Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
File:                     Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json)
Hash identifier:          gC5uT9SILf9vDbTY6sU4ikNDdMqhiNMbFOYlTKCH4A8=
Subject key identifier:   CA:EE:1B:47:F2:58:90:B6:20:F9:56:E9:F3:04:F1:99:A2:1D:58:AD
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Certificate issuer:       /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial:       0199FBB376C6A2CEE32016D130825A93F856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
Manifest number:          140E
Signing time:             Sun 19 Oct 2025 09:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:06 +0000
Files and hashes:         1: 1-lFInPhnHtbdWXR24NywVD0KfqE.roa (hash: jSoHGnO3etM4/mKGKYynOIO1cFEz/TKW3T30X758YB8=)
                          2: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=)
                          3: 3vr6MmTJusXLHnoomZaTFzf2R_Y.roa (hash: wwVRXCGEVqcIpkBMKuCLGQDGcvT246U/Ud4fDza9yz4=)
                          4: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=)
                          5: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=)
                          6: OG-40bYrkPCUp0MkYoRVMSu2H1w.roa (hash: UlsUA9l9Kp1TKT4sWqeymuQrXSdCMK1f4iOVuci/KJ4=)
                          7: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=)
                          8: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: Pl2X9/jr/Bh8TuNbi9wOCwTQLbcvIoQ2aMVdedSTTvo=)
                          9: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=)
                          10: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=)
                          11: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:76:c6:a2:ce:e3:20:16:d1:30:82:5a:93:f8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
        Validity
            Not Before: Oct 19 09:01:06 2025 GMT
            Not After : Oct 20 09:01:06 2025 GMT
        Subject: CN=caee1b47f25890b620f956e9f304f199a21d58ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:94:d2:d3:54:c9:aa:da:d4:e0:e9:50:91:d8:
                    19:32:fe:e4:c5:fc:1d:1f:6c:fc:21:6e:94:69:26:
                    43:d4:a4:dc:60:ed:38:84:ac:39:1a:06:25:e7:72:
                    a9:60:58:c6:88:ec:54:d3:af:e1:29:f2:3d:d3:45:
                    54:53:a5:b1:06:e2:26:51:47:e7:d8:5b:30:ca:72:
                    79:e1:9e:e7:9d:db:d2:71:de:69:c5:2f:a3:41:7b:
                    60:94:9e:fe:f3:ee:88:03:cb:b9:89:18:cf:39:e1:
                    07:be:f8:2b:82:35:23:ea:5d:0d:d9:34:d4:ed:3b:
                    2f:b5:4f:c6:46:83:9e:ba:93:94:4c:33:1d:4f:c3:
                    4f:dd:5c:f4:cf:80:92:15:70:98:24:e0:95:ff:1f:
                    4f:29:4d:5f:f5:a2:ba:d4:fc:36:3f:63:13:75:10:
                    03:c1:1d:07:5d:5d:67:91:37:e0:07:5b:1f:32:13:
                    8d:8e:ae:eb:9b:56:18:5b:df:ad:8d:d3:3d:46:af:
                    c2:f9:25:7d:2d:fd:59:21:c6:ef:ba:38:9b:81:35:
                    69:4f:08:88:3a:53:15:f6:18:bc:ec:77:48:cb:11:
                    9e:6b:c9:60:20:90:c8:05:36:05:2f:b2:bc:ef:c9:
                    74:60:98:4c:41:67:45:bc:74:dd:28:e1:f8:21:ec:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EE:1B:47:F2:58:90:B6:20:F9:56:E9:F3:04:F1:99:A2:1D:58:AD
            X509v3 Authority Key Identifier:
                keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:0d:83:0e:71:ec:f3:e7:a4:d4:39:bf:08:a2:a3:81:c2:
         93:34:3d:d5:db:11:2a:c7:16:10:ae:b6:12:26:cd:0d:8e:cf:
         40:89:e3:27:1f:39:69:0e:c3:86:0b:34:eb:7b:1f:bd:f0:30:
         45:5b:d6:0b:14:09:f2:67:1c:85:4d:c6:82:02:6d:d6:3b:33:
         2b:6e:8f:dc:48:43:d8:7e:ca:dd:b7:0b:8e:ba:9c:55:af:c6:
         fe:9c:cc:77:00:01:0d:01:4b:e2:5b:5d:e1:ea:7a:4e:5c:e2:
         44:02:27:5e:d4:c5:f5:df:ae:39:aa:79:22:6a:8a:13:fa:ce:
         46:9f:6f:49:64:e0:14:7b:65:1f:26:6d:be:29:71:04:b4:3f:
         7e:8c:f1:53:ba:88:4a:9e:77:85:d3:e2:7d:4e:c3:11:7c:0c:
         9f:16:4f:1e:b9:0e:23:5b:9b:cd:26:b0:ff:50:cc:13:5a:5b:
         40:49:18:a8:e6:c8:69:90:32:51:f8:3c:9c:a5:fb:5e:33:0c:
         fd:f6:be:46:e1:05:e5:5e:06:1a:96:5d:3a:8f:01:70:57:2e:
         27:c5:3f:8e:e5:89:00:20:74:49:17:9f:c5:76:3a:c2:35:89:
         1d:16:47:a4:95:7a:a6:cd:82:b0:a1:b2:a2:d4:45:08:54:cf:
         92:a2:a7:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s3bGos7jIBbRMIJak/hWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5
ZDcwNmEwHhcNMjUxMDE5MDkwMTA2WhcNMjUxMDIwMDkwMTA2WjAzMTEwLwYDVQQD
EyhjYWVlMWI0N2YyNTg5MGI2MjBmOTU2ZTlmMzA0ZjE5OWEyMWQ1OGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZTS01TJqtrU4OlQkdgZMv7kxfwd
H2z8IW6UaSZD1KTcYO04hKw5GgYl53KpYFjGiOxU06/hKfI900VUU6WxBuImUUfn
2FswynJ54Z7nndvScd5pxS+jQXtglJ7+8+6IA8u5iRjPOeEHvvgrgjUj6l0N2TTU
7TsvtU/GRoOeupOUTDMdT8NP3Vz0z4CSFXCYJOCV/x9PKU1f9aK61Pw2P2MTdRAD
wR0HXV1nkTfgB1sfMhONjq7rm1YYW9+tjdM9Rq/C+SV9Lf1ZIcbvujibgTVpTwiI
OlMV9hi87HdIyxGea8lgIJDIBTYFL7K878l0YJhMQWdFvHTdKOH4Iezg3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMruG0fyWJC2IPlW6fME8ZmiHVitMB8GA1UdIwQY
MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt
YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3
LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuMNgw5x
7PPnpNQ5vwiio4HCkzQ91dsRKscWEK62EibNDY7PQInjJx85aQ7Dhgs063sfvfAw
RVvWCxQJ8mcchU3GggJt1jszK26P3EhD2H7K3bcLjrqcVa/G/pzMdwABDQFL4ltd
4ep6TlziRAInXtTF9d+uOap5ImqKE/rORp9vSWTgFHtlHyZtvilxBLQ/fozxU7qI
Sp53hdPifU7DEXwMnxZPHrkOI1ubzSaw/1DME1pbQEkYqObIaZAyUfg8nKX7XjMM
/fa+RuEF5V4GGpZdOo8BcFcuJ8U/juWJACB0SRefxXY6wjWJHRZHpJV6ps2CsKGy
otRFCFTPkqKngQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:03 2025 by rpki-client