Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File:                     lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier:          9xSRKYYPcNLnxC/tAkiGVSj1/qtiIejsVYEkt5Tl4xU=
Subject key identifier:   41:0D:DA:32:18:75:42:89:78:D9:42:AB:B8:15:55:C8:52:47:95:63
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer:       /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial:       0199FBEAB043FB75C7A312B342345D7AEBF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number:          03FE
Signing time:             Sun 19 Oct 2025 10:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:25 +0000
Files and hashes:         1: 2dDLJD08E9QpNd4AzHqAGaj9Rdc.roa (hash: kvq8BEE4NygHaJH3QQ2Qsn2UgSTjHUPYk5ETZ2RJd3E=)
                          2: FYcjZuHT4JZu7kEqPYetpvF-Qx0.roa (hash: L5G/m+Q1fagnOrSl7UqJpYi3BYMPHAymC5hLCegmYeg=)
                          3: R2xDf0hT3bwTslHF7Ulhf-HarRU.roa (hash: NAVYlsHQmPmwP3TvDnFkO23YGDJlDkO0kffvGr4O5Zs=)
                          4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: CzWj0+f3UMaNNIl/sOspds5bPlcIzVYlhMXy+WGM+gs=)
                          5: uzUGTfjtsuHWlcN_I0IA8CMrfBY.roa (hash: vK/HOcliDT8rJeC9+pxXMkuRxyO7UoQeXCrhqdkwGeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:b0:43:fb:75:c7:a3:12:b3:42:34:5d:7a:eb:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
        Validity
            Not Before: Oct 19 10:01:25 2025 GMT
            Not After : Oct 20 10:01:25 2025 GMT
        Subject: CN=410dda321875428978d942abb81555c852479563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:00:93:29:78:1e:4f:a6:f1:92:bc:90:f3:
                    8c:0f:c4:9f:6a:9b:d7:6b:c0:2a:ea:8b:bd:b8:e1:
                    e2:b6:3e:bd:f6:11:d9:e0:d7:e7:64:4e:ec:d8:5d:
                    06:63:c5:27:f4:30:17:d9:ec:25:7e:50:95:a1:de:
                    9e:5c:b6:58:2f:76:76:04:db:ea:69:38:2d:91:af:
                    b2:92:2f:0c:8e:8f:b7:20:f0:0b:0e:3b:05:17:ff:
                    6c:46:e8:a0:49:ba:51:13:89:b2:ad:26:e0:1e:87:
                    9c:91:db:fe:2a:7f:d9:af:a4:58:e1:40:cb:ad:95:
                    cc:1b:45:e0:eb:e9:e5:2c:d2:00:96:3f:3b:04:2c:
                    5e:52:38:76:cb:3b:87:2f:ae:6a:28:33:5e:b3:6f:
                    0a:8d:62:79:e1:0d:b6:a4:8d:52:ff:23:5d:fe:43:
                    e6:b5:bd:d6:ce:bf:b9:0b:20:e0:e3:2c:d3:3c:a1:
                    57:12:c7:cf:7b:d3:c3:44:4c:92:b4:6d:68:3a:ba:
                    f0:7a:09:79:a2:42:73:5a:fd:a7:e7:97:d7:64:66:
                    20:52:f0:c6:44:16:1f:34:89:48:f0:30:af:93:17:
                    c5:9b:e8:ff:a0:2c:d4:10:49:54:4c:76:f6:b1:8d:
                    0b:5e:15:df:d6:b1:60:50:f7:a6:0d:e8:8e:db:99:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0D:DA:32:18:75:42:89:78:D9:42:AB:B8:15:55:C8:52:47:95:63
            X509v3 Authority Key Identifier:
                keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:1f:11:39:7e:0b:10:70:fe:46:81:88:97:7f:b9:44:af:
         17:63:ef:f6:7b:05:85:4c:cc:05:2e:83:ff:bc:c3:43:b1:0f:
         0f:f1:de:15:4b:7a:50:40:27:4d:99:ef:42:4d:88:53:6a:49:
         34:8e:05:23:13:d7:bc:b2:53:e6:84:63:8a:b0:63:55:c7:f9:
         09:69:00:45:64:66:87:24:ef:ca:33:76:8a:73:f8:17:53:46:
         d3:0c:31:b8:ca:14:57:ec:5d:d1:44:ca:a5:a3:a9:82:3a:5a:
         90:a2:91:11:bb:98:75:39:3e:8b:3f:2d:ee:b2:7f:6a:7a:1a:
         ef:61:5a:3a:2b:9d:e5:05:b4:4d:ee:4c:5f:90:a1:e8:9a:c1:
         fd:56:0b:cc:12:8f:6a:8a:af:3b:72:9f:84:02:0f:43:c2:a8:
         43:8b:54:33:0c:01:36:b0:9b:12:55:cb:3e:65:60:17:a1:ed:
         93:92:68:e0:37:cf:13:e0:60:36:3e:93:b2:d8:de:b8:1d:8e:
         1c:28:c8:9a:0f:03:00:17:bf:b6:54:0a:a5:85:09:a9:32:2a:
         04:db:d2:93:2f:5a:56:68:2b:01:51:d7:5f:fc:c2:7f:e9:d8:
         db:75:2e:33:a6:f6:65:95:cb:14:cb:ab:d8:f9:83:e7:d0:b7:
         f3:5a:c6:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rBD+3XHoxKzQjRdeuv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4
NTAxMTMwHhcNMjUxMDE5MTAwMTI1WhcNMjUxMDIwMTAwMTI1WjAzMTEwLwYDVQQD
Eyg0MTBkZGEzMjE4NzU0Mjg5NzhkOTQyYWJiODE1NTVjODUyNDc5NTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45QAkyl4Hk+m8ZK8kPOMD8SfapvX
a8Aq6ou9uOHitj699hHZ4NfnZE7s2F0GY8Un9DAX2ewlflCVod6eXLZYL3Z2BNvq
aTgtka+yki8Mjo+3IPALDjsFF/9sRuigSbpRE4myrSbgHoeckdv+Kn/Zr6RY4UDL
rZXMG0Xg6+nlLNIAlj87BCxeUjh2yzuHL65qKDNes28KjWJ54Q22pI1S/yNd/kPm
tb3Wzr+5CyDg4yzTPKFXEsfPe9PDREyStG1oOrrwegl5okJzWv2n55fXZGYgUvDG
RBYfNIlI8DCvkxfFm+j/oCzUEElUTHb2sY0LXhXf1rFgUPemDeiO25lZcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEN2jIYdUKJeNlCq7gVVchSR5VjMB8GA1UdIwQY
MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt
M2Q4YmM4OWI0NDI3LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3
LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwMfETl+
CxBw/kaBiJd/uUSvF2Pv9nsFhUzMBS6D/7zDQ7EPD/HeFUt6UEAnTZnvQk2IU2pJ
NI4FIxPXvLJT5oRjirBjVcf5CWkARWRmhyTvyjN2inP4F1NG0wwxuMoUV+xd0UTK
paOpgjpakKKREbuYdTk+iz8t7rJ/anoa72FaOiud5QW0Te5MX5Ch6JrB/VYLzBKP
aoqvO3KfhAIPQ8KoQ4tUMwwBNrCbElXLPmVgF6Htk5Jo4DfPE+BgNj6TstjeuB2O
HCjImg8DABe/tlQKpYUJqTIqBNvSky9aVmgrAVHXX/zCf+nY23UuM6b2ZZXLFMur
2PmD59C381rG3g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:56 2025 by rpki-client