Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          iICbkvM7XvAJLTAt1G0u9E/FuWyEcnGrF10zUXbxNxQ=
Subject key identifier:   04:29:A9:D5:C6:25:CD:E9:B0:6F:74:D7:9A:AE:B1:52:6F:DF:7F:12
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       019A503DADB5A829FCFA082CC517CF145E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          0FE1
Signing time:             Tue 04 Nov 2025 19:00:10 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:10 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:10 +0000
Files and hashes:         1: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (hash: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=)
                          2: FL4VCP2ebS0KpzdEEjgpeOZ0WHU.roa (hash: a8hxfR30jfZG7itjDgkJbvAUR1rTEz6wQmvQZHvY+Vg=)
                          3: LWIsGZerMX3p84vU2rGIj-HLsj4.roa (hash: V653yeNd9OWwSecStXWVbNQrGBjKZX6SHpE0zx75CIQ=)
                          4: NXFNvPreWKmytgudduJxNubp9ag.roa (hash: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=)
                          5: kbTOh855t8tddDIlGKiPIgCKjmo.roa (hash: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=)
                          6: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: nOvL1v6wqhyJ5MP6u6ZjFSezhFj9TcLen8FadhcfkqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3d:ad:b5:a8:29:fc:fa:08:2c:c5:17:cf:14:5e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Nov  4 19:00:10 2025 GMT
            Not After : Nov  5 19:00:10 2025 GMT
        Subject: CN=0429a9d5c625cde9b06f74d79aaeb1526fdf7f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:8c:95:ac:7e:38:bd:c7:b0:35:61:4a:5d:
                    35:32:07:d8:08:09:5a:1d:90:c7:5f:f6:3e:13:58:
                    f3:7e:18:43:0e:32:73:fe:ff:6a:36:af:41:be:ff:
                    c1:55:41:7c:4c:71:20:50:e4:01:05:3e:f8:17:7c:
                    6d:64:9e:d7:89:86:79:93:65:92:40:63:eb:82:01:
                    b6:c4:86:4f:3a:4c:d7:b9:5b:5f:cb:4a:a3:8d:ed:
                    65:60:3a:58:63:69:2d:1d:17:98:94:b5:4e:8f:77:
                    06:a1:1e:32:4d:17:02:71:d0:b0:8c:48:fa:98:92:
                    b3:d6:d7:5a:60:d2:8d:26:1e:41:dc:d1:1b:06:b7:
                    8d:e2:85:82:b6:58:96:45:f5:d3:25:64:7b:d7:cb:
                    b3:76:76:17:cf:5b:73:c1:04:15:8a:bb:88:d3:80:
                    83:97:86:96:07:36:a6:fa:99:3a:b8:61:de:85:4d:
                    85:5e:2f:d8:54:07:17:bd:bc:1d:9e:d5:51:30:3b:
                    68:25:21:4b:59:a5:50:ca:3b:fa:cf:4e:6d:f8:4d:
                    a8:e2:a1:85:b7:5a:89:92:af:a2:a4:33:88:fa:ce:
                    58:69:6b:3b:45:9b:64:80:ff:91:e4:56:fc:7c:81:
                    b6:89:5b:e2:6c:8d:ab:a8:83:7a:db:a2:c2:30:32:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:A9:D5:C6:25:CD:E9:B0:6F:74:D7:9A:AE:B1:52:6F:DF:7F:12
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5b:84:e2:5d:4e:09:c2:94:98:63:90:27:44:2b:3d:1c:74:
         c0:b2:de:a3:5d:0b:a0:75:f8:73:ab:2d:82:96:25:e6:01:c5:
         d7:14:6d:07:19:36:4b:ff:6e:7d:77:33:1e:bd:51:c3:46:bb:
         2a:eb:b7:ed:c6:aa:73:44:88:38:7d:be:58:6f:04:c2:dd:3e:
         fc:11:eb:2d:fb:6c:de:f8:df:3d:2a:8f:6e:f1:4b:7d:b5:39:
         7f:cd:2d:00:cf:df:2a:81:3b:d1:15:6f:15:42:86:85:7d:4a:
         0a:e6:46:44:29:ca:0d:71:17:07:a5:e2:09:a5:6a:d3:f7:06:
         1e:c2:b2:e7:8c:92:78:b7:03:e1:05:74:9c:6f:cc:ae:c1:13:
         ad:6e:35:48:fb:29:62:a4:94:a1:57:16:c7:e4:a9:74:57:00:
         83:87:53:eb:c8:45:db:08:04:96:c1:4a:a0:a9:a6:1e:2f:9c:
         cd:ec:c3:58:c3:50:b2:ef:dc:59:ee:5c:94:78:24:14:37:2c:
         69:2e:68:f6:04:5b:07:33:f0:3a:ae:3a:71:c7:1d:c9:67:24:
         60:26:d8:bf:dd:3a:cb:d8:6f:69:9b:99:02:7a:39:32:7b:92:
         73:c6:10:3f:48:ef:a3:28:f6:45:1b:0f:98:41:84:16:34:03:
         b7:2f:14:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPa21qCn8+ggsxRfPFF4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWVhMzU4YWVlZWI3ZDBiOWUwZjkzZDIzZjY3ZDI5YTdl
YzYyYzgwHhcNMjUxMTA0MTkwMDEwWhcNMjUxMTA1MTkwMDEwWjAzMTEwLwYDVQQD
EygwNDI5YTlkNWM2MjVjZGU5YjA2Zjc0ZDc5YWFlYjE1MjZmZGY3ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQqMlax+OL3HsDVhSl01MgfYCAla
HZDHX/Y+E1jzfhhDDjJz/v9qNq9Bvv/BVUF8THEgUOQBBT74F3xtZJ7XiYZ5k2WS
QGPrggG2xIZPOkzXuVtfy0qjje1lYDpYY2ktHReYlLVOj3cGoR4yTRcCcdCwjEj6
mJKz1tdaYNKNJh5B3NEbBreN4oWCtliWRfXTJWR718uzdnYXz1tzwQQViruI04CD
l4aWBzam+pk6uGHehU2FXi/YVAcXvbwdntVRMDtoJSFLWaVQyjv6z05t+E2o4qGF
t1qJkq+ipDOI+s5YaWs7RZtkgP+R5Fb8fIG2iVvibI2rqIN626LCMDKdvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQpqdXGJc3psG9015qusVJv338SMB8GA1UdIwQY
MBaAFL+uo1iu7rfQueD5PSP2fSmn7GLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzct
MjQ5Y2UwYzMxMmIzLzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8yODg0MTYtYTQ2ZS00OWMzLTkzMzctMjQ5Y2UwYzMxMmIz
LzEvdjY2aldLN3V0OUM1NFBrOUlfWjlLYWZzWXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFuE4l1O
CcKUmGOQJ0QrPRx0wLLeo10LoHX4c6stgpYl5gHF1xRtBxk2S/9ufXczHr1Rw0a7
Kuu37caqc0SIOH2+WG8Ewt0+/BHrLfts3vjfPSqPbvFLfbU5f80tAM/fKoE70RVv
FUKGhX1KCuZGRCnKDXEXB6XiCaVq0/cGHsKy54ySeLcD4QV0nG/MrsETrW41SPsp
YqSUoVcWx+SpdFcAg4dT68hF2wgElsFKoKmmHi+czezDWMNQsu/cWe5clHgkFDcs
aS5o9gRbBzPwOq46cccdyWckYCbYv906y9hvaZuZAno5MnuSc8YQP0jvoyj2RRsP
mEGEFjQDty8UCQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:07 2025 by rpki-client