Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File:                     z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier:          uWCE5Iy/CLWTRu18PMTFSRfjJB8PDtDqKcNLTLYpIlY=
Subject key identifier:   56:24:22:84:4E:BA:30:4E:FA:1B:F7:96:8B:3F:55:C2:D2:8F:5C:1D
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer:       /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial:       0199FE7DC64A94A26B6C58B61DE071342463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number:          1674
Signing time:             Sun 19 Oct 2025 22:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:19 +0000
Files and hashes:         1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
                          2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: OQR/kWCA52wrBB3fiBdPWmnc3X6WWLfBclR6a7zLA3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:c6:4a:94:a2:6b:6c:58:b6:1d:e0:71:34:24:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
        Validity
            Not Before: Oct 19 22:01:19 2025 GMT
            Not After : Oct 20 22:01:19 2025 GMT
        Subject: CN=562422844eba304efa1bf7968b3f55c2d28f5c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:9f:73:c7:4f:07:63:04:54:77:fb:12:8b:
                    3a:bf:81:41:d5:bc:b2:ac:83:50:41:c8:a7:6f:8b:
                    63:3b:04:ff:8b:52:cc:0a:4c:56:99:29:65:4a:d6:
                    b2:e7:d1:09:ad:b6:d1:cd:ce:29:10:54:54:3e:c3:
                    3d:3c:e5:0b:ee:f8:10:36:c1:6b:49:22:a0:bb:e9:
                    79:62:ce:ee:db:3b:e9:fc:75:f4:6c:cf:3f:2c:a2:
                    35:00:55:bb:a2:01:6f:c4:9f:c6:5f:3c:54:28:da:
                    41:b4:ed:cc:f5:5d:0a:6f:e0:d0:ac:7e:30:f4:40:
                    bd:84:2a:81:2f:cd:50:e9:3a:bf:63:c4:01:67:21:
                    c3:e6:2c:25:7d:c8:05:8a:51:e2:20:e1:ce:c2:ce:
                    12:20:65:bd:9a:11:5c:ce:33:70:79:48:b0:15:27:
                    0f:69:46:0e:fb:35:25:e2:3e:9d:14:6d:58:9d:80:
                    ce:ca:39:d5:a5:4f:73:df:7a:ae:2d:88:63:10:f8:
                    11:93:d8:93:4d:c7:c4:fd:da:e1:a3:b5:80:1a:13:
                    88:b7:ab:d7:08:f7:79:24:7f:80:fc:ae:b0:5a:64:
                    d1:f1:b8:8e:9a:fd:6c:ba:c9:a7:2e:a1:7b:59:6f:
                    27:b4:99:ab:01:da:83:6b:64:c3:cd:4a:41:10:5e:
                    09:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:24:22:84:4E:BA:30:4E:FA:1B:F7:96:8B:3F:55:C2:D2:8F:5C:1D
            X509v3 Authority Key Identifier:
                keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0e:e7:49:5e:d7:3f:16:ad:2e:15:36:b0:41:bb:ea:34:d8:
         32:f4:ff:3f:11:3e:c8:ca:fa:bd:eb:a2:9d:96:0d:2e:2f:7e:
         3d:16:da:8c:20:c3:de:d7:e6:f2:8a:97:9c:ec:b9:07:67:b1:
         ac:a2:55:af:21:ab:4e:ba:ea:f1:5f:ec:c8:58:a3:8d:2c:2b:
         60:be:6f:dd:3a:43:81:4a:da:d3:ee:84:9c:13:3b:8f:60:36:
         72:00:12:d4:09:b9:c1:31:04:29:26:79:87:35:c6:1b:5e:e3:
         05:25:97:1d:0d:87:90:82:b5:03:ce:ee:e2:d7:45:1b:bc:31:
         8a:9c:bc:4b:cd:75:a3:5c:6b:cf:64:33:83:12:43:8d:8c:71:
         37:6d:49:89:f7:9c:63:4c:a3:18:94:ff:72:be:ad:16:ce:89:
         da:bb:2c:d6:78:60:be:34:f1:bf:f8:9e:90:f1:0e:1b:4d:53:
         0a:46:9f:9e:df:0c:51:ad:c1:22:46:e0:74:2c:50:5a:26:91:
         75:ab:80:3b:07:73:99:df:8e:8a:e4:5a:b2:9a:57:f3:49:60:
         ec:67:71:42:68:93:a2:03:47:07:31:28:3a:8a:ca:fb:50:ee:
         87:b7:8f:fd:5d:71:28:46:5f:fa:eb:1f:18:a5:ec:bf:d3:ab:
         b0:32:0b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fcZKlKJrbFi2HeBxNCRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4
MTg0Y2UwHhcNMjUxMDE5MjIwMTE5WhcNMjUxMDIwMjIwMTE5WjAzMTEwLwYDVQQD
Eyg1NjI0MjI4NDRlYmEzMDRlZmExYmY3OTY4YjNmNTVjMmQyOGY1YzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S2fc8dPB2MEVHf7Eos6v4FB1byy
rINQQcinb4tjOwT/i1LMCkxWmSllStay59EJrbbRzc4pEFRUPsM9POUL7vgQNsFr
SSKgu+l5Ys7u2zvp/HX0bM8/LKI1AFW7ogFvxJ/GXzxUKNpBtO3M9V0Kb+DQrH4w
9EC9hCqBL81Q6Tq/Y8QBZyHD5iwlfcgFilHiIOHOws4SIGW9mhFczjNweUiwFScP
aUYO+zUl4j6dFG1YnYDOyjnVpU9z33quLYhjEPgRk9iTTcfE/drho7WAGhOIt6vX
CPd5JH+A/K6wWmTR8biOmv1susmnLqF7WW8ntJmrAdqDa2TDzUpBEF4JZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYkIoROujBO+hv3los/VcLSj1wdMB8GA1UdIwQY
MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt
OWU3OTJiNmYyMzVkLzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk
LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQ7nSV7X
PxatLhU2sEG76jTYMvT/PxE+yMr6veuinZYNLi9+PRbajCDD3tfm8oqXnOy5B2ex
rKJVryGrTrrq8V/syFijjSwrYL5v3TpDgUra0+6EnBM7j2A2cgAS1Am5wTEEKSZ5
hzXGG17jBSWXHQ2HkIK1A87u4tdFG7wxipy8S811o1xrz2QzgxJDjYxxN21Jifec
Y0yjGJT/cr6tFs6J2rss1nhgvjTxv/iekPEOG01TCkafnt8MUa3BIkbgdCxQWiaR
dauAOwdzmd+OiuRasppX80lg7GdxQmiTogNHBzEoOorK+1Duh7eP/V1xKEZf+usf
GKXsv9OrsDILdw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:20:16 2025 by rpki-client