:
                    ce:83:df:85:a3:26:c1:20:ce:e6:0f:c6:ab:47:d9:
                    a3:6a:21:64:03:04:6a:f2:3a:50:40:c3:90:4d:68:
                    e3:85:89:f8:9a:68:85:44:0a:d9:4b:a2:95:4d:28:
                    0e:6e:5b:1e:f1:a3:e6:d2:76:33:fe:7e:6c:1d:6d:
                    60:ba:bb:94:8c:bb:f0:c2:fc:9e:da:ad:11:d4:91:
                    af:c6:6a:b3:00:76:be:73:c8:5c:40:30:d4:9f:26:
                    1d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9D:B4:A8:97:1A:39:0D:1A:32:B3:BA:3E:A3:38:2D:2C:11:A6:5F
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         76:e8:aa:d4:6f:78:88:7d:36:60:f4:f3:ed:71:ff:c6:a8:1a:
         6f:8b:77:47:d7:9f:b7:49:37:b3:57:6a:2f:f8:63:bb:e1:e6:
         2f:53:e5:aa:86:e1:e5:5d:11:74:5d:76:84:e6:6c:27:e1:44:
         98:6f:d1:de:ab:c1:94:0f:fb:a2:a2:2d:e2:28:f6:ae:0b:13:
         ce:b3:f1:04:20:ce:0a:7b:0e:4e:17:37:be:e4:52:21:6e:72:
         4e:73:65:b7:78:b1:71:e8:a3:1b:66:09:56:b3:64:19:82:82:
         4f:30:5c:69:c0:1e:89:88:89:f0:37:ea:3f:9d:4e:11:50:b6:
         75:bc:c5:94:4b:61:64:45:48:9c:33:87:07:b2:63:3a:82:2a:
         54:bc:f4:4e:46:d3:b0:30:c6:40:54:b4:ea:30:72:2d:32:50:
         ff:16:3b:b9:9a:3a:13:a5:bc:90:04:b6:ba:e2:97:25:d3:78:
         33:61:5c:d7:f5:68:a8:65:95:0d:b8:4c:82:16:97:1d:86:49:
         cf:58:a3:bc:ab:25:7d:0b:77:9b:95:36:c7:c6:26:02:d9:14:
         cd:40:af:58:b0:d8:7f:5d:39:83:7d:c2:3e:9e:a6:98:ea:c4:
         09:f2:66:39:01:7c:9a:ee:4a:69:44:93:4d:6c:74:02:b5:38:
         f1:73:8e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqtMaJNHCmViMZMwEZYN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZGExYzZiMWE2NWY3YTNkOTdmOWJkNzVlN2NhYzMxMzUy
NDZmYTUwHhcNMjUxMTA0MDcwMDMxWhcNMjUxMTA1MDcwMDMxWjAzMTEwLwYDVQQD
EyhjMjlkYjRhODk3MWEzOTBkMWEzMmIzYmEzZWEzMzgyZDJjMTFhNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNMYAzJYKG8Wh+lFEze4zF9Fzliw
+5O98lbdFf7mZBjWliDkGJQ3aSD9Gx/N0x74XfaurhVaOPfd5P41T1hxYs5p2XM5
YV3GFrUFqTWa6vmXnJPx1qPVtKg7LTzlzLWrKKihiKhy7xoCNAhW0g3emxzrp4UA
bKt6K1mOGr1JD7ErQaWc/AgMkP3rLBE4w04pgxKTM7IASVSMUU31bhvXSbgcU5LO
g9+FoybBIM7mD8arR9mjaiFkAwRq8jpQQMOQTWjjhYn4mmiFRArZS6KVTSgOblse
8aPm0nYz/n5sHW1guruUjLvwwvye2q0R1JGvxmqzAHa+c8hcQDDUnyYdYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKdtKiXGjkNGjKzuj6jOC0sEaZfMB8GA1UdIwQY
MBaAFAbaHGsaZfej2X+b1158rDE1JG+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjIt
NDVlYjczOGNiOWM4LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjItNDVlYjczOGNiOWM4
LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduiq1G94
iH02YPTz7XH/xqgab4t3R9eft0k3s1dqL/hju+HmL1Plqobh5V0RdF12hOZsJ+FE
mG/R3qvBlA/7oqIt4ij2rgsTzrPxBCDOCnsOThc3vuRSIW5yTnNlt3ixceijG2YJ
VrNkGYKCTzBcacAeiYiJ8DfqP51OEVC2dbzFlEthZEVInDOHB7JjOoIqVLz0TkbT
sDDGQFS06jByLTJQ/xY7uZo6E6W8kAS2uuKXJdN4M2Fc1/VoqGWVDbhMghaXHYZJ
z1ijvKslfQt3m5U2x8YmAtkUzUCvWLDYf105g33CPp6mmOrECfJmOQF8mu5KaUST
TWx0ArU48XOOEQ==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:55:27 2025 by rpki-client