Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
File:                     F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft (raw, json)
Hash identifier:          M7fBYWEGGJpUlXW3B8sNLZeoc5Xxy/LmIudknCNwPb0=
Subject key identifier:   D3:EB:39:19:24:3E:6D:78:31:8E:1F:AF:CC:FB:2F:95:F3:6F:1B:BD
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Certificate issuer:       /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial:       0199FBB36972A47048296FB7EF8C46C198CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
Manifest number:          16F4
Signing time:             Sun 19 Oct 2025 09:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:03 +0000
Files and hashes:         1: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl (hash: 5mpng3AbK06yEV01OWDqZHeQqBvM8C8r6RzJofiasDA=)
                          2: TVFn8SEC2xk2K9kTba56N04TXws.roa (hash: bEjcW9v0b6AFyRx1s5DtJswmBb7q38sD7gnKfblja1c=)
                          3: sT64_r4WthvCyzVyB3E-Psv_afc.roa (hash: JV3KmP839OiGVkSCgS8tVdnI3cJc0KWSQvX/RcZE/68=)
                          4: xSZmjgKKN9mMG3JDQoWyY_2tpzE.roa (hash: J/Ga6J6sfLJW3CEZ/9em1QDzAEf2XIPOwnBQgDlRhhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:69:72:a4:70:48:29:6f:b7:ef:8c:46:c1:98:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
        Validity
            Not Before: Oct 19 09:01:03 2025 GMT
            Not After : Oct 20 09:01:03 2025 GMT
        Subject: CN=d3eb3919243e6d78318e1fafccfb2f95f36f1bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:a6:e3:0e:7b:0e:68:d2:8d:a8:3b:2f:aa:
                    43:87:55:f2:ba:38:ea:e1:d5:be:00:b1:fb:80:fb:
                    a2:85:1c:32:cd:b1:8f:dd:be:ee:1e:22:97:9a:c6:
                    2a:ed:3a:ea:27:91:99:a8:e6:df:8f:09:87:80:ac:
                    24:ce:37:7f:be:2f:a9:75:a2:e8:8c:8d:7b:d0:3e:
                    25:ce:14:7c:80:82:ee:b6:f4:70:84:d1:8d:0d:08:
                    26:4e:e2:c9:67:54:08:8f:e6:da:37:d3:a1:bc:2b:
                    93:6c:e4:a2:74:80:b7:83:44:4b:3a:5d:62:b3:d4:
                    c2:96:95:da:21:7d:e0:26:3c:e2:59:eb:2d:91:01:
                    b2:73:84:ae:7f:ab:12:98:77:8a:4f:a9:44:29:b8:
                    dc:ec:31:29:a1:fc:ec:85:bf:0d:06:1a:9e:9e:f8:
                    50:9e:bf:03:20:7b:31:f5:7b:e2:96:89:16:c7:b5:
                    8a:d0:3a:3f:5f:00:6a:30:e2:4f:a7:c0:28:d7:70:
                    e9:20:6b:b0:0a:f6:7a:df:3b:84:62:1c:0e:90:08:
                    89:24:ba:bc:4a:3e:14:0f:17:25:9a:68:eb:90:42:
                    49:6b:b1:59:83:2f:cd:4b:a4:b6:e2:41:bc:35:4d:
                    38:97:46:47:25:2c:b9:1e:3d:74:5a:1c:69:ce:7e:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EB:39:19:24:3E:6D:78:31:8E:1F:AF:CC:FB:2F:95:F3:6F:1B:BD
            X509v3 Authority Key Identifier:
                keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:83:17:b5:12:1a:63:21:ed:5a:30:79:f8:80:6b:86:39:b2:
         65:08:68:ab:17:35:c2:b5:f2:5a:85:a6:6e:ae:ec:4e:01:26:
         6f:61:c0:00:5d:e2:58:03:96:dc:67:7a:10:42:e1:ff:57:f4:
         bb:7c:02:29:12:06:29:7b:c3:e6:da:db:e9:8a:d7:d4:d4:ff:
         fc:a1:53:b1:d7:aa:ab:16:a7:95:af:fb:55:d7:f9:49:bb:ea:
         75:26:11:1a:52:56:95:de:f3:63:4b:62:b6:f4:1b:4a:93:3e:
         46:de:58:e8:7b:34:f2:15:51:9d:ba:e2:e8:1d:0b:56:95:f6:
         17:ec:e9:89:2c:3d:4d:ca:bb:a7:b0:83:16:ff:ff:8f:c9:0c:
         bc:ce:56:1e:05:43:99:6e:37:ae:7f:57:59:f6:f0:0a:b6:2f:
         b2:60:30:f9:7a:8a:05:89:87:d2:25:a4:a5:9a:51:97:ba:27:
         9c:35:c0:fb:62:7b:ac:14:9a:4d:51:2c:57:01:78:2c:dd:05:
         c8:e8:2e:f5:6d:55:e6:f8:0e:26:76:3c:5c:6b:52:46:df:c1:
         12:51:b1:dd:3c:78:e5:2a:01:56:9e:7c:d7:0a:0b:c6:5e:9f:
         a2:77:0e:69:1e:94:fb:8b:96:66:cb:67:26:ce:d4:8b:e8:27:
         7f:f8:9c:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s2lypHBIKW+374xGwZjKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDg0N2Y4NjY3ZDUyZmEyY2Y5Y2Y5YWZjYzQzYTA3OTE1
NTc1Y2EwHhcNMjUxMDE5MDkwMTAzWhcNMjUxMDIwMDkwMTAzWjAzMTEwLwYDVQQD
EyhkM2ViMzkxOTI0M2U2ZDc4MzE4ZTFmYWZjY2ZiMmY5NWYzNmYxYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53Cm4w57DmjSjag7L6pDh1Xyujjq
4dW+ALH7gPuihRwyzbGP3b7uHiKXmsYq7TrqJ5GZqObfjwmHgKwkzjd/vi+pdaLo
jI170D4lzhR8gILutvRwhNGNDQgmTuLJZ1QIj+baN9OhvCuTbOSidIC3g0RLOl1i
s9TClpXaIX3gJjziWestkQGyc4Suf6sSmHeKT6lEKbjc7DEpofzshb8NBhqenvhQ
nr8DIHsx9XvilokWx7WK0Do/XwBqMOJPp8Ao13DpIGuwCvZ63zuEYhwOkAiJJLq8
Sj4UDxclmmjrkEJJa7FZgy/NS6S24kG8NU04l0ZHJSy5Hj10Whxpzn6lswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPrORkkPm14MY4fr8z7L5Xzbxu9MB8GA1UdIwQY
MBaAFBdIR/hmfVL6LPnPmvzEOgeRVXXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2Ut
MTQ1NGZmZTYxODJjLzEvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2UtMTQ1NGZmZTYxODJj
LzEvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIMXtRIa
YyHtWjB5+IBrhjmyZQhoqxc1wrXyWoWmbq7sTgEmb2HAAF3iWAOW3Gd6EELh/1f0
u3wCKRIGKXvD5trb6YrX1NT//KFTsdeqqxanla/7Vdf5SbvqdSYRGlJWld7zY0ti
tvQbSpM+Rt5Y6Hs08hVRnbri6B0LVpX2F+zpiSw9Tcq7p7CDFv//j8kMvM5WHgVD
mW43rn9XWfbwCrYvsmAw+XqKBYmH0iWkpZpRl7onnDXA+2J7rBSaTVEsVwF4LN0F
yOgu9W1V5vgOJnY8XGtSRt/BElGx3Tx45SoBVp581woLxl6foncOaR6U+4uWZstn
Js7Ui+gnf/icUg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:14 2025 by rpki-client