Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
File:                     rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json)
Hash identifier:          1DAY7XAk7DrGg2sBhqTBlKK2ep50oLpEJU3eqXX/NA4=
Subject key identifier:   F8:D1:5C:C7:18:D3:1A:F0:12:7F:04:64:DA:C2:41:DC:B5:ED:E1:A5
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Certificate issuer:       /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial:       0199FC5910C03B42869AAD09E4086AEC19E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
Manifest number:          0B6D
Signing time:             Sun 19 Oct 2025 12:01:59 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:59 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:59 +0000
Files and hashes:         1: 2yuHeP9Kzi2-iDsOvnhCDYlo6Uw.roa (hash: IHxChvWb85sgNgotrA/BnsV06YpBeOkmN/tTfoFuUvc=)
                          2: 84vkoPKxTF7pgwUvztDxRbjDrhQ.roa (hash: Wg3Ofao0gloehi9CthP/SdUCVsO6QMEQd9BpLHe3B8o=)
                          3: GKSQanExligYvTlhCHXIb80j450.roa (hash: xKvcqXgNWsJgbD21bBVQq7NU5gjELOTuBMVHtTDoCVI=)
                          4: Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa (hash: umfGkIDiH0PEP4Dex0coyv4+UbwotSLBPIcupKuR1h8=)
                          5: ekkDxJqu-ZlE3YVqxLbl94UD6sQ.roa (hash: +gZe1v06dqZXZbhN48Df/j5IB56FQCKk5ahi88pFN9Q=)
                          6: kNcVhQpRqGRKtRoApGjZuA5ACHo.roa (hash: EghVSyPoJOgbCHk/V4h5/7YBe1j1EcoGI/60cjBIYNw=)
                          7: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: N3kwakWG+HJzdQ/IHY8XxsvGhHvjoBvaz+G28Evumis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:10:c0:3b:42:86:9a:ad:09:e4:08:6a:ec:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
        Validity
            Not Before: Oct 19 12:01:59 2025 GMT
            Not After : Oct 20 12:01:59 2025 GMT
        Subject: CN=f8d15cc718d31af0127f0464dac241dcb5ede1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:20:5f:37:b1:e9:d7:2f:2c:9a:54:ea:3c:
                    65:7c:ee:99:c3:4a:fc:b3:db:ae:0c:2b:15:bc:ca:
                    32:14:07:3a:f7:f0:d9:e2:bf:2c:f5:a0:2f:29:99:
                    04:dd:e6:9b:99:4a:c4:6a:5f:4f:ec:b6:a0:78:46:
                    c8:7d:44:0f:71:41:7f:39:ee:34:e8:41:d6:4a:d7:
                    57:90:56:45:ad:8a:4b:4e:ba:dc:d8:e2:e1:0f:25:
                    10:74:03:d4:ad:3a:f4:6f:82:c1:1d:ce:2d:e2:b2:
                    7e:25:4c:04:b2:19:d7:91:2e:fe:60:27:4d:49:5f:
                    0c:62:d2:af:50:29:ec:cf:25:21:98:e3:82:24:67:
                    57:7d:15:37:4d:db:aa:0b:87:a8:0c:42:3f:54:3f:
                    d0:a7:2c:74:15:8c:4d:01:53:8e:d8:1d:a8:85:ec:
                    8e:2b:b1:20:44:13:ff:2e:56:41:cb:20:7b:30:f1:
                    1e:cc:3b:24:a2:21:df:01:54:b2:65:c0:c9:c7:09:
                    bc:c7:ec:b4:c5:c2:de:bc:97:46:18:91:20:11:8a:
                    a9:10:4f:45:71:32:bd:1e:b8:b1:35:d5:80:fd:09:
                    37:f1:02:98:11:b3:bf:c2:8a:ac:3e:b8:7e:7f:c4:
                    ba:a5:97:da:c8:cc:d9:04:a9:c1:78:fe:6a:02:ea:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D1:5C:C7:18:D3:1A:F0:12:7F:04:64:DA:C2:41:DC:B5:ED:E1:A5
            X509v3 Authority Key Identifier:
                keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ba:ae:fe:03:f0:c7:73:fd:6a:40:fb:97:66:10:9b:cb:c6:
         d4:89:34:d6:8d:9d:9d:78:75:6c:e8:5e:8b:cb:38:71:b9:d9:
         99:a0:41:97:b3:f9:79:bf:d0:7d:e9:9b:da:8f:2c:29:48:d0:
         4d:cc:98:a9:28:b9:77:82:b2:4d:04:77:7a:cb:3a:86:36:98:
         26:ac:85:c9:bb:5f:d4:fe:68:b0:56:d1:2f:7f:9a:ac:7c:2f:
         c3:bd:a0:a8:bb:6d:4f:f0:c6:24:0c:51:c1:ef:5a:8d:0a:96:
         bc:cb:db:09:98:5b:82:75:b6:02:8c:52:4d:2a:72:a2:2b:5a:
         cc:2f:2f:16:04:44:da:15:f1:36:d3:cd:11:9e:63:8a:97:af:
         76:92:2a:2c:f3:6f:76:25:d2:bf:99:18:51:5b:d7:03:e6:69:
         39:1c:da:a6:d9:d4:60:64:0f:ba:82:14:ea:4a:49:09:97:6c:
         9b:be:ba:97:20:1a:78:97:03:b4:c2:9e:cd:5e:9d:0f:73:51:
         5d:89:8f:9b:e5:77:a7:cb:75:72:60:28:ac:15:b0:6f:37:70:
         f7:5b:da:91:37:f9:a3:ec:f2:e5:3d:3b:be:50:ce:3e:13:e0:
         75:b4:77:29:a9:c6:ab:7a:fd:0f:29:4c:cb:3d:ff:01:02:05:
         73:76:16:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WRDAO0KGmq0J5Ahq7BngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMWY3MjFiN2I3ZTZkMDQ5ZmJmZTUyMGUxY2E4OWMxY2Ey
NTY4MTMwHhcNMjUxMDE5MTIwMTU5WhcNMjUxMDIwMTIwMTU5WjAzMTEwLwYDVQQD
EyhmOGQxNWNjNzE4ZDMxYWYwMTI3ZjA0NjRkYWMyNDFkY2I1ZWRlMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmogXzex6dcvLJpU6jxlfO6Zw0r8
s9uuDCsVvMoyFAc69/DZ4r8s9aAvKZkE3eabmUrEal9P7LageEbIfUQPcUF/Oe40
6EHWStdXkFZFrYpLTrrc2OLhDyUQdAPUrTr0b4LBHc4t4rJ+JUwEshnXkS7+YCdN
SV8MYtKvUCnszyUhmOOCJGdXfRU3TduqC4eoDEI/VD/Qpyx0FYxNAVOO2B2oheyO
K7EgRBP/LlZByyB7MPEezDskoiHfAVSyZcDJxwm8x+y0xcLevJdGGJEgEYqpEE9F
cTK9HrixNdWA/Qk38QKYEbO/woqsPrh+f8S6pZfayMzZBKnBeP5qAuqCtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjRXMcY0xrwEn8EZNrCQdy17eGlMB8GA1UdIwQY
MBaAFKwfcht7fm0En7/lIOHKicHKJWgTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjIt
NjRkMjljODZiZjNlLzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjItNjRkMjljODZiZjNl
LzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLqu/gPw
x3P9akD7l2YQm8vG1Ik01o2dnXh1bOhei8s4cbnZmaBBl7P5eb/Qfemb2o8sKUjQ
TcyYqSi5d4KyTQR3ess6hjaYJqyFybtf1P5osFbRL3+arHwvw72gqLttT/DGJAxR
we9ajQqWvMvbCZhbgnW2AoxSTSpyoitazC8vFgRE2hXxNtPNEZ5jipevdpIqLPNv
diXSv5kYUVvXA+ZpORzaptnUYGQPuoIU6kpJCZdsm766lyAaeJcDtMKezV6dD3NR
XYmPm+V3p8t1cmAorBWwbzdw91vakTf5o+zy5T07vlDOPhPgdbR3KanGq3r9DylM
yz3/AQIFc3YWiA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:15 2025 by rpki-client