Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File:                     jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier:          q2m3R0A6y1JnEnjcz2DfNvePm5EutKKdLZRr7LptTTg=
Subject key identifier:   4D:E9:95:6E:A1:C9:0D:31:05:4C:A3:F5:72:51:BE:56:4A:59:96:36
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       019A52D16BCF339AF0F6640E0BB6B0B4AA54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number:          1711
Signing time:             Wed 05 Nov 2025 07:00:47 +0000
Manifest this update:     Wed 05 Nov 2025 07:00:47 +0000
Manifest next update:     Thu 06 Nov 2025 07:00:47 +0000
Files and hashes:         1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
                          2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
                          3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
                          4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: WD9ADJRR0fZl4kbPjJXkjLC459AuWgZzTyUTybgThW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d1:6b:cf:33:9a:f0:f6:64:0e:0b:b6:b0:b4:aa:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: Nov  5 07:00:47 2025 GMT
            Not After : Nov  6 07:00:47 2025 GMT
        Subject: CN=4de9956ea1c90d31054ca3f57251be564a599636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:43:6d:c9:79:5b:a8:3e:5e:e5:75:b0:22:
                    8b:68:6a:b9:0a:92:16:ab:49:30:72:88:a8:b8:03:
                    ae:09:0e:75:d7:ad:0e:76:7b:6e:22:12:fe:1b:3f:
                    0e:2b:e7:8c:bc:cf:d6:8f:08:91:5c:6b:7f:3d:31:
                    a1:6c:91:b4:bd:7f:7d:21:ea:87:ad:b5:6d:65:d0:
                    15:41:71:fa:44:11:25:e3:c0:5c:7c:99:4a:38:ec:
                    3b:8d:5c:55:31:fe:bf:b1:65:fe:19:4f:8b:6f:b5:
                    09:3e:48:1b:f6:02:2c:1d:5a:1e:9f:f7:4a:59:11:
                    a4:39:8e:2e:76:95:b7:0a:41:b6:5b:65:8f:c4:ea:
                    cd:e1:c1:7a:00:3b:87:dd:be:9a:26:6f:7f:d7:68:
                    ec:29:00:27:c2:75:52:b9:11:37:d3:88:0b:03:97:
                    ab:51:08:db:54:d6:ab:6a:5a:ce:72:2b:05:09:6c:
                    15:28:07:1c:03:93:6a:8b:27:91:41:7d:02:34:e5:
                    03:15:0a:67:9a:4b:88:b7:61:63:7b:17:ae:48:26:
                    bf:2b:0c:ae:38:b6:47:36:60:61:0f:45:f6:7b:67:
                    8a:7e:50:ea:fb:87:28:b7:6b:6d:ab:99:28:e6:0b:
                    8c:d9:85:ba:89:ca:32:5f:cf:43:d2:5a:44:8f:3e:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:95:6E:A1:C9:0D:31:05:4C:A3:F5:72:51:BE:56:4A:59:96:36
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:df:4c:52:9d:38:62:9f:15:64:a9:a6:39:2d:bd:fc:f4:
         af:91:49:ad:9d:33:67:2e:b9:1c:0d:0f:49:a1:e7:ac:46:e7:
         3f:8a:c9:4d:b2:a6:b6:b9:fe:f9:49:84:ca:b7:73:ee:dc:8f:
         51:a8:a8:db:e5:74:b7:fb:21:c2:c0:c9:e1:3b:1b:f8:fe:26:
         f8:d9:bd:11:51:2d:af:00:1e:1a:5b:8c:9b:d7:0b:a7:7c:ef:
         c6:f5:5a:39:ff:cf:6e:a7:f6:93:cf:bf:2a:c8:f5:1d:a4:03:
         a1:8d:26:5a:b0:12:3f:d1:fd:50:34:ea:fe:b5:87:1e:62:97:
         39:10:23:b3:58:26:82:ca:f9:50:c6:c9:7d:66:3d:1e:4b:3d:
         5f:ef:9f:9b:c7:b6:85:10:8e:ee:a0:63:72:51:25:c3:4d:fc:
         17:6c:5e:8f:89:b3:23:b8:86:4c:6c:75:48:92:a1:9a:77:22:
         92:1f:9c:98:a3:99:3f:04:07:d6:ef:fb:dd:0c:93:f3:86:56:
         07:4f:47:f6:a0:b0:4d:b0:43:0b:0b:24:7b:b4:0d:bc:a5:e7:
         fc:f8:8c:da:f0:d1:e2:6c:28:21:fc:f9:46:67:00:61:cc:df:
         1d:08:7e:77:35:ce:b5:7c:b0:47:97:e2:36:1e:55:f5:61:0e:
         26:3d:08:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0WvPM5rw9mQOC7awtKpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl
Zjc1NWIwHhcNMjUxMTA1MDcwMDQ3WhcNMjUxMTA2MDcwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZGU5OTU2ZWExYzkwZDMxMDU0Y2EzZjU3MjUxYmU1NjRhNTk5NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEVDbcl5W6g+XuV1sCKLaGq5CpIW
q0kwcoiouAOuCQ51160OdntuIhL+Gz8OK+eMvM/WjwiRXGt/PTGhbJG0vX99IeqH
rbVtZdAVQXH6RBEl48BcfJlKOOw7jVxVMf6/sWX+GU+Lb7UJPkgb9gIsHVoen/dK
WRGkOY4udpW3CkG2W2WPxOrN4cF6ADuH3b6aJm9/12jsKQAnwnVSuRE304gLA5er
UQjbVNaralrOcisFCWwVKAccA5NqiyeRQX0CNOUDFQpnmkuIt2FjexeuSCa/Kwyu
OLZHNmBhD0X2e2eKflDq+4cot2ttq5ko5guM2YW6icoyX89D0lpEjz6MQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3plW6hyQ0xBUyj9XJRvlZKWZY2MB8GA1UdIwQY
MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt
MmE2YjlhMGNjYWJkLzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk
LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANz/fTFKd
OGKfFWSppjktvfz0r5FJrZ0zZy65HA0PSaHnrEbnP4rJTbKmtrn++UmEyrdz7tyP
Uaio2+V0t/shwsDJ4Tsb+P4m+Nm9EVEtrwAeGluMm9cLp3zvxvVaOf/Pbqf2k8+/
Ksj1HaQDoY0mWrASP9H9UDTq/rWHHmKXORAjs1gmgsr5UMbJfWY9Hks9X++fm8e2
hRCO7qBjclElw038F2xej4mzI7iGTGx1SJKhmncikh+cmKOZPwQH1u/73QyT84ZW
B09H9qCwTbBDCwske7QNvKXn/PiM2vDR4mwoIfz5RmcAYczfHQh+dzXOtXywR5fi
Nh5V9WEOJj0IGA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:30 2025 by rpki-client