Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File:                     n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier:          a2T9h3eXnX7ypwX8kkTlbARR+S9dwSLGrHoegQyH5mI=
Subject key identifier:   3C:E7:0C:6E:E7:B6:BC:07:A2:66:F7:F2:3F:21:8A:03:84:5B:20:6F
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       01987306D5CA71527F5BF031E07A60069DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number:          10CF
Signing time:             Mon 04 Aug 2025 03:01:24 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:24 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:24 +0000
Files and hashes:         1: 1-SvxvqtngGHpYm4Mb_K72J1J0SU.roa (hash: fltwqIioPSuzKLuXGtdMjJVRWOd9cnpy/Vmxbwnrchg=)
                          2: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=)
                          3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=)
                          4: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=)
                          5: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: ugZBsPdBq7HRBMzhPFUoOD61nK0450FOt12hF7vyFtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:d5:ca:71:52:7f:5b:f0:31:e0:7a:60:06:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Aug  4 03:01:24 2025 GMT
            Not After : Aug  5 03:01:24 2025 GMT
        Subject: CN=3ce70c6ee7b6bc07a266f7f23f218a03845b206f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:24:4b:13:e1:99:88:c1:64:10:0c:f8:df:
                    eb:db:04:19:f2:b9:c0:76:8f:79:e4:79:76:38:71:
                    de:27:88:74:3c:ba:fc:a4:8f:3f:bc:86:c3:48:59:
                    b7:f9:54:58:cc:be:0b:d1:33:53:d4:88:8b:5f:93:
                    76:ff:49:d4:3c:e1:dc:a5:b7:df:be:98:a1:2f:bb:
                    ce:e5:85:8d:d7:c6:50:d1:35:6a:c1:04:f0:bd:41:
                    f8:75:3c:fa:84:5b:bd:74:dd:a8:3b:f9:f7:df:c4:
                    20:1b:a4:24:e4:24:33:2f:a6:45:4a:47:8b:83:45:
                    80:0f:10:22:48:87:85:62:4c:3c:50:1d:1a:ca:e9:
                    18:d9:89:f3:3b:c7:2c:43:b4:19:68:32:5f:8f:a6:
                    65:9d:e8:9f:63:57:c0:db:46:9d:f1:3b:27:99:38:
                    6b:95:5e:8c:59:ca:9d:09:fc:4b:16:df:83:2b:13:
                    58:29:25:d5:24:b7:e2:18:68:d6:4b:e8:71:3e:01:
                    97:83:f3:e5:94:01:f9:6b:b3:f0:a6:90:00:af:f9:
                    ab:c6:50:a2:e3:80:c0:74:95:7d:e5:04:29:9e:92:
                    ca:3e:d0:26:4a:ad:00:1a:25:53:a3:1b:77:69:01:
                    b0:65:4f:4a:c8:d8:75:a6:64:fe:c4:d3:54:69:46:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E7:0C:6E:E7:B6:BC:07:A2:66:F7:F2:3F:21:8A:03:84:5B:20:6F
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a1:db:e3:34:6f:ba:40:9d:e5:73:00:3e:51:e2:19:7e:5d:
         66:21:6e:8d:15:73:ca:3f:1f:a6:5f:6e:fc:48:c1:d4:5c:e9:
         45:06:5f:0b:fa:5a:91:2c:cc:cc:44:b0:6a:4c:c8:47:61:98:
         b5:22:01:93:c2:60:2a:4b:52:9e:e7:f4:63:7b:a4:1c:f3:bb:
         7f:36:fd:ee:b6:4b:a3:5f:28:c5:b5:7a:33:5e:97:44:58:95:
         2e:bd:46:a4:93:ab:2b:be:5f:1b:98:cd:7c:cf:1f:fb:5d:6c:
         ac:2a:24:01:5c:87:08:cd:92:03:ee:75:38:f0:f3:2a:32:ce:
         12:20:80:b4:0c:77:b6:9a:39:f1:d5:a1:b7:e7:3a:0b:ff:8e:
         f4:96:68:4e:fa:67:a5:00:82:ee:48:d3:25:03:28:8c:48:89:
         f5:87:a6:6b:e4:db:98:96:e2:47:08:7d:d2:ff:6c:1d:84:df:
         97:4d:86:de:f0:bc:47:93:03:d3:91:e2:28:bf:6b:3d:1f:02:
         b3:18:7d:06:e4:f4:cf:83:69:10:21:89:6c:38:ce:b2:82:c3:
         64:bf:5d:2f:c8:af:03:f2:82:24:50:5c:7c:bb:82:37:b1:52:
         11:eb:91:2f:a9:99:35:4e:ca:df:d2:10:e1:26:8f:f3:62:c5:
         6c:6c:d3:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBtXKcVJ/W/Ax4HpgBp3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl
MTI5ODcwHhcNMjUwODA0MDMwMTI0WhcNMjUwODA1MDMwMTI0WjAzMTEwLwYDVQQD
EygzY2U3MGM2ZWU3YjZiYzA3YTI2NmY3ZjIzZjIxOGEwMzg0NWIyMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPAkSxPhmYjBZBAM+N/r2wQZ8rnA
do955Hl2OHHeJ4h0PLr8pI8/vIbDSFm3+VRYzL4L0TNT1IiLX5N2/0nUPOHcpbff
vpihL7vO5YWN18ZQ0TVqwQTwvUH4dTz6hFu9dN2oO/n338QgG6Qk5CQzL6ZFSkeL
g0WADxAiSIeFYkw8UB0ayukY2YnzO8csQ7QZaDJfj6ZlneifY1fA20ad8TsnmThr
lV6MWcqdCfxLFt+DKxNYKSXVJLfiGGjWS+hxPgGXg/PllAH5a7PwppAAr/mrxlCi
44DAdJV95QQpnpLKPtAmSq0AGiVToxt3aQGwZU9KyNh1pmT+xNNUaUYj7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDznDG7ntrwHomb38j8higOEWyBvMB8GA1UdIwQY
MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt
NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk
LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKHb4zRv
ukCd5XMAPlHiGX5dZiFujRVzyj8fpl9u/EjB1FzpRQZfC/pakSzMzESwakzIR2GY
tSIBk8JgKktSnuf0Y3ukHPO7fzb97rZLo18oxbV6M16XRFiVLr1GpJOrK75fG5jN
fM8f+11srCokAVyHCM2SA+51OPDzKjLOEiCAtAx3tpo58dWht+c6C/+O9JZoTvpn
pQCC7kjTJQMojEiJ9Yema+TbmJbiRwh90v9sHYTfl02G3vC8R5MD05HiKL9rPR8C
sxh9BuT0z4NpECGJbDjOsoLDZL9dL8ivA/KCJFBcfLuCN7FSEeuRL6mZNU7K39IQ
4SaP82LFbGzTLQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:19 2025 by rpki-client