Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File:                     dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier:          2EdxmMcT31bUOSVzhvMHkvT9zxvMEQmlp98MwfnPcDM=
Subject key identifier:   8B:C7:2F:39:2F:CF:D2:34:17:75:EF:3C:6A:64:FE:0B:26:5D:15:5D
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer:       /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial:       019A54BF3A4B4D594A271C71BCF8720EF71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number:          0B60
Signing time:             Wed 05 Nov 2025 16:00:09 +0000
Manifest this update:     Wed 05 Nov 2025 16:00:09 +0000
Manifest next update:     Thu 06 Nov 2025 16:00:09 +0000
Files and hashes:         1: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=)
                          2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: MYtnMcGtnXeo5GRtxSjDNgi2m5G9WEPwkv7yRCvMgUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:bf:3a:4b:4d:59:4a:27:1c:71:bc:f8:72:0e:f7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
        Validity
            Not Before: Nov  5 16:00:09 2025 GMT
            Not After : Nov  6 16:00:09 2025 GMT
        Subject: CN=8bc72f392fcfd2341775ef3c6a64fe0b265d155d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:c2:e5:4a:18:c1:9c:0b:5c:26:4c:56:98:
                    70:04:b3:4a:bd:4c:53:9d:87:1b:e4:8f:5f:9f:04:
                    93:55:1b:42:b4:7b:cd:66:c5:30:7e:af:6b:52:0a:
                    64:f6:4c:4f:41:bd:82:20:02:ac:cb:be:a3:70:25:
                    84:2b:df:94:14:d3:2d:e4:d3:8d:4a:be:5b:ac:fc:
                    b5:78:00:de:06:66:fe:03:0d:6a:fb:d8:ff:91:7d:
                    20:ee:ef:ae:2c:de:b2:e2:63:c9:9f:a3:a1:57:96:
                    15:05:1e:d9:eb:d9:46:de:55:c2:66:8a:80:0f:11:
                    e9:42:6f:1e:3c:bb:1d:81:2b:eb:7c:01:be:b8:86:
                    ac:a0:fd:4e:87:b9:15:94:1d:ed:f5:3c:52:12:bd:
                    5f:7f:44:d0:49:c5:b0:0a:13:cc:77:5f:d3:32:69:
                    9f:25:e5:be:7b:97:0d:fa:a2:a7:eb:fc:7b:22:c2:
                    45:81:47:1b:4c:00:54:da:33:e5:a4:8d:04:9c:fa:
                    94:2b:6b:69:d0:17:a0:e2:51:36:5b:b4:7f:86:f8:
                    03:c6:46:86:c5:a5:08:1d:5a:9b:bd:2c:1b:2c:5c:
                    6f:d7:3a:93:2f:69:1a:c9:f8:8e:bc:f9:60:9a:55:
                    7e:b6:b0:ca:8b:d5:c0:e7:06:63:b3:d9:14:c4:1c:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C7:2F:39:2F:CF:D2:34:17:75:EF:3C:6A:64:FE:0B:26:5D:15:5D
            X509v3 Authority Key Identifier:
                keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:a5:e7:a7:75:57:c9:0b:3b:86:6b:b5:c2:48:28:aa:7c:
         28:8e:72:b9:7e:a2:99:ab:ea:ef:80:58:db:4f:a4:b0:6e:87:
         b2:99:42:a5:3b:76:74:d9:97:00:4e:8d:0b:33:96:44:65:e9:
         b3:b5:a9:9a:e3:94:cc:a7:3d:52:9b:e9:b9:39:51:0e:34:1c:
         75:68:9f:c4:a8:ff:c3:ff:02:e0:13:06:d3:00:6a:0c:26:4c:
         c4:38:a9:e9:3d:bf:26:d7:07:07:26:7f:01:e8:52:a7:02:25:
         aa:32:3d:a5:fd:86:23:6a:9f:2b:b3:2c:02:a2:fe:de:4a:05:
         61:3a:00:38:8c:4e:8f:eb:c2:63:56:b4:e4:3d:80:9a:bc:db:
         2d:4b:a0:b7:78:8b:bf:cb:6f:c9:7e:2b:a9:38:a0:55:94:c1:
         ba:ce:cf:09:31:d7:b1:4b:06:fd:0e:2c:3a:9d:bf:06:7c:d2:
         e9:c1:25:97:38:2d:21:00:9e:de:4e:52:d7:6a:70:5a:3f:c2:
         50:0b:34:6b:4c:de:62:88:96:7e:de:21:6a:c6:7a:ee:6f:c9:
         84:bb:2f:53:f6:ac:89:78:e2:76:e6:7a:09:3a:93:89:4c:44:
         24:e8:b6:d0:5e:36:9d:71:c0:b4:a2:4a:63:ed:e8:a0:cd:ce:
         17:13:03:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUvzpLTVlKJxxxvPhyDvceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjUxMTA1MTYwMDA5WhcNMjUxMTA2MTYwMDA5WjAzMTEwLwYDVQQD
Eyg4YmM3MmYzOTJmY2ZkMjM0MTc3NWVmM2M2YTY0ZmUwYjI2NWQxNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+LC5UoYwZwLXCZMVphwBLNKvUxT
nYcb5I9fnwSTVRtCtHvNZsUwfq9rUgpk9kxPQb2CIAKsy76jcCWEK9+UFNMt5NON
Sr5brPy1eADeBmb+Aw1q+9j/kX0g7u+uLN6y4mPJn6OhV5YVBR7Z69lG3lXCZoqA
DxHpQm8ePLsdgSvrfAG+uIasoP1Oh7kVlB3t9TxSEr1ff0TQScWwChPMd1/TMmmf
JeW+e5cN+qKn6/x7IsJFgUcbTABU2jPlpI0EnPqUK2tp0Beg4lE2W7R/hvgDxkaG
xaUIHVqbvSwbLFxv1zqTL2kayfiOvPlgmlV+trDKi9XA5wZjs9kUxBy6IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvHLzkvz9I0F3XvPGpk/gsmXRVdMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtWl56d1
V8kLO4ZrtcJIKKp8KI5yuX6imavq74BY20+ksG6HsplCpTt2dNmXAE6NCzOWRGXp
s7WpmuOUzKc9UpvpuTlRDjQcdWifxKj/w/8C4BMG0wBqDCZMxDip6T2/JtcHByZ/
AehSpwIlqjI9pf2GI2qfK7MsAqL+3koFYToAOIxOj+vCY1a05D2AmrzbLUugt3iL
v8tvyX4rqTigVZTBus7PCTHXsUsG/Q4sOp2/BnzS6cEllzgtIQCe3k5S12pwWj/C
UAs0a0zeYoiWft4hasZ67m/JhLsvU/asiXjiduZ6CTqTiUxEJOi20F42nXHAtKJK
Y+3ooM3OFxMDFw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:49:06 2025 by rpki-client