Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
File:                     x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json)
Hash identifier:          DTDnZHyZVsGFae4a7bIqEYjVLIQiQOjK1ITLTnHFe5Y=
Subject key identifier:   62:DA:27:78:51:25:5E:27:87:63:7D:D8:0E:33:0B:BB:17:6E:2B:8A
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Certificate issuer:       /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial:       019A52D0FEF91D7F3472F81CE1921971EE16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
Manifest number:          0FB0
Signing time:             Wed 05 Nov 2025 07:00:19 +0000
Manifest this update:     Wed 05 Nov 2025 07:00:19 +0000
Manifest next update:     Thu 06 Nov 2025 07:00:19 +0000
Files and hashes:         1: 1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa (hash: wqsUGKMXa3a0bqJDEXOb2Eoz6FNnYl15/F+MOCWnVUU=)
                          2: cztvIRkmsCPXq2-H_4GpkaNyzII.roa (hash: wGz2hIDGmVI+VZFGQswcvNseSHozmizv0NMUMTJqa4c=)
                          3: pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa (hash: 4UmrNvYonno/HoHy5PiUXCmAjmZg7PWwKoiEqb2kwD0=)
                          4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: I9917a2BQCEGnO2GfCZsmpfsGyQv/I13OlboFg0e8EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d0:fe:f9:1d:7f:34:72:f8:1c:e1:92:19:71:ee:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
        Validity
            Not Before: Nov  5 07:00:19 2025 GMT
            Not After : Nov  6 07:00:19 2025 GMT
        Subject: CN=62da277851255e2787637dd80e330bbb176e2b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:dd:43:64:ec:f2:dc:ac:ac:6e:85:2b:c8:
                    4f:ff:c1:66:16:27:3a:1a:1f:7e:5d:9e:91:c6:40:
                    6f:29:f7:5a:93:31:f4:6e:2a:cb:08:ee:9d:dd:a6:
                    7d:81:d9:87:a3:49:bc:d8:9e:dc:92:bc:4d:86:e1:
                    72:82:09:df:ae:27:34:f9:d8:05:fa:31:25:be:be:
                    e0:bf:80:8e:38:dc:95:25:6c:c1:9e:2c:99:0a:7b:
                    09:f0:3f:bf:30:6a:c8:07:d7:d3:1d:91:a9:c9:86:
                    11:93:a6:94:4a:62:0c:8b:dd:e6:66:6c:3d:e7:5d:
                    10:0a:1e:8a:fa:1a:7e:37:dc:3d:61:44:98:9d:fe:
                    50:2f:2c:22:71:03:03:89:c8:62:dc:ab:ee:4a:bc:
                    bd:27:fe:8e:f1:63:3f:d9:1d:85:2d:4f:6f:94:c7:
                    64:4d:fc:55:92:35:f0:e4:8e:f6:95:52:46:ee:9a:
                    42:bc:1b:67:ab:c4:3c:70:14:19:d1:db:67:94:ad:
                    06:9f:f2:55:ce:d7:ff:2c:54:37:2e:00:3b:e6:ed:
                    1a:21:43:f1:75:77:05:95:53:5d:fd:a8:02:29:97:
                    cc:c1:37:10:4a:3a:f2:c3:d7:d7:1e:8f:1d:81:b7:
                    78:5d:8b:1c:7d:78:97:d5:2b:73:51:e9:b6:d2:8f:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DA:27:78:51:25:5E:27:87:63:7D:D8:0E:33:0B:BB:17:6E:2B:8A
            X509v3 Authority Key Identifier:
                keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:a5:2d:a2:d8:19:f1:33:eb:5a:91:67:e8:f9:ca:40:0b:
         89:39:14:0b:56:52:c7:18:d8:36:9c:f8:18:f4:e2:94:b0:73:
         10:7d:46:01:a1:32:7f:2a:df:52:f7:48:a2:6f:b7:39:c5:65:
         7e:c3:0c:b0:e7:a5:0c:97:03:86:22:27:73:4b:62:45:9a:d3:
         f2:90:d1:95:f3:bf:84:da:91:a4:38:0f:1c:20:90:6d:a8:54:
         f5:2e:26:71:0f:80:08:2b:4e:e1:3c:63:44:64:a2:b9:90:88:
         e5:69:b0:68:d0:57:81:d5:9d:59:c5:93:cd:01:c6:cd:27:c6:
         aa:72:94:ef:a9:8c:d8:e6:91:f4:55:d8:0d:bb:13:3e:7e:76:
         c9:fa:b2:94:c6:40:bd:6b:81:28:39:e9:83:69:3a:0a:df:7c:
         ec:c6:97:21:fe:60:8b:4b:09:dc:12:30:55:a6:da:27:4a:16:
         8d:f4:f4:c6:33:c6:cc:dd:3e:50:04:d3:f5:bf:16:54:e5:38:
         16:45:dd:01:1b:91:5b:bb:b9:96:32:7f:0b:cc:9c:d4:c6:fd:
         28:4b:96:76:d1:48:58:ae:8d:73:4f:9d:9d:bd:ee:70:a8:78:
         ab:8e:d5:0a:fc:95:3a:79:49:57:aa:9f:4b:db:86:0b:f4:eb:
         06:da:8b:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0P75HX80cvgc4ZIZce4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw
ZjE4NjUwHhcNMjUxMTA1MDcwMDE5WhcNMjUxMTA2MDcwMDE5WjAzMTEwLwYDVQQD
Eyg2MmRhMjc3ODUxMjU1ZTI3ODc2MzdkZDgwZTMzMGJiYjE3NmUyYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVjdQ2Ts8tysrG6FK8hP/8FmFic6
Gh9+XZ6RxkBvKfdakzH0birLCO6d3aZ9gdmHo0m82J7ckrxNhuFyggnfric0+dgF
+jElvr7gv4COONyVJWzBniyZCnsJ8D+/MGrIB9fTHZGpyYYRk6aUSmIMi93mZmw9
510QCh6K+hp+N9w9YUSYnf5QLywicQMDichi3KvuSry9J/6O8WM/2R2FLU9vlMdk
TfxVkjXw5I72lVJG7ppCvBtnq8Q8cBQZ0dtnlK0Gn/JVztf/LFQ3LgA75u0aIUPx
dXcFlVNd/agCKZfMwTcQSjryw9fXHo8dgbd4XYscfXiX1StzUem20o/dhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLaJ3hRJV4nh2N92A4zC7sXbiuKMB8GA1UdIwQY
MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct
ZjQzNzgzOTA5NWQxLzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx
LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjL2lLaLY
GfEz61qRZ+j5ykALiTkUC1ZSxxjYNpz4GPTilLBzEH1GAaEyfyrfUvdIom+3OcVl
fsMMsOelDJcDhiInc0tiRZrT8pDRlfO/hNqRpDgPHCCQbahU9S4mcQ+ACCtO4Txj
RGSiuZCI5WmwaNBXgdWdWcWTzQHGzSfGqnKU76mM2OaR9FXYDbsTPn52yfqylMZA
vWuBKDnpg2k6Ct987MaXIf5gi0sJ3BIwVabaJ0oWjfT0xjPGzN0+UATT9b8WVOU4
FkXdARuRW7u5ljJ/C8yc1Mb9KEuWdtFIWK6Nc0+dnb3ucKh4q47VCvyVOnlJV6qf
S9uGC/TrBtqLvQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:07 2025 by rpki-client