Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File:                     Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier:          7NMtOM+UMt6X47JSjHVgB+D0yOE3ivDklyAWbsbda1I=
Subject key identifier:   C6:16:63:07:4F:EA:8E:F9:F6:D8:0F:DD:40:79:98:1D:F5:B8:A7:01
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer:       /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial:       0199FBEA77A1192FE3B1A55E19578F23EF2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number:          0B94
Signing time:             Sun 19 Oct 2025 10:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:11 +0000
Files and hashes:         1: 86DIp4nA1KvFpdBSXMyUmtWYWwI.roa (hash: cpW/tzUkKHchwUYkpy4oFTimBza9umXgZv/RQGOTP7o=)
                          2: JZK6YSeBc1BbG83Qekl2aATyxHU.roa (hash: Wa+cbSmnDCoci/OWT42YCZ1RtEmxjW8RP6TQupPGRBk=)
                          3: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: vVybPd3k83GnDHnYrM+1qA0BvPzA9wRT6P0eLSvqU1g=)
                          4: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:77:a1:19:2f:e3:b1:a5:5e:19:57:8f:23:ef:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
        Validity
            Not Before: Oct 19 10:01:11 2025 GMT
            Not After : Oct 20 10:01:11 2025 GMT
        Subject: CN=c61663074fea8ef9f6d80fdd4079981df5b8a701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:97:94:09:41:a2:d1:2e:1d:89:83:17:7e:5e:
                    62:c3:e6:2e:3b:41:48:07:6c:20:46:d3:b1:63:f7:
                    be:d7:ad:dc:06:e1:19:e4:c5:5d:4c:84:a6:81:1c:
                    4b:9c:3b:f9:9f:dc:86:dd:d8:2b:a6:df:f3:f7:f9:
                    80:d5:81:62:e3:36:2d:e5:76:75:de:d9:87:12:21:
                    92:22:6c:db:19:fd:4e:81:0f:fa:37:33:1e:f0:01:
                    57:ad:35:cf:99:0b:2e:f5:1e:38:59:60:bf:da:a1:
                    9e:c8:64:ed:86:c7:67:8d:90:35:d9:40:10:1e:39:
                    81:0d:eb:7c:df:3b:3d:cd:81:98:40:f0:57:42:b0:
                    a1:28:26:a1:7f:6b:0e:da:72:9b:ed:d2:bc:5f:ad:
                    52:08:71:71:08:32:d8:1f:da:3b:84:e6:62:b3:73:
                    f4:88:4e:be:a4:80:a3:08:02:9e:30:47:ff:f9:24:
                    6d:dc:8c:c9:3e:0a:ee:97:42:8e:e8:9c:28:69:93:
                    4a:01:d7:27:46:24:d9:76:40:cb:00:9c:44:a7:8b:
                    2c:94:b5:cf:86:24:22:2f:50:f1:a0:9e:6d:f1:69:
                    62:ac:c5:28:9e:91:16:8c:99:fc:35:c3:72:a7:61:
                    a8:c4:eb:ab:84:9b:65:30:b2:a5:7b:be:8c:33:0c:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:16:63:07:4F:EA:8E:F9:F6:D8:0F:DD:40:79:98:1D:F5:B8:A7:01
            X509v3 Authority Key Identifier:
                keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:60:f9:3b:1e:3e:af:50:ee:4d:41:6c:38:5f:c8:eb:38:cc:
         76:b7:cb:ad:ec:ab:43:51:6c:b6:a5:7c:cb:50:1b:f7:fd:13:
         f9:75:96:28:3b:e6:06:34:be:61:d8:be:5d:3a:af:74:37:78:
         87:11:3c:d1:8e:23:80:25:b2:33:af:a0:84:4f:49:66:1c:54:
         c7:26:4c:45:c5:e6:dd:b7:a2:13:dc:1f:b9:ff:55:65:65:66:
         35:76:38:00:34:35:a9:5d:f0:1e:54:21:96:f4:01:0b:01:1e:
         a3:58:dc:a6:f3:4d:65:93:84:f5:ee:19:ca:54:04:44:d4:e7:
         30:78:32:82:fd:93:9f:94:b3:9c:bf:0e:aa:38:9d:76:b2:2b:
         a6:7e:eb:16:40:54:45:75:38:51:2c:82:5c:80:98:df:19:9a:
         cb:d6:6a:cb:c7:4c:59:7a:aa:b6:aa:24:ac:9f:77:5f:8a:a1:
         90:65:48:82:71:4f:f7:61:30:cb:a9:43:d8:dc:dd:95:2a:61:
         ed:ab:f0:86:2a:2a:56:16:70:c3:ec:aa:cc:f5:f1:03:43:73:
         52:8f:f6:93:c5:ff:5f:5f:8e:a0:ee:09:e0:7d:5c:78:2e:2d:
         6d:5e:20:e7:a4:1c:8d:93:9e:f3:1f:9c:50:51:ce:65:2f:8e:
         c1:56:6c:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76nehGS/jsaVeGVePI+8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz
NzA3MWEwHhcNMjUxMDE5MTAwMTExWhcNMjUxMDIwMTAwMTExWjAzMTEwLwYDVQQD
EyhjNjE2NjMwNzRmZWE4ZWY5ZjZkODBmZGQ0MDc5OTgxZGY1YjhhNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJeUCUGi0S4diYMXfl5iw+YuO0FI
B2wgRtOxY/e+163cBuEZ5MVdTISmgRxLnDv5n9yG3dgrpt/z9/mA1YFi4zYt5XZ1
3tmHEiGSImzbGf1OgQ/6NzMe8AFXrTXPmQsu9R44WWC/2qGeyGTthsdnjZA12UAQ
HjmBDet83zs9zYGYQPBXQrChKCahf2sO2nKb7dK8X61SCHFxCDLYH9o7hOZis3P0
iE6+pICjCAKeMEf/+SRt3IzJPgrul0KO6JwoaZNKAdcnRiTZdkDLAJxEp4sslLXP
hiQiL1DxoJ5t8WlirMUonpEWjJn8NcNyp2GoxOurhJtlMLKle76MMwzWqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYWYwdP6o759tgP3UB5mB31uKcBMB8GA1UdIwQY
MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt
NGMwOGZmZTEwMDc2LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2
LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGD5Ox4+
r1DuTUFsOF/I6zjMdrfLreyrQ1FstqV8y1Ab9/0T+XWWKDvmBjS+Ydi+XTqvdDd4
hxE80Y4jgCWyM6+ghE9JZhxUxyZMRcXm3beiE9wfuf9VZWVmNXY4ADQ1qV3wHlQh
lvQBCwEeo1jcpvNNZZOE9e4ZylQERNTnMHgygv2Tn5SznL8OqjiddrIrpn7rFkBU
RXU4USyCXICY3xmay9Zqy8dMWXqqtqokrJ93X4qhkGVIgnFP92Ewy6lD2NzdlSph
7avwhioqVhZww+yqzPXxA0NzUo/2k8X/X1+OoO4J4H1ceC4tbV4g56QcjZOe8x+c
UFHOZS+OwVZsZg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:41 2025 by rpki-client