Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File:                     Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier:          5UDj/qUXtjVtZsyTQooNlk03VdPEbaY9YCmhwVtP+sg=
Subject key identifier:   CF:36:B5:10:C9:85:B8:C1:31:B1:01:F5:96:27:3E:24:79:71:31:3E
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer:       /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial:       0199FBEAB25EDE50F2C152E2E31F03F8E55A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number:          0B07
Signing time:             Sun 19 Oct 2025 10:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:26 +0000
Files and hashes:         1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=)
                          2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=)
                          3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=)
                          4: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: wmBwrQK5m1b7YoIANRp7nQ2OrVf33UAH/EVdtn49uKU=)
                          5: fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa (hash: msKhe5WbpdCBmxaaDvFaKiq8+7dXUv8A81fnjlivFjk=)
                          6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=)
                          7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=)
                          8: rIWLbuRWn6FYu5bbpY5MMG45yrY.roa (hash: krN6offcByVQ0C0gcvcYLKJ889DH4uFaIMSTwQ2u2Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:b2:5e:de:50:f2:c1:52:e2:e3:1f:03:f8:e5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
        Validity
            Not Before: Oct 19 10:01:26 2025 GMT
            Not After : Oct 20 10:01:26 2025 GMT
        Subject: CN=cf36b510c985b8c131b101f596273e247971313e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:7d:b3:ec:9f:2b:fa:b3:b4:62:15:81:3a:
                    2f:9f:6f:5b:09:4e:bc:7d:da:a9:7a:49:40:17:29:
                    0e:e9:25:a7:c1:a0:3c:30:ff:a7:bd:02:f3:31:7d:
                    f8:95:1b:fb:72:5c:de:2f:e0:46:f3:5e:0f:dd:60:
                    27:0c:c7:71:f4:60:12:23:61:65:dd:b8:e9:f9:7b:
                    cc:9f:31:2f:4f:ae:90:fa:2c:70:99:01:a0:3f:47:
                    e4:d8:59:3e:a5:1b:ba:83:3f:d0:a0:68:7d:26:9e:
                    64:2e:52:64:d0:32:ed:9e:42:01:46:71:c1:4b:7d:
                    6b:03:20:d9:f6:76:f1:1c:db:49:0e:61:97:5c:ed:
                    75:88:10:7e:cd:f1:9a:77:5e:cb:11:0a:42:38:07:
                    5f:c1:ba:5d:2e:cf:57:a2:1c:82:91:e8:a2:89:53:
                    49:96:d9:39:6f:a0:26:6f:fe:d0:88:a5:b8:f2:ca:
                    47:ff:df:59:d8:09:eb:b5:47:47:c0:aa:71:fd:4f:
                    1c:68:b0:df:95:da:f4:8d:4a:ae:f4:0a:d6:4b:6d:
                    c5:b1:eb:f6:d6:d1:4b:38:71:b2:a9:47:bb:89:74:
                    29:ce:6e:b7:1d:4b:20:89:6b:11:4c:dd:40:a3:77:
                    d4:08:8f:03:22:3a:4e:25:00:c3:e9:55:aa:c1:49:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:36:B5:10:C9:85:B8:C1:31:B1:01:F5:96:27:3E:24:79:71:31:3E
            X509v3 Authority Key Identifier:
                keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:3f:4b:71:a9:eb:e2:10:0f:09:94:8b:61:2e:79:c3:6e:
         ea:85:8b:5f:11:57:2f:41:75:fd:2a:34:6e:ca:10:48:d4:cc:
         7c:46:0a:1b:f6:16:d4:c0:14:58:8f:89:bf:15:42:26:db:a8:
         13:d8:1d:55:f7:cc:4f:8c:79:9f:de:35:92:94:ca:9e:59:28:
         e7:75:bf:32:03:a5:d1:76:60:7a:f3:da:4b:16:a9:3b:2f:7b:
         85:e5:1c:14:1c:48:fc:9c:e0:74:9b:58:df:51:db:54:dd:11:
         69:43:99:c4:14:c6:92:24:a9:31:35:34:db:6a:95:c2:1e:0e:
         ec:80:6d:19:67:bd:37:5f:54:21:3e:4c:b0:d0:b9:6e:6d:8a:
         19:41:93:fa:c2:b7:5f:d5:a4:c9:eb:08:02:7c:13:5a:c8:e1:
         5e:09:23:ee:f5:82:63:b0:5e:38:db:a0:d3:f4:e6:e4:7d:0b:
         de:20:6e:39:13:3e:01:bf:32:22:2f:49:24:ba:fa:57:ba:17:
         db:11:a9:52:4e:98:3d:5d:21:a6:e5:6f:05:99:6d:7f:ab:68:
         63:8f:73:1c:ad:a9:fa:bc:91:69:bb:a1:66:3f:2c:0c:0e:6c:
         d5:dd:bd:e1:24:8a:7a:3f:59:0d:16:f7:20:f2:ea:80:7f:c0:
         ce:a1:78:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rJe3lDywVLi4x8D+OVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDY5ZDlmNzQ5NjMwZjAyNTZjZjBjZWFiNTg4MzZiNDkx
YTU4ZjYwHhcNMjUxMDE5MTAwMTI2WhcNMjUxMDIwMTAwMTI2WjAzMTEwLwYDVQQD
EyhjZjM2YjUxMGM5ODViOGMxMzFiMTAxZjU5NjI3M2UyNDc5NzEzMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug59s+yfK/qztGIVgTovn29bCU68
fdqpeklAFykO6SWnwaA8MP+nvQLzMX34lRv7clzeL+BG814P3WAnDMdx9GASI2Fl
3bjp+XvMnzEvT66Q+ixwmQGgP0fk2Fk+pRu6gz/QoGh9Jp5kLlJk0DLtnkIBRnHB
S31rAyDZ9nbxHNtJDmGXXO11iBB+zfGad17LEQpCOAdfwbpdLs9XohyCkeiiiVNJ
ltk5b6Amb/7QiKW48spH/99Z2AnrtUdHwKpx/U8caLDfldr0jUqu9ArWS23Fsev2
1tFLOHGyqUe7iXQpzm63HUsgiWsRTN1Ao3fUCI8DIjpOJQDD6VWqwUnxfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM82tRDJhbjBMbEB9ZYnPiR5cTE+MB8GA1UdIwQY
MBaAFF3WnZ90ljDwJWzwzqtYg2tJGlj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWIt
ZjNmZDY0MzMxNzA5LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWItZjNmZDY0MzMxNzA5
LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXo/S3Gp
6+IQDwmUi2EuecNu6oWLXxFXL0F1/So0bsoQSNTMfEYKG/YW1MAUWI+JvxVCJtuo
E9gdVffMT4x5n941kpTKnlko53W/MgOl0XZgevPaSxapOy97heUcFBxI/JzgdJtY
31HbVN0RaUOZxBTGkiSpMTU022qVwh4O7IBtGWe9N19UIT5MsNC5bm2KGUGT+sK3
X9WkyesIAnwTWsjhXgkj7vWCY7BeONug0/Tm5H0L3iBuORM+Ab8yIi9JJLr6V7oX
2xGpUk6YPV0hpuVvBZltf6toY49zHK2p+ryRabuhZj8sDA5s1d294SSKej9ZDRb3
IPLqgH/AzqF4Bg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:33 2025 by rpki-client