Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
File:                     R5govcbQWedVFZLePuKetBv3vaU.mft (raw, json)
Hash identifier:          bz4nfqgdy+Wy6/aIB3W7WMRkAd7mVjpJA9HxhNd7eaE=
Subject key identifier:   6F:DD:A0:C5:74:1F:06:F8:58:71:80:2A:F9:4D:93:46:06:03:01:55
Authority key identifier: 47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5
Certificate issuer:       /CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
Certificate serial:       0199FC217E28DC6E91BBF65B5BA7F83FB5C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
Manifest number:          141A
Signing time:             Sun 19 Oct 2025 11:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:17 +0000
Files and hashes:         1: 6tr1rrCgjeuxrkgAXDLatxAPpWk.roa (hash: A5u3qVfZdPKR2rtZPYyIhEzH3krbvs2KLzMm8FE26Yo=)
                          2: R5govcbQWedVFZLePuKetBv3vaU.crl (hash: AkNlVNtVliUROfGSi57LVpi7kudD3Sov9x1/A5eD3Iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:7e:28:dc:6e:91:bb:f6:5b:5b:a7:f8:3f:b5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479828bdc6d059e7551592de3ee29eb41bf7bda5
        Validity
            Not Before: Oct 19 11:01:17 2025 GMT
            Not After : Oct 20 11:01:17 2025 GMT
        Subject: CN=6fdda0c5741f06f85871802af94d934606030155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:9f:2a:d9:a2:b9:68:5c:f4:54:ec:51:7c:
                    65:2c:55:c5:24:37:2b:c3:74:ff:82:55:4e:ed:dc:
                    ff:47:af:98:32:a1:c4:cb:bb:ea:89:37:99:db:b1:
                    05:45:82:f5:11:3b:81:2d:73:1a:ca:6f:48:5b:14:
                    59:ec:8d:3c:51:36:2d:c8:e8:65:4c:cb:33:60:37:
                    07:1e:39:9c:8f:d3:15:e3:6f:2a:03:bb:50:74:89:
                    bb:6e:29:74:53:00:a1:13:4b:a1:d6:49:e2:9b:53:
                    16:f7:ca:20:22:c1:b9:d9:e8:47:1d:b3:12:6b:1f:
                    09:2a:ff:18:9b:0a:2b:94:9e:08:c0:4d:e7:59:b4:
                    14:64:fe:fa:9e:79:e1:7c:51:e9:40:61:72:df:fb:
                    8e:45:77:20:a4:09:3a:0a:1c:1e:95:07:5e:25:4a:
                    30:64:b6:21:3d:aa:c4:fb:a5:da:23:ec:f5:2e:1c:
                    be:f2:50:98:80:02:62:f8:ba:bc:1b:42:eb:14:22:
                    ee:cb:43:49:15:25:24:a6:9a:af:65:40:48:d3:44:
                    d0:ec:ba:50:d8:bd:65:cb:c6:4f:a1:5b:81:33:e1:
                    c9:60:fb:54:99:b9:76:3e:55:b1:7f:49:a9:b8:ee:
                    52:06:e3:30:11:62:93:04:64:e4:0b:6f:9d:af:26:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DD:A0:C5:74:1F:06:F8:58:71:80:2A:F9:4D:93:46:06:03:01:55
            X509v3 Authority Key Identifier:
                keyid:47:98:28:BD:C6:D0:59:E7:55:15:92:DE:3E:E2:9E:B4:1B:F7:BD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5govcbQWedVFZLePuKetBv3vaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/544bda-a4ef-4254-ba19-3c14ad2b83d7/1/R5govcbQWedVFZLePuKetBv3vaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:2e:9e:43:47:d1:ab:cf:43:fa:4c:aa:d4:99:86:5a:b6:
         b1:3d:22:1e:78:d7:d3:56:e1:0b:8d:ed:60:41:fb:93:ec:91:
         17:5b:77:48:5b:fa:4b:7a:d6:1e:76:40:58:07:8c:d4:8e:d1:
         a1:d3:74:27:39:6d:23:51:59:de:c2:a2:26:18:5d:13:cd:b3:
         80:de:20:2f:c4:1f:bb:4b:16:63:d3:44:ea:0b:d7:d4:2f:47:
         69:3b:ff:64:4d:ba:29:16:48:4d:10:40:74:37:c3:09:2a:5a:
         fe:7b:ab:06:8f:a2:74:3c:de:46:55:91:1d:7a:7c:af:79:ad:
         1b:b2:ba:1b:ea:a7:71:c2:a0:84:e0:ad:f9:ae:85:9f:e1:54:
         c4:0f:09:e8:b3:08:8c:8e:1f:b5:02:91:3f:a7:30:ad:78:ba:
         66:13:27:ee:c0:ce:03:bc:aa:e5:31:5e:c9:7a:82:ad:d5:0c:
         e7:d8:f5:23:86:73:a4:30:de:2c:e1:40:49:82:1d:59:04:c2:
         cb:7c:2e:00:c0:68:fe:09:33:d6:93:60:a9:f1:a7:ab:44:c3:
         17:9b:cf:6f:ec:b4:e0:63:2d:23:86:d0:b7:30:d2:5c:88:54:
         9b:95:fc:90:1b:78:5b:68:45:c0:78:d0:e1:b1:d0:91:92:83:
         8a:6a:30:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IX4o3G6Ru/ZbW6f4P7XJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OTgyOGJkYzZkMDU5ZTc1NTE1OTJkZTNlZTI5ZWI0MWJm
N2JkYTUwHhcNMjUxMDE5MTEwMTE3WhcNMjUxMDIwMTEwMTE3WjAzMTEwLwYDVQQD
Eyg2ZmRkYTBjNTc0MWYwNmY4NTg3MTgwMmFmOTRkOTM0NjA2MDMwMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5ufKtmiuWhc9FTsUXxlLFXFJDcr
w3T/glVO7dz/R6+YMqHEy7vqiTeZ27EFRYL1ETuBLXMaym9IWxRZ7I08UTYtyOhl
TMszYDcHHjmcj9MV428qA7tQdIm7bil0UwChE0uh1knim1MW98ogIsG52ehHHbMS
ax8JKv8YmworlJ4IwE3nWbQUZP76nnnhfFHpQGFy3/uORXcgpAk6ChwelQdeJUow
ZLYhParE+6XaI+z1Lhy+8lCYgAJi+Lq8G0LrFCLuy0NJFSUkppqvZUBI00TQ7LpQ
2L1ly8ZPoVuBM+HJYPtUmbl2PlWxf0mpuO5SBuMwEWKTBGTkC2+dryYSFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/doMV0Hwb4WHGAKvlNk0YGAwFVMB8GA1UdIwQY
MBaAFEeYKL3G0FnnVRWS3j7inrQb972lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni81NDRiZGEtYTRlZi00MjU0LWJhMTkt
M2MxNGFkMmI4M2Q3LzEvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni81NDRiZGEtYTRlZi00MjU0LWJhMTktM2MxNGFkMmI4M2Q3
LzEvUjVnb3ZjYlFXZWRWRlpMZVB1S2V0QnYzdmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSounkNH
0avPQ/pMqtSZhlq2sT0iHnjX01bhC43tYEH7k+yRF1t3SFv6S3rWHnZAWAeM1I7R
odN0JzltI1FZ3sKiJhhdE82zgN4gL8Qfu0sWY9NE6gvX1C9HaTv/ZE26KRZITRBA
dDfDCSpa/nurBo+idDzeRlWRHXp8r3mtG7K6G+qnccKghOCt+a6Fn+FUxA8J6LMI
jI4ftQKRP6cwrXi6ZhMn7sDOA7yq5TFeyXqCrdUM59j1I4ZzpDDeLOFASYIdWQTC
y3wuAMBo/gkz1pNgqfGnq0TDF5vPb+y04GMtI4bQtzDSXIhUm5X8kBt4W2hFwHjQ
4bHQkZKDimowTw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:06 2025 by rpki-client