Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          2vtx8XS0MPkzJOq2hilMjL/mGfEqe2mUbYTPJQXZ2kQ=
Subject key identifier:   E8:D0:3E:44:83:45:7D:15:99:A0:CD:05:2A:25:FD:F7:F2:71:38:DA
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       0199FDD93AB2D517712451575331A8E0855B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          0515
Signing time:             Sun 19 Oct 2025 19:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:35 +0000
Files and hashes:         1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: hVfKdBbGOQC6Re0Jkv6bznMmN0rPjh9e6kZjLf8tc6c=)
                          2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:3a:b2:d5:17:71:24:51:57:53:31:a8:e0:85:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Oct 19 19:01:35 2025 GMT
            Not After : Oct 20 19:01:35 2025 GMT
        Subject: CN=e8d03e4483457d1599a0cd052a25fdf7f27138da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8c:87:e4:93:d9:ae:93:f0:c4:cb:4d:d0:94:
                    8b:b8:df:45:b6:5d:dc:92:0d:de:e2:2c:3e:71:4e:
                    fa:e7:b5:b7:79:8b:da:93:02:6a:27:80:76:9f:08:
                    1a:95:f9:28:4d:70:8d:80:39:c3:53:c1:6f:02:c4:
                    ff:e3:84:52:0a:79:02:29:de:b7:3c:33:f9:0f:e5:
                    22:33:cf:dd:53:42:cf:75:87:5f:ad:be:4d:0e:05:
                    2d:e7:30:16:a5:0b:5e:76:6c:27:6c:a4:76:c9:e2:
                    82:20:cb:e5:e6:f0:0c:a5:f0:80:14:2c:60:85:7b:
                    fe:ee:ee:f5:bb:65:c9:76:3c:a3:eb:fb:35:a0:85:
                    9d:95:51:df:2e:69:db:02:68:a0:ff:14:2e:bc:df:
                    0d:f9:ff:bb:e5:1e:ee:0d:4a:9f:19:b0:2e:1b:cb:
                    74:a3:e0:5e:7f:45:d0:32:55:ab:7e:df:eb:28:db:
                    34:5e:fe:de:79:17:e0:dc:67:8b:7b:4f:f8:98:cb:
                    7b:b0:d7:ea:9a:20:f6:bc:9f:84:a7:b0:38:fd:78:
                    8d:14:13:54:f9:30:9d:8b:ae:82:36:48:da:7b:29:
                    da:a8:59:68:48:4e:b5:0b:6b:06:94:0d:21:00:c7:
                    0a:7a:77:5a:a3:2c:56:ad:31:f8:5c:5a:41:fe:15:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:3E:44:83:45:7D:15:99:A0:CD:05:2A:25:FD:F7:F2:71:38:DA
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:2f:5f:64:ed:7b:19:0c:7a:6f:eb:fc:02:07:91:09:29:
         7e:a1:5b:75:3b:50:8d:df:64:05:e1:7a:db:eb:5e:1b:6c:71:
         49:fe:9f:16:e2:2b:43:92:6b:32:0a:ce:d9:e2:d0:5c:54:f9:
         e9:b7:bf:3b:e7:2b:26:85:35:66:11:cc:bf:08:cb:71:90:bc:
         cf:57:da:2c:79:db:00:49:b7:4f:d2:78:fd:ed:0c:6d:09:38:
         f0:e8:38:96:bb:48:88:c3:2c:8d:40:b7:19:fa:49:72:27:c9:
         27:d0:e5:73:83:71:88:ca:ae:5d:95:09:ae:cf:c7:3e:7c:d7:
         cb:37:d6:4d:60:14:08:c5:d4:68:47:0e:28:18:76:08:c5:89:
         9a:ce:a1:b4:d8:96:f5:c2:df:d2:89:5f:3c:36:45:d6:56:11:
         df:2b:6b:b3:99:34:52:26:d6:93:50:1d:f4:c2:69:cc:13:b0:
         6a:44:d7:6c:a9:6b:42:8a:c9:08:c0:95:9e:08:6f:ca:0f:55:
         8d:ea:0e:78:5d:3c:eb:5d:88:e4:eb:2f:13:7a:94:24:5c:a4:
         90:e9:af:a6:ba:5a:15:99:9c:d7:79:5b:40:db:4a:55:bb:84:
         77:14:99:01:37:2d:9d:7e:52:92:4d:62:ea:4f:12:41:ab:ce:
         1f:ca:36:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Tqy1RdxJFFXUzGo4IVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmY2NzcwYmE3N2UwMzJlN2U3ZDFkNzMyZDk3NTAyNDFl
MTE5ZjkwHhcNMjUxMDE5MTkwMTM1WhcNMjUxMDIwMTkwMTM1WjAzMTEwLwYDVQQD
EyhlOGQwM2U0NDgzNDU3ZDE1OTlhMGNkMDUyYTI1ZmRmN2YyNzEzOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oyH5JPZrpPwxMtN0JSLuN9Ftl3c
kg3e4iw+cU7657W3eYvakwJqJ4B2nwgalfkoTXCNgDnDU8FvAsT/44RSCnkCKd63
PDP5D+UiM8/dU0LPdYdfrb5NDgUt5zAWpQtedmwnbKR2yeKCIMvl5vAMpfCAFCxg
hXv+7u71u2XJdjyj6/s1oIWdlVHfLmnbAmig/xQuvN8N+f+75R7uDUqfGbAuG8t0
o+Bef0XQMlWrft/rKNs0Xv7eeRfg3GeLe0/4mMt7sNfqmiD2vJ+Ep7A4/XiNFBNU
+TCdi66CNkjaeynaqFloSE61C2sGlA0hAMcKendaoyxWrTH4XFpB/hXa3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjQPkSDRX0VmaDNBSol/ffycTjaMB8GA1UdIwQY
MBaAFBZvZ3C6d+Ay5+fR1zLZdQJB4Rn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQt
MDY5YzEwZGFmYjA3LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQtMDY5YzEwZGFmYjA3
LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2svX2Tt
exkMem/r/AIHkQkpfqFbdTtQjd9kBeF62+teG2xxSf6fFuIrQ5JrMgrO2eLQXFT5
6be/O+crJoU1ZhHMvwjLcZC8z1faLHnbAEm3T9J4/e0MbQk48Og4lrtIiMMsjUC3
GfpJcifJJ9Dlc4NxiMquXZUJrs/HPnzXyzfWTWAUCMXUaEcOKBh2CMWJms6htNiW
9cLf0olfPDZF1lYR3ytrs5k0UibWk1Ad9MJpzBOwakTXbKlrQorJCMCVnghvyg9V
jeoOeF08612I5OsvE3qUJFykkOmvprpaFZmc13lbQNtKVbuEdxSZATctnX5Skk1i
6k8SQavOH8o2ww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:31 2025 by rpki-client