Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File:                     SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier:          iH/ltlJ8h3HUcCI5IxhvU34ZofIZLKOf+NUAOnW6JKA=
Subject key identifier:   A6:D8:83:E4:C4:09:E9:F5:07:40:BD:1F:0C:36:98:6D:96:72:2D:29
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer:       /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial:       019A51F5416786F9A338610748D07DDC173E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number:          1465
Signing time:             Wed 05 Nov 2025 03:00:18 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:18 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:18 +0000
Files and hashes:         1: 1wuoe06EqKtSedO7NGLRmPTmhGc.roa (hash: /sDFB0I8q5IJW+UJc1pW+YTD5nABqiUh65XbbCjiXPo=)
                          2: MErMEgT0Mlg4NzXbifAxY_vYJ18.roa (hash: kZo3foZgB/DZe3VgEb3C47cfvC/YSEn388ZX35kgFPI=)
                          3: RUJrM9R2Q01CiiseZx6BuCkPhi8.roa (hash: ud9fyI+JnGNFQZazgaWgNO5UTDdn2ppqyRqse6KTBD4=)
                          4: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: m3JUvWuxkUvY36IHPD2lKhXbq+sEzlTHmG9t/+a3Udc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:41:67:86:f9:a3:38:61:07:48:d0:7d:dc:17:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
        Validity
            Not Before: Nov  5 03:00:18 2025 GMT
            Not After : Nov  6 03:00:18 2025 GMT
        Subject: CN=a6d883e4c409e9f50740bd1f0c36986d96722d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:32:93:95:74:d7:56:ef:60:ce:56:73:a3:
                    2f:2c:5d:f2:59:02:ab:1c:cf:6d:65:b6:2f:a5:09:
                    87:94:70:ea:05:44:97:b2:c5:c8:92:fe:72:bc:ba:
                    7d:7a:fa:e0:fb:a1:ba:dc:2c:9f:2f:ce:97:82:76:
                    d9:23:b0:61:fe:20:f5:f6:72:84:0b:9b:d5:3d:86:
                    dd:94:79:c7:91:4a:02:07:41:ed:86:b0:1e:96:e7:
                    9b:24:83:19:64:d1:57:e5:3c:47:b1:99:e6:20:d7:
                    84:3a:4d:87:a7:2c:34:54:08:e0:c5:f8:82:b6:20:
                    00:c1:5e:42:c7:4a:75:f3:c3:e2:b4:59:0c:42:0c:
                    1a:f9:db:a7:95:12:0b:da:be:c5:3d:fe:7a:b1:b9:
                    65:8d:1a:65:41:bb:63:6a:e8:7f:81:5a:56:35:a1:
                    1b:3b:5f:8a:73:e4:92:f7:12:2e:7b:8d:b3:67:54:
                    f6:1d:ae:6e:de:e1:be:d3:f2:d3:2b:c0:37:98:fa:
                    66:a4:10:95:90:6c:64:d3:2d:d4:da:50:81:59:64:
                    f1:01:a0:a0:8b:39:ac:1a:2e:8c:58:7a:b3:16:72:
                    3b:ed:f6:51:ed:9f:48:84:60:70:d7:b3:c9:9d:94:
                    26:3a:44:11:f6:8f:94:ca:4f:a0:21:58:3a:96:20:
                    02:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D8:83:E4:C4:09:E9:F5:07:40:BD:1F:0C:36:98:6D:96:72:2D:29
            X509v3 Authority Key Identifier:
                keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:fb:31:28:27:e1:e2:6e:6c:13:56:94:57:f4:32:98:f2:
         46:b0:b4:d5:82:1e:3d:55:6c:1a:5a:4d:6c:12:cb:40:18:50:
         7e:72:72:a4:b9:98:2d:22:25:c3:17:4e:6e:73:46:2a:74:8e:
         02:1b:c9:b5:43:3e:c3:10:b7:7f:49:2d:a6:2a:37:a3:96:0c:
         9a:2d:b6:6f:5f:b9:60:5a:b5:4d:2a:1a:95:9f:da:5c:56:33:
         40:ec:76:4a:54:31:84:a6:a4:c5:1a:fc:e7:f7:18:99:5d:96:
         bf:de:92:60:c4:fc:f2:99:6c:0c:67:e3:5f:9b:da:9c:88:bb:
         3e:bc:84:89:a3:b5:09:d7:0e:0b:3e:17:6a:c2:82:a7:40:cf:
         7f:38:06:14:5e:4f:ed:c3:fc:3a:24:bd:20:8c:57:6b:17:49:
         fa:99:cd:b1:2d:17:c1:f0:fe:9e:ca:bf:7f:ca:d7:5d:c7:45:
         22:dc:ec:16:31:8c:de:08:92:b1:05:7b:22:3c:7b:09:b7:ca:
         e2:4b:d8:dd:a4:1c:56:ae:98:69:4e:28:9e:41:3e:6a:1d:b3:
         f1:7d:9f:84:5f:19:88:f9:bf:5c:79:d9:d5:cb:17:d1:9a:d4:
         98:17:0d:5c:e6:f5:2f:61:1c:2f:26:70:5b:40:64:ca:22:e1:
         90:4e:20:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9UFnhvmjOGEHSNB93Bc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4
OTZkYmYwHhcNMjUxMTA1MDMwMDE4WhcNMjUxMTA2MDMwMDE4WjAzMTEwLwYDVQQD
EyhhNmQ4ODNlNGM0MDllOWY1MDc0MGJkMWYwYzM2OTg2ZDk2NzIyZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVwyk5V011bvYM5Wc6MvLF3yWQKr
HM9tZbYvpQmHlHDqBUSXssXIkv5yvLp9evrg+6G63CyfL86XgnbZI7Bh/iD19nKE
C5vVPYbdlHnHkUoCB0HthrAeluebJIMZZNFX5TxHsZnmINeEOk2Hpyw0VAjgxfiC
tiAAwV5Cx0p188PitFkMQgwa+dunlRIL2r7FPf56sblljRplQbtjauh/gVpWNaEb
O1+Kc+SS9xIue42zZ1T2Ha5u3uG+0/LTK8A3mPpmpBCVkGxk0y3U2lCBWWTxAaCg
izmsGi6MWHqzFnI77fZR7Z9IhGBw17PJnZQmOkQR9o+Uyk+gIVg6liACBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbYg+TECen1B0C9Hww2mG2Wci0pMB8GA1UdIwQY
MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt
NzUzZDk2OWEwNzAyLzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy
LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLv7MSgn
4eJubBNWlFf0MpjyRrC01YIePVVsGlpNbBLLQBhQfnJypLmYLSIlwxdObnNGKnSO
AhvJtUM+wxC3f0ktpio3o5YMmi22b1+5YFq1TSoalZ/aXFYzQOx2SlQxhKakxRr8
5/cYmV2Wv96SYMT88plsDGfjX5vanIi7PryEiaO1CdcOCz4XasKCp0DPfzgGFF5P
7cP8OiS9IIxXaxdJ+pnNsS0XwfD+nsq/f8rXXcdFItzsFjGM3giSsQV7Ijx7CbfK
4kvY3aQcVq6YaU4onkE+ah2z8X2fhF8ZiPm/XHnZ1csX0ZrUmBcNXOb1L2EcLyZw
W0BkyiLhkE4gSQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:58 2025 by rpki-client