Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
File:                     FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json)
Hash identifier:          Fwsm2V2cfVBhJw77c/xGveXyIG9Og3iT+dbCH2ypJ0k=
Subject key identifier:   DE:A6:1F:D4:54:7A:69:E8:8D:AC:07:7A:56:06:8E:58:66:5C:4F:54
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Certificate issuer:       /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial:       019A4C6166ED7366EF029D07E717E310D0CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
Manifest number:          08D1
Signing time:             Tue 04 Nov 2025 01:00:42 +0000
Manifest this update:     Tue 04 Nov 2025 01:00:42 +0000
Manifest next update:     Wed 05 Nov 2025 01:00:42 +0000
Files and hashes:         1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=)
                          2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: TbDuGeR5id2h3gvGTJJ1yztez8lq97+qmgE4AMB9MZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:61:66:ed:73:66:ef:02:9d:07:e7:17:e3:10:d0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
        Validity
            Not Before: Nov  4 01:00:42 2025 GMT
            Not After : Nov  5 01:00:42 2025 GMT
        Subject: CN=dea61fd4547a69e88dac077a56068e58665c4f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:0e:89:42:08:13:eb:b8:39:e1:d4:d4:45:
                    a6:15:8f:d6:65:67:56:7a:03:fe:4a:65:18:d5:d4:
                    1c:b6:c9:a9:84:45:14:e3:7a:86:82:fc:7d:65:ab:
                    ef:c9:6b:bc:92:b3:3a:53:5a:71:25:d7:15:10:65:
                    55:a1:4c:7a:ad:1d:c9:7f:a6:5b:d2:a5:b6:6a:be:
                    f1:b5:26:f7:95:55:cc:52:b3:e7:76:2e:e6:db:db:
                    5f:17:0a:be:f3:91:c0:22:f3:05:5d:b7:21:10:6c:
                    f5:15:35:d5:5b:81:e3:da:f2:09:36:7f:16:19:b2:
                    61:c2:5f:99:a3:53:e3:8f:f1:94:6d:1d:0a:c5:24:
                    24:74:bd:11:02:99:1b:1c:d3:82:62:40:9b:fa:08:
                    80:7f:bf:d5:25:98:b5:12:68:9e:9c:00:32:83:50:
                    f2:fb:17:46:bb:de:cc:37:27:24:7d:91:82:bf:04:
                    96:e6:c9:6c:ac:97:ef:5c:d7:07:14:a3:ac:6a:13:
                    46:50:37:ff:e8:22:45:79:f3:b3:02:56:1c:66:de:
                    fc:16:8f:11:4e:8a:e7:6a:df:b9:ca:ba:d3:52:e7:
                    09:76:bc:91:83:77:a5:e8:80:96:fb:45:b0:07:de:
                    ea:b1:2d:46:3a:2a:b3:19:e9:75:9b:4e:79:ba:dc:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A6:1F:D4:54:7A:69:E8:8D:AC:07:7A:56:06:8E:58:66:5C:4F:54
            X509v3 Authority Key Identifier:
                keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:33:a5:d4:d9:9a:9d:58:b3:f6:09:79:69:d2:6b:09:46:97:
         db:72:d1:70:42:af:12:17:68:f7:8e:0b:e5:07:23:f6:be:54:
         61:92:9d:d8:81:3d:e8:bb:e1:16:96:c6:5b:5f:eb:6f:84:81:
         98:78:0b:2e:14:1d:0f:da:56:2d:20:81:b1:a6:e1:36:0f:66:
         80:86:a1:08:5f:b2:53:9e:da:4e:8f:19:36:d6:31:d7:25:b6:
         e3:4e:23:04:db:26:61:06:ee:05:5d:16:20:70:2d:26:cf:18:
         a7:c9:78:e2:6a:e5:6b:bc:e5:9d:71:c2:93:40:be:ad:a9:05:
         91:cf:1f:13:72:7a:6d:3d:3a:7f:e1:70:61:4a:69:8f:06:07:
         8b:bb:5e:b6:89:52:7f:bd:34:eb:6b:41:7f:2c:f7:84:05:bc:
         86:ea:5f:9a:22:02:7c:e5:23:4a:32:ed:2d:a6:7c:03:e0:d9:
         e9:0d:a9:19:a5:74:d1:27:f8:cf:a5:68:78:6e:b7:f0:a5:b6:
         4c:f4:c5:b6:af:35:86:fd:44:a4:22:c9:26:f6:6d:fb:c9:a5:
         93:d4:b8:bf:19:84:91:b7:4d:8a:f6:48:0b:a2:71:bf:c2:06:
         f6:4c:20:93:e1:e4:f0:18:3a:7d:4d:60:49:b9:9f:8c:14:cf:
         18:ca:5b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYWbtc2bvAp0H5xfjENDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OWQzMGI3MGI5YTgzY2I4ZWQ1NTAxZjU1NGE3ZmVjYTM4
MmY5NTkwHhcNMjUxMTA0MDEwMDQyWhcNMjUxMTA1MDEwMDQyWjAzMTEwLwYDVQQD
EyhkZWE2MWZkNDU0N2E2OWU4OGRhYzA3N2E1NjA2OGU1ODY2NWM0ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4MOiUIIE+u4OeHU1EWmFY/WZWdW
egP+SmUY1dQctsmphEUU43qGgvx9ZavvyWu8krM6U1pxJdcVEGVVoUx6rR3Jf6Zb
0qW2ar7xtSb3lVXMUrPndi7m29tfFwq+85HAIvMFXbchEGz1FTXVW4Hj2vIJNn8W
GbJhwl+Zo1Pjj/GUbR0KxSQkdL0RApkbHNOCYkCb+giAf7/VJZi1EmienAAyg1Dy
+xdGu97MNyckfZGCvwSW5slsrJfvXNcHFKOsahNGUDf/6CJFefOzAlYcZt78Fo8R
Tornat+5yrrTUucJdryRg3el6ICW+0WwB97qsS1GOiqzGel1m055utz/VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6mH9RUemnojawHelYGjlhmXE9UMB8GA1UdIwQY
MBaAFBWdMLcLmoPLjtVQH1VKf+yjgvlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAt
NjVkNzIyODM3MTIxLzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAtNjVkNzIyODM3MTIx
LzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjOl1Nma
nViz9gl5adJrCUaX23LRcEKvEhdo944L5Qcj9r5UYZKd2IE96LvhFpbGW1/rb4SB
mHgLLhQdD9pWLSCBsabhNg9mgIahCF+yU57aTo8ZNtYx1yW2404jBNsmYQbuBV0W
IHAtJs8Yp8l44mrla7zlnXHCk0C+rakFkc8fE3J6bT06f+FwYUppjwYHi7tetolS
f70062tBfyz3hAW8hupfmiICfOUjSjLtLaZ8A+DZ6Q2pGaV00Sf4z6VoeG638KW2
TPTFtq81hv1EpCLJJvZt+8mlk9S4vxmEkbdNivZIC6Jxv8IG9kwgk+Hk8Bg6fU1g
SbmfjBTPGMpbmg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:03 2025 by rpki-client