Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
File:                     b5jR-Z44M-9AHUY0juyLdSCIxV0.mft (raw, json)
Hash identifier:          e56NbBZQyXSjEeLmvK5agB3KDkhJRSxpTw+i2/zKIJU=
Subject key identifier:   4C:B3:2C:D9:11:EE:36:FB:4D:82:F5:0C:53:FD:E1:EA:AB:4B:25:6C
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Certificate issuer:       /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial:       019A50E3DDF238786855F4A0D1A041B5B2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 22:01:41 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:41 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:41 +0000
Files and hashes:         1: AK8oH-hdcdWqkx1j19Sg4WRGU6k.roa (hash: UL0wVMMPQ6seHx9+E4jjcivFpYmeRRoPs0aDR4HKrBk=)
                          2: WtT0iRRNWOEnnJNbpojOaIceMDQ.roa (hash: GuNBmImvmC1qMkMAYPrdjYcM0SGHFORb2IyKWp/uvJM=)
                          3: b5jR-Z44M-9AHUY0juyLdSCIxV0.crl (hash: aL+lnnFMdZhymgBVITFn2lK8euzTxnq479MwIGFlem8=)
                          4: j7Ttn2BWFaDhab7ZDneYB8Izk6w.roa (hash: k9js+BE4RFtwEtbQ/V0azAY+xGWrWmclJFMU8tYRWW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:dd:f2:38:78:68:55:f4:a0:d1:a0:41:b5:b2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
        Validity
            Not Before: Nov  4 22:01:41 2025 GMT
            Not After : Nov  5 22:01:41 2025 GMT
        Subject: CN=4cb32cd911ee36fb4d82f50c53fde1eaab4b256c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:08:06:5c:2b:a3:e5:56:3e:22:9c:19:ca:
                    f3:a1:2b:e4:b6:7c:bf:28:5d:92:21:44:26:e6:ea:
                    1a:7c:99:55:02:d7:d1:19:a8:48:80:e5:02:7f:50:
                    11:1b:28:e1:06:96:ee:bc:9b:8d:2b:8a:1d:18:1b:
                    5e:d3:ac:93:63:a1:fe:f7:07:45:2a:1a:00:f5:fa:
                    ce:e9:2a:9b:5c:05:34:89:14:48:e2:54:52:1f:62:
                    d4:8a:a3:29:c6:08:00:6a:7c:c7:dd:54:1a:66:94:
                    ff:3b:cc:80:5a:65:ce:c6:85:1a:78:66:11:72:39:
                    3c:51:e3:a4:7d:0f:35:6f:e3:54:50:37:9e:9e:d7:
                    7c:33:f4:f6:39:13:f1:77:29:56:8d:c1:0d:97:47:
                    62:2b:e0:a0:be:ec:f6:0b:d1:d3:2a:19:fc:a1:b9:
                    9d:1d:02:50:06:fd:77:7f:43:4f:ea:07:74:0b:d0:
                    94:12:35:60:4b:fb:ba:de:81:c9:8e:25:c6:34:b5:
                    8a:65:f9:d1:3b:30:05:4b:e9:32:3a:17:81:11:57:
                    a0:39:13:33:40:94:98:3d:ad:86:db:80:73:6b:c1:
                    f4:a6:11:e3:f8:71:1c:c8:04:89:6c:5b:a9:53:69:
                    d8:fc:5e:5f:66:51:f2:c8:b1:2a:fd:be:5e:10:e4:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B3:2C:D9:11:EE:36:FB:4D:82:F5:0C:53:FD:E1:EA:AB:4B:25:6C
            X509v3 Authority Key Identifier:
                keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:97:ff:18:0e:05:c9:63:dc:2f:ba:26:ea:27:53:a1:e0:1b:
         b4:87:db:28:2b:b7:88:62:9b:73:d5:22:a9:bd:ae:d0:f6:6e:
         aa:0f:11:cd:9c:5d:4f:45:15:ef:49:28:86:6f:0b:15:d8:f0:
         8e:4f:88:29:b9:9c:a1:90:16:30:81:36:1d:10:ac:24:00:15:
         87:01:8e:a6:6c:e9:75:5e:c4:cc:c9:e7:52:e8:4f:40:4d:38:
         76:78:a3:cd:62:e8:6a:d3:4e:a2:f5:b4:be:83:e2:61:31:b8:
         ea:03:8d:c8:ea:37:b9:29:68:c0:01:67:6f:10:db:76:fc:ea:
         38:cd:66:32:c2:8c:88:32:67:1b:07:31:8b:91:1d:2a:07:ec:
         57:42:14:f3:d0:88:a7:29:9b:98:86:73:e5:4c:e5:e2:3d:40:
         22:8c:5b:84:36:75:15:8f:7e:c1:fa:34:35:b2:fd:5b:4a:f6:
         e2:26:43:8f:73:46:c9:bf:77:0c:8a:37:21:16:42:9a:d9:f2:
         97:04:c0:da:c2:f6:f8:4a:c3:14:33:2e:01:49:3c:17:47:eb:
         91:0d:36:e8:2f:2b:22:cb:10:06:b4:b7:7c:12:93:0d:c2:17:
         37:0a:db:8c:a8:a6:65:28:7a:e6:0b:78:8f:14:64:c6:0c:02:
         73:46:57:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ493yOHhoVfSg0aBBtbLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOThkMWY5OWUzODMzZWY0MDFkNDYzNDhlZWM4Yjc1MjA4
OGM1NWQwHhcNMjUxMTA0MjIwMTQxWhcNMjUxMTA1MjIwMTQxWjAzMTEwLwYDVQQD
Eyg0Y2IzMmNkOTExZWUzNmZiNGQ4MmY1MGM1M2ZkZTFlYWFiNGIyNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpQIBlwro+VWPiKcGcrzoSvktny/
KF2SIUQm5uoafJlVAtfRGahIgOUCf1ARGyjhBpbuvJuNK4odGBte06yTY6H+9wdF
KhoA9frO6SqbXAU0iRRI4lRSH2LUiqMpxggAanzH3VQaZpT/O8yAWmXOxoUaeGYR
cjk8UeOkfQ81b+NUUDeentd8M/T2ORPxdylWjcENl0diK+Cgvuz2C9HTKhn8obmd
HQJQBv13f0NP6gd0C9CUEjVgS/u63oHJjiXGNLWKZfnROzAFS+kyOheBEVegORMz
QJSYPa2G24Bza8H0phHj+HEcyASJbFupU2nY/F5fZlHyyLEq/b5eEOTRHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyzLNkR7jb7TYL1DFP94eqrSyVsMB8GA1UdIwQY
MBaAFG+Y0fmeODPvQB1GNI7si3UgiMVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYt
MDdkNGIxMTVjYzgyLzEvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zYzA4ZjEtOTZlMC00YzU0LWE0NjYtMDdkNGIxMTVjYzgy
LzEvYjVqUi1aNDRNLTlBSFVZMGp1eUxkU0NJeFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5f/GA4F
yWPcL7om6idToeAbtIfbKCu3iGKbc9Uiqb2u0PZuqg8RzZxdT0UV70kohm8LFdjw
jk+IKbmcoZAWMIE2HRCsJAAVhwGOpmzpdV7EzMnnUuhPQE04dnijzWLoatNOovW0
voPiYTG46gONyOo3uSlowAFnbxDbdvzqOM1mMsKMiDJnGwcxi5EdKgfsV0IU89CI
pymbmIZz5Uzl4j1AIoxbhDZ1FY9+wfo0NbL9W0r24iZDj3NGyb93DIo3IRZCmtny
lwTA2sL2+ErDFDMuAUk8F0frkQ026C8rIssQBrS3fBKTDcIXNwrbjKimZSh65gt4
jxRkxgwCc0ZX0A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:26 2025 by rpki-client