Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          EuEaYSD7XJdh4XudfMQNdAnJMOyI3A+eJsgf7HEayNg=
Subject key identifier:   7B:C9:6A:1D:EA:1E:88:14:19:53:2A:5E:B9:3E:4D:AB:8F:54:DD:E3
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       0199FB7CCAC38AFC94B575618B443F8B622C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 08:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:23 +0000
Files and hashes:         1: BUuoPdUgpRssN_8s1xD5RE2knSk.roa (hash: i3w2fhY/oY9rEDtPXwfXHRtgj9nEgJpg1E4G0VvBSNE=)
                          2: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: HkC007AosEsz2dY5rEPsek3WyrZ+J2Y9LzToalR2njs=)
                          3: hI-d9_-nLNRhqznA_vGtUzzzpi4.roa (hash: 1ticuQGef+AQNaEeVWAc8kEXscPJuukVCdQXQ58jy44=)
                          4: yp6VXJ9ttEuEqrWfh1dI64LQkQ8.roa (hash: Mr06/vk6uaXb+ILhJfXZxgC4nSBWLm8yARcjAKzBYPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:ca:c3:8a:fc:94:b5:75:61:8b:44:3f:8b:62:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Oct 19 08:01:23 2025 GMT
            Not After : Oct 20 08:01:23 2025 GMT
        Subject: CN=7bc96a1dea1e881419532a5eb93e4dab8f54dde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:9a:6a:30:09:23:28:4a:28:59:ee:e0:ac:
                    7e:60:fb:4c:fa:bb:f1:6c:a2:97:33:d2:09:d6:1b:
                    f6:4e:08:78:81:60:e7:8f:a0:e0:bd:c3:c4:72:57:
                    00:ec:0d:fb:2a:1e:15:d5:88:b9:90:90:ab:e2:43:
                    10:f2:e1:2a:f0:f8:6b:b9:25:92:39:ca:68:87:6f:
                    2d:4a:b6:e3:d7:0e:ef:9a:2f:50:ed:07:69:3f:07:
                    0a:28:9e:2e:40:66:40:e1:94:1b:fe:86:1f:16:bc:
                    ba:f0:31:e1:eb:db:55:99:02:e7:fe:72:e6:9a:d1:
                    03:d6:ec:ab:0a:9e:c7:d7:7c:50:55:10:00:a3:70:
                    59:e6:1f:a1:aa:80:6a:a1:90:2d:0f:c6:43:4e:13:
                    8f:c8:9a:74:3c:f8:89:f7:57:87:9a:6c:35:e0:1b:
                    26:43:a4:71:5a:64:19:04:e0:a2:e1:9c:6b:ec:1c:
                    af:f8:27:64:fc:80:5b:5d:bb:00:67:3c:06:b7:a3:
                    40:75:d7:cb:6b:3b:b5:08:bb:5e:9c:7f:e6:ca:9f:
                    4c:a7:69:6b:a5:4f:4d:a0:42:f9:0a:7a:07:f1:65:
                    74:bc:12:01:62:62:5f:43:de:63:35:c3:63:c6:cb:
                    b3:37:4f:c2:6a:35:db:37:53:4c:5f:e0:58:1f:28:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C9:6A:1D:EA:1E:88:14:19:53:2A:5E:B9:3E:4D:AB:8F:54:DD:E3
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:98:44:c3:28:93:26:5e:80:79:92:51:8c:dc:2f:0f:0d:d5:
         91:40:09:1d:9d:1f:1e:12:b3:4d:40:e7:5f:3d:c1:33:b5:9f:
         39:5b:66:8d:2d:71:fc:50:28:d8:cf:6b:cc:ca:c5:bc:54:06:
         5e:8b:82:31:44:f4:5c:f8:b7:0d:ec:8a:f2:c1:4a:3d:df:ed:
         b5:cf:27:2b:98:e1:15:ff:d4:42:b9:58:a6:e4:51:b1:96:7f:
         a3:b6:5a:01:b1:47:a2:26:79:5f:42:c5:e9:a4:f1:f9:19:e6:
         dd:ab:18:d3:b2:f6:70:57:e3:bb:69:27:f5:a5:18:a7:15:ec:
         1c:3f:7f:d4:d8:61:9b:62:e8:ad:fb:d0:ff:54:8e:67:e4:90:
         16:8b:ff:bb:4e:68:82:60:07:63:eb:71:f8:3d:84:29:34:58:
         04:4f:48:69:56:ca:04:1d:8d:82:6c:cb:5e:eb:c7:7c:63:ba:
         37:25:e5:d3:c6:b9:84:31:8b:72:1c:cf:13:46:e3:44:cc:28:
         3d:c9:f5:6a:33:4c:77:62:1f:f6:b4:a9:16:9a:07:c2:fa:49:
         18:a9:6d:da:95:51:43:f1:5a:65:2a:46:4e:e0:aa:81:dd:e6:
         cc:9b:85:22:2b:1d:0b:fa:6a:a0:30:8b:ab:f9:16:cc:d0:7d:
         70:b3:86:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fMrDivyUtXVhi0Q/i2IsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MWYzNmZjYmY3MzM0ZWZmNmI5MWU4MDI5N2VhNWIyNWM0
ZWNmZDIwHhcNMjUxMDE5MDgwMTIzWhcNMjUxMDIwMDgwMTIzWjAzMTEwLwYDVQQD
Eyg3YmM5NmExZGVhMWU4ODE0MTk1MzJhNWViOTNlNGRhYjhmNTRkZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQKaajAJIyhKKFnu4Kx+YPtM+rvx
bKKXM9IJ1hv2Tgh4gWDnj6DgvcPEclcA7A37Kh4V1Yi5kJCr4kMQ8uEq8PhruSWS
Ocpoh28tSrbj1w7vmi9Q7QdpPwcKKJ4uQGZA4ZQb/oYfFry68DHh69tVmQLn/nLm
mtED1uyrCp7H13xQVRAAo3BZ5h+hqoBqoZAtD8ZDThOPyJp0PPiJ91eHmmw14Bsm
Q6RxWmQZBOCi4Zxr7Byv+Cdk/IBbXbsAZzwGt6NAddfLazu1CLtenH/myp9Mp2lr
pU9NoEL5CnoH8WV0vBIBYmJfQ95jNcNjxsuzN0/CajXbN1NMX+BYHyjC+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvJah3qHogUGVMqXrk+TauPVN3jMB8GA1UdIwQY
MBaAFIQfNvy/czTv9rkegCl+pbJcTs/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzdjMTYtMDYwMy00ODQ1LWI0ZDQt
OTVkZGIwOTc0ZTRiLzEvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzdjMTYtMDYwMy00ODQ1LWI0ZDQtOTVkZGIwOTc0ZTRi
LzEvaEI4Ml9MOXpOT18ydVI2QUtYNmxzbHhPejlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJhEwyiT
Jl6AeZJRjNwvDw3VkUAJHZ0fHhKzTUDnXz3BM7WfOVtmjS1x/FAo2M9rzMrFvFQG
XouCMUT0XPi3DeyK8sFKPd/ttc8nK5jhFf/UQrlYpuRRsZZ/o7ZaAbFHoiZ5X0LF
6aTx+Rnm3asY07L2cFfju2kn9aUYpxXsHD9/1Nhhm2LorfvQ/1SOZ+SQFov/u05o
gmAHY+tx+D2EKTRYBE9IaVbKBB2NgmzLXuvHfGO6NyXl08a5hDGLchzPE0bjRMwo
Pcn1ajNMd2If9rSpFpoHwvpJGKlt2pVRQ/FaZSpGTuCqgd3mzJuFIisdC/pqoDCL
q/kWzNB9cLOGBw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:38 2025 by rpki-client