Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File:                     nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier:          hoQVeG3JlRJflhzgprJ/Crdbgjv8Omg9iKSrJt+ZYCo=
Subject key identifier:   AD:08:AC:0B:AD:41:9B:EF:61:A3:FF:12:DB:7A:A1:5D:42:46:0D:0B
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       0199FC582DAB33959E0479D529A7B51536E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number:          1025
Signing time:             Sun 19 Oct 2025 12:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:01 +0000
Files and hashes:         1: YqcsRsNWUIAuSWFcG2LkwlaCRpU.roa (hash: JnjUw+oSYZ7zYyFgVViB1dXlZlt1DLN5IKIef4zg43A=)
                          2: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (hash: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=)
                          3: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (hash: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=)
                          4: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: Txy6r+3zwEKSCeJ2/j95lS+u8OVXL+ZjE1hQB3yfo2Q=)
                          5: qdNG49hIyDFFdCFIGbm6kEPFcbI.roa (hash: oUfCXgwymuAlhA935EnqN9SnikKCG4eVZ1qECppIrzI=)
                          6: tgtnwoMSuJpvUhZwhk9qFrx7hWQ.roa (hash: rFNa5r+Q4PL0nS416jQMSkeeFMd2IaIQ8Oy1MIANZ/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:2d:ab:33:95:9e:04:79:d5:29:a7:b5:15:36:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: Oct 19 12:01:01 2025 GMT
            Not After : Oct 20 12:01:01 2025 GMT
        Subject: CN=ad08ac0bad419bef61a3ff12db7aa15d42460d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:02:5a:24:00:b6:0e:b4:1a:67:6a:9e:8e:af:
                    7c:52:d0:fd:d8:ce:c2:e6:57:cf:8b:41:94:8c:56:
                    9d:af:33:8a:dd:c7:df:a1:ae:d0:b4:96:a3:91:7d:
                    04:2b:c1:44:9d:ab:59:d7:e9:8d:ca:f4:26:7d:7b:
                    06:a2:d4:aa:07:d9:be:96:88:2a:3e:42:66:dd:7c:
                    21:c3:31:7a:5b:f5:db:1f:a7:26:85:50:cd:f9:9a:
                    95:c6:b5:72:be:81:f9:7e:c1:26:0f:b4:b0:06:42:
                    d3:4b:89:f7:bf:6d:3e:42:bf:89:0c:2a:36:48:49:
                    37:17:e1:20:df:c8:1f:96:ea:3b:06:18:e1:5c:d8:
                    40:c8:cf:01:21:d8:78:c7:7c:e2:7a:89:86:f4:af:
                    a8:c5:0e:c8:23:f1:1e:a0:9b:dc:ea:5e:55:a9:96:
                    79:39:11:01:6e:2e:e3:b3:2e:e4:10:0e:02:ce:0a:
                    fb:28:18:9e:43:b0:eb:b2:8d:de:70:42:98:79:28:
                    d1:e5:c8:7d:64:95:ea:33:bb:5f:bd:fd:3b:a6:cd:
                    27:0a:22:6f:2f:1b:cd:14:d5:77:40:f7:c4:85:91:
                    f5:37:bf:2f:a6:2d:5f:50:3b:c6:63:1e:bf:3b:70:
                    0d:31:80:89:29:59:b1:51:82:1d:26:55:92:66:c1:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:08:AC:0B:AD:41:9B:EF:61:A3:FF:12:DB:7A:A1:5D:42:46:0D:0B
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2e:e7:bf:0c:5b:83:80:a5:10:08:61:a6:b7:a5:2f:17:1f:
         db:4b:31:2e:4b:21:50:1b:01:d0:80:9c:7c:91:52:d3:4e:b9:
         51:4f:db:e5:09:57:d1:03:20:31:32:47:4e:6e:8f:32:c1:c7:
         45:22:d0:2b:b4:c0:92:d7:eb:db:d4:48:a3:4c:c2:48:25:07:
         31:0a:3d:4a:2a:cd:3a:8f:e5:41:97:e0:b8:02:fd:e7:60:cc:
         18:e8:95:9d:43:e0:49:1b:68:59:78:87:ce:83:3f:9c:bf:44:
         f0:b5:44:4e:4a:01:6f:e5:8f:dd:e5:f7:08:f1:84:63:6c:e1:
         1f:a1:98:f3:f8:d5:45:9d:66:d0:a9:af:b7:57:be:7c:9a:09:
         8d:63:59:a3:de:31:57:43:52:eb:a4:b2:10:12:dc:de:cd:52:
         33:b8:42:1b:ca:84:a3:54:c8:e9:11:5f:7e:8b:e8:8b:d1:81:
         f0:a1:c1:65:72:fb:9d:f3:ce:3f:bf:fb:a0:a6:8b:01:69:93:
         7c:2c:b7:0e:b9:98:63:ba:83:db:8a:95:52:e6:56:ed:ea:cc:
         e6:6d:b5:76:df:0b:ce:87:30:de:44:c8:d3:fc:56:f2:7d:7b:
         52:9e:4d:f8:c8:4b:cc:d4:9c:64:56:37:e5:ce:c5:f9:51:bc:
         16:2c:db:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WC2rM5WeBHnVKae1FTbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl
ZmU2MjIwHhcNMjUxMDE5MTIwMTAxWhcNMjUxMDIwMTIwMTAxWjAzMTEwLwYDVQQD
EyhhZDA4YWMwYmFkNDE5YmVmNjFhM2ZmMTJkYjdhYTE1ZDQyNDYwZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/QJaJAC2DrQaZ2qejq98UtD92M7C
5lfPi0GUjFadrzOK3cffoa7QtJajkX0EK8FEnatZ1+mNyvQmfXsGotSqB9m+logq
PkJm3XwhwzF6W/XbH6cmhVDN+ZqVxrVyvoH5fsEmD7SwBkLTS4n3v20+Qr+JDCo2
SEk3F+Eg38gfluo7BhjhXNhAyM8BIdh4x3zieomG9K+oxQ7II/EeoJvc6l5VqZZ5
OREBbi7jsy7kEA4Czgr7KBieQ7Drso3ecEKYeSjR5ch9ZJXqM7tfvf07ps0nCiJv
LxvNFNV3QPfEhZH1N78vpi1fUDvGYx6/O3ANMYCJKVmxUYIdJlWSZsG80wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0IrAutQZvvYaP/Ett6oV1CRg0LMB8GA1UdIwQY
MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt
OGMyZGY1YTVjNmQ3LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3
LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVS7nvwxb
g4ClEAhhprelLxcf20sxLkshUBsB0ICcfJFS0065UU/b5QlX0QMgMTJHTm6PMsHH
RSLQK7TAktfr29RIo0zCSCUHMQo9SirNOo/lQZfguAL952DMGOiVnUPgSRtoWXiH
zoM/nL9E8LVETkoBb+WP3eX3CPGEY2zhH6GY8/jVRZ1m0Kmvt1e+fJoJjWNZo94x
V0NS66SyEBLc3s1SM7hCG8qEo1TI6RFffovoi9GB8KHBZXL7nfPOP7/7oKaLAWmT
fCy3DrmYY7qD24qVUuZW7erM5m21dt8Lzocw3kTI0/xW8n17Up5N+MhLzNScZFY3
5c7F+VG8FizbWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:17 2025 by rpki-client