Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File:                     fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier:          CGbgBHeeAHJ3nEsSDIWnhmMMNcIWGSyBHyLDls0LOLc=
Subject key identifier:   3D:A4:C6:92:80:4D:90:85:BB:16:B7:FF:E3:91:46:1C:69:96:F7:4D
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer:       /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial:       0199FC21ADB9F238350934EB045BA45A490F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number:          0FBB
Signing time:             Sun 19 Oct 2025 11:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:29 +0000
Files and hashes:         1: 1skXawq2SahvYTA2mnEOEbVR1u8.roa (hash: nHycrkajnYAr9VibtJNGtsv2Ftb47ENenxgpTd+DfzI=)
                          2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: 8rrwGZiEs+z7w7kL8zDc9+JJKrHnmxSa1ZqKmTHvOEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:ad:b9:f2:38:35:09:34:eb:04:5b:a4:5a:49:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
        Validity
            Not Before: Oct 19 11:01:29 2025 GMT
            Not After : Oct 20 11:01:29 2025 GMT
        Subject: CN=3da4c692804d9085bb16b7ffe391461c6996f74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:dc:28:aa:8b:93:a1:f9:33:7e:3e:38:85:
                    07:eb:bd:0b:1e:72:fd:7e:52:c5:0b:5a:10:d9:82:
                    d8:cb:e1:5c:37:29:4f:8d:64:96:13:6d:d3:39:6f:
                    a7:3c:09:e6:1e:4e:20:68:7a:4b:ae:3e:0c:6a:08:
                    1e:56:92:18:d6:e3:57:7d:b8:67:dc:c3:89:da:c4:
                    6d:4f:28:10:5b:1e:dd:ca:99:59:aa:3e:89:21:94:
                    62:85:bc:47:35:ae:27:cc:94:48:50:f9:ba:a5:b8:
                    50:0c:89:fe:2c:cb:a2:02:a4:a8:c0:74:4e:21:f9:
                    de:d5:4d:35:c7:7e:9f:7b:1d:f9:35:d0:85:a5:97:
                    c0:ab:55:28:d5:78:57:20:b7:13:d3:48:bf:a7:d3:
                    88:3c:43:11:b1:c0:ec:48:84:d3:bf:2c:60:33:4f:
                    a9:d1:49:d8:2b:24:1d:e4:5a:6e:c6:82:e2:d7:81:
                    56:95:4d:78:ef:67:60:f0:cb:82:f5:20:3b:19:df:
                    65:69:af:77:4b:97:c5:be:43:92:26:91:d9:73:63:
                    e3:b8:0c:06:0b:6e:e4:36:4b:78:06:8c:aa:07:e8:
                    3c:11:f6:b4:14:b4:a5:31:1e:12:00:39:c2:83:8d:
                    fb:66:36:ae:27:73:ed:97:6f:b2:6c:6f:d4:c7:3f:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A4:C6:92:80:4D:90:85:BB:16:B7:FF:E3:91:46:1C:69:96:F7:4D
            X509v3 Authority Key Identifier:
                keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:80:de:ee:1a:b0:9b:54:5f:5b:b8:2d:25:40:67:99:17:
         15:62:df:c4:d8:ce:ea:9d:f1:c8:9e:6f:29:be:19:5e:09:9e:
         95:12:b7:ae:56:a1:c7:fd:cd:23:39:41:8a:82:8e:e0:8f:a3:
         f7:02:ca:f8:ac:8a:ba:b1:5d:20:40:f9:a0:bb:03:8a:02:34:
         0e:29:0f:5b:5c:28:8d:82:67:16:e4:3f:b8:bd:98:a2:ed:70:
         4e:69:64:69:d6:bc:a2:42:d8:3d:16:34:24:dd:ac:78:28:b7:
         c6:8c:af:2e:cb:10:83:f9:fb:1c:64:77:db:b7:45:6d:54:86:
         5c:6a:77:da:83:7f:9b:fc:3b:39:e3:8c:6f:8a:68:70:bb:ec:
         36:6b:4c:1b:44:a3:63:09:70:19:bb:bc:5a:1e:bb:10:fb:ae:
         03:6d:14:1b:12:68:fc:60:7a:eb:cc:44:bc:97:6d:1b:93:98:
         ba:53:f3:af:98:cf:65:63:99:a3:20:6c:67:85:42:2a:a6:41:
         f8:71:29:98:72:23:06:85:a5:72:ff:57:98:04:05:41:1e:e9:
         ab:c6:d8:29:b0:ec:8c:c0:19:de:34:c6:6f:e9:fa:b8:4f:b5:
         50:5d:05:e2:cf:36:ec:83:7c:73:35:e4:b8:63:36:7b:7b:07:
         23:f5:a4:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Ia258jg1CTTrBFukWkkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjZkMTllNTM4OGYxMmMxZDI4YTE2YzMyOGQ4NmMzNjRl
OWNjNzkwHhcNMjUxMDE5MTEwMTI5WhcNMjUxMDIwMTEwMTI5WjAzMTEwLwYDVQQD
EygzZGE0YzY5MjgwNGQ5MDg1YmIxNmI3ZmZlMzkxNDYxYzY5OTZmNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJXcKKqLk6H5M34+OIUH670LHnL9
flLFC1oQ2YLYy+FcNylPjWSWE23TOW+nPAnmHk4gaHpLrj4MaggeVpIY1uNXfbhn
3MOJ2sRtTygQWx7dyplZqj6JIZRihbxHNa4nzJRIUPm6pbhQDIn+LMuiAqSowHRO
Ifne1U01x36fex35NdCFpZfAq1Uo1XhXILcT00i/p9OIPEMRscDsSITTvyxgM0+p
0UnYKyQd5FpuxoLi14FWlU1472dg8MuC9SA7Gd9laa93S5fFvkOSJpHZc2PjuAwG
C27kNkt4BoyqB+g8Efa0FLSlMR4SADnCg437ZjauJ3Ptl2+ybG/Uxz8DEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2kxpKATZCFuxa3/+ORRhxplvdNMB8GA1UdIwQY
MBaAFH1m0Z5TiPEsHSihbDKNhsNk6cx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQt
ZjBkMDc1YTQzN2YxLzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQtZjBkMDc1YTQzN2Yx
LzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHA2A3u4a
sJtUX1u4LSVAZ5kXFWLfxNjO6p3xyJ5vKb4ZXgmelRK3rlahx/3NIzlBioKO4I+j
9wLK+KyKurFdIED5oLsDigI0DikPW1wojYJnFuQ/uL2You1wTmlkada8okLYPRY0
JN2seCi3xoyvLssQg/n7HGR327dFbVSGXGp32oN/m/w7OeOMb4pocLvsNmtMG0Sj
YwlwGbu8Wh67EPuuA20UGxJo/GB668xEvJdtG5OYulPzr5jPZWOZoyBsZ4VCKqZB
+HEpmHIjBoWlcv9XmAQFQR7pq8bYKbDsjMAZ3jTGb+n6uE+1UF0F4s827IN8czXk
uGM2e3sHI/WkIg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:40 2025 by rpki-client