Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File:                     u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier:          cVLg0BRvFqZ+C412Y8Cf6q6HvTj37Dj8ewUHW07BTvs=
Subject key identifier:   29:22:65:F2:56:9F:81:CD:9F:61:09:95:E2:DE:6C:E2:0B:71:2A:67
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer:       /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial:       019A4E18E98C8BED0A50039CEE628529F461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number:          1393
Signing time:             Tue 04 Nov 2025 09:00:46 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:46 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:46 +0000
Files and hashes:         1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=)
                          2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=)
                          3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=)
                          4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: nsG2WcvavHWkoIdl7eJeNiLtfi7VVTMTMs1eBQy33m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:e9:8c:8b:ed:0a:50:03:9c:ee:62:85:29:f4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
        Validity
            Not Before: Nov  4 09:00:46 2025 GMT
            Not After : Nov  5 09:00:46 2025 GMT
        Subject: CN=292265f2569f81cd9f610995e2de6ce20b712a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:aa:15:47:ea:2b:74:14:99:85:12:6a:2f:a4:
                    a4:06:61:e0:a7:38:27:06:f4:c3:30:85:43:50:c1:
                    31:59:57:21:50:fb:ea:a4:5a:94:ca:1d:56:5d:4c:
                    5b:60:36:38:5b:d9:ea:93:eb:8a:75:5b:db:15:94:
                    53:7c:66:09:ef:cf:88:cb:3c:b5:9f:e8:61:04:41:
                    4d:b5:55:02:00:8b:c5:f4:2d:1b:1f:5e:e8:71:f0:
                    d2:ae:2f:b9:9a:ee:17:3d:59:4f:de:22:b0:63:6e:
                    d7:f6:19:a8:86:ee:51:da:ba:d2:cf:ec:36:15:39:
                    96:17:9e:58:02:0d:a0:03:f5:7e:e0:bb:04:f7:9d:
                    87:e5:42:e5:6e:5e:4b:6e:c0:5a:0e:4f:82:24:a7:
                    56:8e:de:cf:a9:0a:d8:3f:89:2e:8f:f3:2b:30:28:
                    02:bf:35:7c:ce:07:9b:d6:35:4f:58:b6:72:dd:f2:
                    02:51:7f:9d:50:46:cd:73:8e:62:c4:04:a4:47:2c:
                    d3:2e:57:52:05:80:c4:27:1e:04:bf:8f:07:45:dc:
                    c1:5d:c9:8a:31:2c:3c:5d:a9:8b:83:0f:10:f5:7c:
                    37:0a:dc:bd:9d:99:fc:66:e4:6f:b3:a7:2c:0e:fc:
                    57:75:41:32:59:20:75:ea:e0:71:85:a8:13:66:5b:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:22:65:F2:56:9F:81:CD:9F:61:09:95:E2:DE:6C:E2:0B:71:2A:67
            X509v3 Authority Key Identifier:
                keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:21:08:5a:22:4e:12:4c:27:d6:f4:01:28:c2:ea:a2:d5:3c:
         2b:a6:66:7f:bd:7f:02:5f:d1:26:00:4c:85:72:94:eb:ed:85:
         4e:2d:72:d7:9e:0a:75:40:f7:66:8f:0f:40:4e:88:66:7d:06:
         02:9c:ae:39:f2:12:55:51:59:08:f6:bf:92:a0:98:40:51:c4:
         65:67:ac:24:bd:8a:f4:ad:9f:7d:df:38:da:fd:79:db:8f:87:
         8c:b8:3b:31:c6:9c:ff:62:a2:af:3f:cb:66:45:4b:f7:a7:e4:
         03:22:54:87:8b:37:2a:e9:7d:3b:a1:b8:38:9e:6e:07:12:a2:
         9e:3b:61:2e:3f:6c:b8:28:c2:21:7c:c7:f5:d6:dd:e4:50:d1:
         92:e4:ec:07:99:26:58:ad:70:5f:70:85:1d:9c:68:88:ab:42:
         13:59:bb:dd:6f:f6:ea:4b:0d:18:ba:9b:93:aa:28:95:16:cc:
         f5:b3:cc:e0:b1:fe:60:88:58:05:9b:4a:31:a0:bb:11:f8:03:
         55:26:6c:bd:56:b8:8b:a3:61:23:51:ee:cd:0b:e6:5c:ac:f5:
         a3:3d:20:af:44:4b:32:86:03:e6:39:50:2c:cc:5b:fa:e7:b4:
         d1:1d:7d:7b:67:29:8f:57:7a:ee:d7:16:af:a9:10:b1:b7:0d:
         14:4b:5f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGOmMi+0KUAOc7mKFKfRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZjOWE5ODMyNjY3YWMwZDZkMWUyNDA2NTUwNTMzYzNi
NTU2MTgwHhcNMjUxMTA0MDkwMDQ2WhcNMjUxMTA1MDkwMDQ2WjAzMTEwLwYDVQQD
EygyOTIyNjVmMjU2OWY4MWNkOWY2MTA5OTVlMmRlNmNlMjBiNzEyYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaoVR+ordBSZhRJqL6SkBmHgpzgn
BvTDMIVDUMExWVchUPvqpFqUyh1WXUxbYDY4W9nqk+uKdVvbFZRTfGYJ78+Iyzy1
n+hhBEFNtVUCAIvF9C0bH17ocfDSri+5mu4XPVlP3iKwY27X9hmohu5R2rrSz+w2
FTmWF55YAg2gA/V+4LsE952H5ULlbl5LbsBaDk+CJKdWjt7PqQrYP4kuj/MrMCgC
vzV8zgeb1jVPWLZy3fICUX+dUEbNc45ixASkRyzTLldSBYDEJx4Ev48HRdzBXcmK
MSw8XamLgw8Q9Xw3Cty9nZn8ZuRvs6csDvxXdUEyWSB16uBxhagTZlsfSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkiZfJWn4HNn2EJleLebOILcSpnMB8GA1UdIwQY
MBaAFLv/yamDJmesDW0eJAZVBTPDtVYYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmIt
NzQ5N2U1YThmMTFiLzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmItNzQ5N2U1YThmMTFi
LzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCEIWiJO
Ekwn1vQBKMLqotU8K6Zmf71/Al/RJgBMhXKU6+2FTi1y154KdUD3Zo8PQE6IZn0G
ApyuOfISVVFZCPa/kqCYQFHEZWesJL2K9K2ffd842v1524+HjLg7Mcac/2Kirz/L
ZkVL96fkAyJUh4s3Kul9O6G4OJ5uBxKinjthLj9suCjCIXzH9dbd5FDRkuTsB5km
WK1wX3CFHZxoiKtCE1m73W/26ksNGLqbk6oolRbM9bPM4LH+YIhYBZtKMaC7EfgD
VSZsvVa4i6NhI1HuzQvmXKz1oz0gr0RLMoYD5jlQLMxb+ue00R19e2cpj1d67tcW
r6kQsbcNFEtfsA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:22 2025 by rpki-client