Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          i2YPy1MAer2+Gyn0+uaqSfQqd9Y0p9JdKez+8QcjXyA=
Subject key identifier:   DB:57:F4:BD:31:A1:F5:48:AD:A7:76:6A:6A:31:FB:15:BA:50:3B:E7
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       0199FB0EB89D0A07A3A45DB557C3C57789C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          0ED5
Signing time:             Sun 19 Oct 2025 06:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:09 +0000
Files and hashes:         1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=)
                          2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=)
                          3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: IkfNEKfxBt4Nru7d4hYfVoHCnKwTQ2QTQ8gWfWf3MmI=)
                          4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=)
                          5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:b8:9d:0a:07:a3:a4:5d:b5:57:c3:c5:77:89:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Oct 19 06:01:09 2025 GMT
            Not After : Oct 20 06:01:09 2025 GMT
        Subject: CN=db57f4bd31a1f548ada7766a6a31fb15ba503be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:c1:99:4d:f1:b4:42:14:98:c5:8f:03:aa:
                    c2:da:24:b5:36:63:35:07:dd:0c:f7:8c:8d:60:90:
                    09:03:01:91:16:3a:60:ab:f9:97:60:25:6c:ab:57:
                    5f:78:51:6f:cd:d5:47:ee:8f:d1:da:ba:c0:95:fe:
                    44:05:38:c9:d7:e4:87:89:a5:8b:e0:64:29:6d:eb:
                    f0:af:84:7d:b9:c9:4b:91:99:2b:16:2d:cd:7c:5a:
                    ac:17:c9:28:f0:14:f0:3a:a6:70:8d:11:7f:62:61:
                    b4:86:28:b1:d7:a0:16:16:a7:e8:84:46:19:8f:b7:
                    78:14:be:15:2c:e6:6f:51:15:ad:e8:87:8b:cc:d0:
                    79:d4:20:16:14:d3:58:6a:b8:a2:17:4e:f3:9f:89:
                    2e:80:2d:a3:de:55:24:36:ab:a6:a9:0b:66:0f:e1:
                    b5:bf:ed:dc:a7:db:66:01:5f:16:fe:e8:ed:43:15:
                    8b:99:17:30:f4:4c:b4:8e:73:d8:ef:0a:0d:72:59:
                    5f:b5:f8:2b:66:eb:5a:51:55:e8:72:79:bc:a3:7a:
                    14:de:9c:1d:75:7a:a9:5c:11:dd:13:3b:0b:bf:75:
                    b2:1f:43:95:03:34:51:fc:0f:cc:66:29:11:ba:87:
                    c3:56:56:5f:7a:d1:10:3a:5c:75:90:38:ba:5f:c6:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:57:F4:BD:31:A1:F5:48:AD:A7:76:6A:6A:31:FB:15:BA:50:3B:E7
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b7:7f:1d:e4:6b:4c:66:34:c7:46:bf:b2:d2:0c:91:ec:b2:
         e2:7a:b5:de:2f:df:48:d2:4d:8b:96:92:8a:7f:ec:bd:3f:bf:
         81:5b:e2:36:6b:8f:b4:67:9a:96:24:92:05:15:04:f3:1d:0a:
         1b:a9:af:fd:2d:7c:4d:a0:ee:63:83:1f:85:0c:88:fc:fc:08:
         77:2d:5f:3a:e6:06:db:85:84:1c:c4:9a:83:39:d0:6e:03:44:
         96:27:b1:32:66:e7:d8:76:a8:49:f6:af:ef:99:be:c6:8b:6e:
         ff:aa:97:60:c6:de:8c:df:c6:5c:b4:00:c7:76:42:35:4c:08:
         28:98:e9:1b:d7:1a:b1:8c:a5:7d:c1:d1:82:65:95:87:3a:9e:
         4a:bc:8b:44:41:8f:14:d2:d2:c6:90:7d:a7:fe:c6:03:2c:88:
         38:0b:96:98:a6:fd:64:1e:a2:37:55:92:75:64:65:e6:df:1c:
         39:33:ac:10:7e:fe:2b:4a:d8:47:25:4b:82:f6:f2:92:67:e1:
         06:8b:33:ce:fc:1c:ee:cc:85:31:d5:8e:84:9e:75:61:83:76:
         46:55:4c:b8:5d:da:ea:25:3c:1d:89:6d:10:82:09:88:43:b1:
         bf:d3:53:d2:b1:2f:a3:63:c4:2c:2c:40:07:d2:25:78:35:75:
         1d:0e:01:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DridCgejpF21V8PFd4nJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0
NmVmNGEwHhcNMjUxMDE5MDYwMTA5WhcNMjUxMDIwMDYwMTA5WjAzMTEwLwYDVQQD
EyhkYjU3ZjRiZDMxYTFmNTQ4YWRhNzc2NmE2YTMxZmIxNWJhNTAzYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXDBmU3xtEIUmMWPA6rC2iS1NmM1
B90M94yNYJAJAwGRFjpgq/mXYCVsq1dfeFFvzdVH7o/R2rrAlf5EBTjJ1+SHiaWL
4GQpbevwr4R9uclLkZkrFi3NfFqsF8ko8BTwOqZwjRF/YmG0hiix16AWFqfohEYZ
j7d4FL4VLOZvURWt6IeLzNB51CAWFNNYariiF07zn4kugC2j3lUkNqumqQtmD+G1
v+3cp9tmAV8W/ujtQxWLmRcw9Ey0jnPY7woNcllftfgrZutaUVXocnm8o3oU3pwd
dXqpXBHdEzsLv3WyH0OVAzRR/A/MZikRuofDVlZfetEQOlx1kDi6X8ZXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtX9L0xofVIrad2amox+xW6UDvnMB8GA1UdIwQY
MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi
LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbd/HeRr
TGY0x0a/stIMkeyy4nq13i/fSNJNi5aSin/svT+/gVviNmuPtGealiSSBRUE8x0K
G6mv/S18TaDuY4MfhQyI/PwIdy1fOuYG24WEHMSagznQbgNEliexMmbn2HaoSfav
75m+xotu/6qXYMbejN/GXLQAx3ZCNUwIKJjpG9casYylfcHRgmWVhzqeSryLREGP
FNLSxpB9p/7GAyyIOAuWmKb9ZB6iN1WSdWRl5t8cOTOsEH7+K0rYRyVLgvbykmfh
Boszzvwc7syFMdWOhJ51YYN2RlVMuF3a6iU8HYltEIIJiEOxv9NT0rEvo2PELCxA
B9IleDV1HQ4BMg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:34 2025 by rpki-client