Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
File:                     F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json)
Hash identifier:          daQsVOinq3y0adeUuZ8af9lRqUi8Lt/25tTE07p6ZTQ=
Subject key identifier:   AC:7C:9E:4B:C9:CE:73:B1:C1:D7:55:03:5C:FC:A2:4B:94:8B:C2:8B
Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D
Certificate issuer:       /CN=176c34e5ae7016c3605d3269564ae9685443595d
Certificate serial:       019A4E190ED524A887ADA6B9839184EF3058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
Manifest number:          0973
Signing time:             Tue 04 Nov 2025 09:00:56 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:56 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:56 +0000
Files and hashes:         1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: ZOv4K6Iy2usgGEcTcyC7989ZvPoIEwA3vrkf9G0EUv4=)
                          2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:19:0e:d5:24:a8:87:ad:a6:b9:83:91:84:ef:30:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d
        Validity
            Not Before: Nov  4 09:00:56 2025 GMT
            Not After : Nov  5 09:00:56 2025 GMT
        Subject: CN=ac7c9e4bc9ce73b1c1d755035cfca24b948bc28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:56:c1:cc:4b:24:27:9c:6e:f1:44:6e:2d:
                    38:c4:a9:13:e2:45:20:da:36:28:cd:f3:72:e5:3a:
                    b5:38:9e:52:0d:93:e2:90:1b:fa:cd:dd:0a:3e:53:
                    b0:83:fa:73:46:3c:64:5d:99:f0:51:e6:33:68:ee:
                    88:d4:7e:cd:d9:34:88:e5:51:f3:e2:dc:06:b4:56:
                    16:4a:9e:5b:8d:48:0c:76:3f:8a:9c:d4:cc:57:71:
                    42:00:bd:0f:bd:e1:1b:1a:1c:4a:c0:0e:a3:59:50:
                    e9:fc:4e:d6:cf:62:e8:26:88:49:01:c3:9b:67:f3:
                    9f:21:53:f2:40:04:e4:2d:74:a8:b4:4b:fa:51:bb:
                    0d:e4:8e:68:8b:cc:b8:ff:d5:bf:56:52:02:60:74:
                    57:24:3f:3c:c2:2e:b4:f2:5b:e8:4d:a5:0e:63:1a:
                    13:f8:86:12:61:b9:25:3f:e0:9b:25:d3:28:5c:f3:
                    59:34:e0:25:36:ae:9f:6c:5d:2d:d1:3b:93:e6:33:
                    2a:56:a5:6d:26:6b:45:76:d8:49:3d:ac:81:8c:27:
                    05:90:fd:6f:59:c8:ae:75:52:3b:d8:6b:bf:86:22:
                    b4:e6:07:f8:1f:1f:94:01:50:63:69:09:70:20:ce:
                    f6:ae:b0:a4:eb:e0:b2:f2:0e:15:ab:f2:1f:46:e7:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7C:9E:4B:C9:CE:73:B1:C1:D7:55:03:5C:FC:A2:4B:94:8B:C2:8B
            X509v3 Authority Key Identifier:
                keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:99:bc:84:bc:7f:a0:22:d6:be:6c:6e:1f:51:21:6e:76:22:
         6f:2a:ba:14:0c:79:0b:8a:05:f8:9e:a8:e7:e1:b6:db:cc:f8:
         d9:23:cb:2e:ac:e4:95:5e:9d:49:c9:e9:5f:2d:87:9b:e8:4d:
         c0:df:ae:ca:79:c0:76:a5:30:3f:c2:61:8d:94:1e:dc:1d:5d:
         2d:d6:e7:80:85:5f:7b:40:f1:5c:ef:75:cc:da:27:9a:50:e2:
         f4:d8:8e:ba:a2:4f:eb:ef:fe:e1:56:e3:33:3c:93:d1:12:05:
         35:98:f0:74:4c:cc:04:5c:85:56:b6:25:96:f7:43:2a:e0:b6:
         d4:62:40:56:2a:90:b9:7d:be:d9:98:3b:07:08:8c:2f:4b:a0:
         d1:85:dc:b7:af:8c:72:96:8a:1e:01:4d:f3:56:c4:3d:11:bf:
         97:48:9f:59:e9:1e:e4:0e:a3:8a:d3:85:e7:c3:94:3b:e6:31:
         17:c0:43:f5:6f:13:9e:20:ec:63:92:86:f2:4b:f0:72:f8:4e:
         18:51:5c:2b:30:6b:7d:e1:21:f3:a7:20:f6:88:0e:7e:1f:a3:
         c7:b3:01:01:03:5d:c8:a5:ea:22:29:52:a1:7a:b8:45:50:a9:
         d9:4e:c8:4b:86:2c:59:78:1a:c9:33:60:09:5b:4d:ee:73:8d:
         81:d6:ca:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQ7VJKiHraa5g5GE7zBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NmMzNGU1YWU3MDE2YzM2MDVkMzI2OTU2NGFlOTY4NTQ0
MzU5NWQwHhcNMjUxMTA0MDkwMDU2WhcNMjUxMTA1MDkwMDU2WjAzMTEwLwYDVQQD
EyhhYzdjOWU0YmM5Y2U3M2IxYzFkNzU1MDM1Y2ZjYTI0Yjk0OGJjMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7ZWwcxLJCecbvFEbi04xKkT4kUg
2jYozfNy5Tq1OJ5SDZPikBv6zd0KPlOwg/pzRjxkXZnwUeYzaO6I1H7N2TSI5VHz
4twGtFYWSp5bjUgMdj+KnNTMV3FCAL0PveEbGhxKwA6jWVDp/E7Wz2LoJohJAcOb
Z/OfIVPyQATkLXSotEv6UbsN5I5oi8y4/9W/VlICYHRXJD88wi608lvoTaUOYxoT
+IYSYbklP+CbJdMoXPNZNOAlNq6fbF0t0TuT5jMqVqVtJmtFdthJPayBjCcFkP1v
WciudVI72Gu/hiK05gf4Hx+UAVBjaQlwIM72rrCk6+Cy8g4Vq/IfRuckUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKx8nkvJznOxwddVA1z8okuUi8KLMB8GA1UdIwQY
MBaAFBdsNOWucBbDYF0yaVZK6WhUQ1ldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEt
YTc1ZjNkZjQ2YWYxLzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEtYTc1ZjNkZjQ2YWYx
LzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZm8hLx/
oCLWvmxuH1EhbnYibyq6FAx5C4oF+J6o5+G228z42SPLLqzklV6dScnpXy2Hm+hN
wN+uynnAdqUwP8JhjZQe3B1dLdbngIVfe0DxXO91zNonmlDi9NiOuqJP6+/+4Vbj
MzyT0RIFNZjwdEzMBFyFVrYllvdDKuC21GJAViqQuX2+2Zg7BwiML0ug0YXct6+M
cpaKHgFN81bEPRG/l0ifWeke5A6jitOF58OUO+YxF8BD9W8TniDsY5KG8kvwcvhO
GFFcKzBrfeEh86cg9ogOfh+jx7MBAQNdyKXqIilSoXq4RVCp2U7IS4YsWXgayTNg
CVtN7nONgdbKjA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:00 2025 by rpki-client