Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File:                     ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier:          4wwSjSmbCYnW7zYXUCzRa0tiV1v+bmWNR2H/ypvwh24=
Subject key identifier:   BF:D0:DF:98:2B:F2:9A:05:CB:B7:B7:7C:9A:D3:F0:EA:9A:C5:87:B1
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer:       /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial:       0199FAA0D422A9137F5ED8C1DD74FC3028F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number:          1117
Signing time:             Sun 19 Oct 2025 04:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:07 +0000
Files and hashes:         1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=)
                          2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: 61TcqRES7vzBjPaSS+nnSbYq3sLMuhInmtBgS6/2coQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:d4:22:a9:13:7f:5e:d8:c1:dd:74:fc:30:28:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
        Validity
            Not Before: Oct 19 04:01:07 2025 GMT
            Not After : Oct 20 04:01:07 2025 GMT
        Subject: CN=bfd0df982bf29a05cbb7b77c9ad3f0ea9ac587b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:46:70:5d:85:81:8f:b0:9b:fd:25:6d:91:cc:
                    be:15:76:bc:69:f7:d4:b8:af:f0:20:2b:da:70:66:
                    0a:a8:44:a8:11:52:49:2c:50:14:e6:6f:df:68:3b:
                    c5:4a:25:4d:68:42:72:87:10:cb:d9:d9:9d:69:db:
                    c3:26:c5:79:92:7e:e0:11:8a:b8:81:d6:53:77:ca:
                    02:b5:18:ec:db:f3:10:e8:cc:c3:ce:60:ef:2a:98:
                    56:6f:a7:17:c6:77:54:eb:c2:2a:45:3b:92:3f:60:
                    e5:03:ac:42:95:26:7f:01:3d:18:2c:aa:b1:12:de:
                    a7:af:7c:0a:62:6f:20:a9:72:a4:60:e7:d7:28:38:
                    08:d4:f6:3e:9f:ba:26:d7:33:f6:ba:af:41:58:cb:
                    d8:fd:15:33:33:fe:cf:8c:d5:93:bb:10:2e:a9:bd:
                    73:58:36:34:00:da:69:8a:f6:8b:ee:d9:62:25:52:
                    56:26:97:13:7c:88:62:c2:3e:05:f7:ea:4b:b5:b9:
                    00:0b:e4:1a:e0:3a:33:49:ee:ab:3f:02:ef:6e:95:
                    0f:21:b5:6e:bc:43:da:2c:8c:c3:1d:e8:44:a7:b9:
                    78:00:93:5f:89:0c:2f:62:ae:d1:ce:27:62:21:23:
                    f5:30:c8:e2:f4:87:93:bb:86:43:6a:d1:5f:b0:fd:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D0:DF:98:2B:F2:9A:05:CB:B7:B7:7C:9A:D3:F0:EA:9A:C5:87:B1
            X509v3 Authority Key Identifier:
                keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:bd:25:85:91:e7:4f:e4:11:69:1c:71:4a:cb:80:b1:32:
         10:c6:e4:7a:61:8d:d2:c6:c4:f9:47:8c:9c:94:27:a6:12:23:
         ed:f2:f5:ed:03:de:ea:b4:9f:2f:bc:cc:b9:31:a5:33:fa:32:
         c9:7d:9d:16:a5:47:f7:3b:63:d4:18:ac:ba:5f:ad:ab:ad:0c:
         a6:81:4e:84:e0:82:19:84:cd:2b:3e:d6:9f:9d:2b:c4:a5:0b:
         6d:34:a4:fc:f9:3d:33:f4:aa:c0:6a:0e:a7:95:ff:bf:9d:16:
         ff:0b:db:08:ae:d7:18:81:97:9d:a3:93:58:fa:d1:7e:48:86:
         65:1d:90:42:ef:84:8e:37:b4:12:ad:ce:fc:5f:ca:e9:b9:4a:
         6a:57:7b:f3:92:da:a4:52:54:15:a5:6a:d0:e8:9f:20:4f:df:
         b2:88:46:45:53:c6:0b:77:77:23:60:55:94:69:88:98:0f:64:
         40:b1:73:a0:04:7c:d3:78:da:8c:1c:56:c0:dd:c1:7e:b9:14:
         bb:68:32:e4:84:eb:4b:6b:50:8a:fa:56:86:6d:2d:ff:38:54:
         f6:11:71:1f:16:45:84:58:90:52:bd:58:35:6f:64:14:ea:79:
         f5:e4:5e:7b:25:2e:1c:1e:e9:df:86:e5:80:c2:c2:98:62:ab:
         bc:75:aa:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oNQiqRN/XtjB3XT8MCj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzI0ZTRjZTc2OTM5YjRkYjU3ZDVkMzUwYzJhZDAwN2I1
OTgwZTEwHhcNMjUxMDE5MDQwMTA3WhcNMjUxMDIwMDQwMTA3WjAzMTEwLwYDVQQD
EyhiZmQwZGY5ODJiZjI5YTA1Y2JiN2I3N2M5YWQzZjBlYTlhYzU4N2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EZwXYWBj7Cb/SVtkcy+FXa8affU
uK/wICvacGYKqESoEVJJLFAU5m/faDvFSiVNaEJyhxDL2dmdadvDJsV5kn7gEYq4
gdZTd8oCtRjs2/MQ6MzDzmDvKphWb6cXxndU68IqRTuSP2DlA6xClSZ/AT0YLKqx
Et6nr3wKYm8gqXKkYOfXKDgI1PY+n7om1zP2uq9BWMvY/RUzM/7PjNWTuxAuqb1z
WDY0ANppivaL7tliJVJWJpcTfIhiwj4F9+pLtbkAC+Qa4DozSe6rPwLvbpUPIbVu
vEPaLIzDHehEp7l4AJNfiQwvYq7RzidiISP1MMji9IeTu4ZDatFfsP3vZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/Q35gr8poFy7e3fJrT8OqaxYexMB8GA1UdIwQY
MBaAFIoyTkznaTm021fV01DCrQB7WYDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzIt
NjJiYzhmYzc1NWRkLzEvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kY2FkMTMtZTllOC00ZDRmLWFmYzItNjJiYzhmYzc1NWRk
LzEvaWpKT1RPZHBPYlRiVjlYVFVNS3RBSHRaZ09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNO9JYWR
50/kEWkccUrLgLEyEMbkemGN0sbE+UeMnJQnphIj7fL17QPe6rSfL7zMuTGlM/oy
yX2dFqVH9ztj1Bisul+tq60MpoFOhOCCGYTNKz7Wn50rxKULbTSk/Pk9M/SqwGoO
p5X/v50W/wvbCK7XGIGXnaOTWPrRfkiGZR2QQu+Ejje0Eq3O/F/K6blKald785La
pFJUFaVq0OifIE/fsohGRVPGC3d3I2BVlGmImA9kQLFzoAR803jajBxWwN3BfrkU
u2gy5ITrS2tQivpWhm0t/zhU9hFxHxZFhFiQUr1YNW9kFOp59eReeyUuHB7p34bl
gMLCmGKrvHWqtQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:34 2025 by rpki-client