Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File:                     SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier:          vRBM87N9zh89fd9DTR4ZYLlZdST5wQJ7d2kDhbIg3lg=
Subject key identifier:   BA:D4:76:77:BB:76:3B:DD:15:7A:1C:E9:32:0B:02:67:B4:D2:1D:5E
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer:       /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial:       0199FEEC03C86A7B9FD088EADD9609CAB181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number:          0C42
Signing time:             Mon 20 Oct 2025 00:01:44 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:44 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:44 +0000
Files and hashes:         1: CUbuh0PM3yqW-CpytCXAWwYdQ7Q.roa (hash: j6MdXA11jocwq2zYd6v7F0+Oq8jAXnx5FNp5BWwzZDI=)
                          2: GlW6zMLj6EttAmWKHy7iwfBhWZE.roa (hash: ABJiNZOFb+afM+eJQ3jwpevUgACzN0c5eNSdwc405sQ=)
                          3: L80pK6ObZRSScU_AZIXdqKhbLPs.roa (hash: 18whVklVMP7ZtNSmFR8DrFdceRMOWEFp28FcU5z0yMo=)
                          4: OZiwI2QkuuLbAOllr-XJlZEbneE.roa (hash: mXAIyClIU1Z4vpuyMsGiBBynCYmQ4v0FodyB8WIXhxk=)
                          5: PIHm_2dfJM_TGdcbwqQtnYwPXVY.roa (hash: kVHy+yISe5vrX43T3bIZxXbjFq8ypYr+GWkGUxqbMqI=)
                          6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: 8kCVa2G/0zCKctGQtJWBGyqumL5pF3TXWlJqwwX/GFk=)
                          7: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=)
                          8: ea6BO6jv5qXL6KOn3swl4W7fpN8.roa (hash: qb7RyOCex8dd5d/iXyz9TFdFXAm9eOIl5Q9VrGqRffk=)
                          9: f83w0UBpgcJD0dA64iAq7lmXARw.roa (hash: f9wovq1EqzUTh58ehH2r8oD0Nk4JJQcPOCa3DaAqpnI=)
                          10: h-PNQcjWOScse8WjyOhQeSbv950.roa (hash: /sFDGAAGqPfiAFmlm5KuC6NUsSeC3ZuPzrCQYYwFUic=)
                          11: ish05UKX4fVrvzNMO61JWME5e60.roa (hash: fxTiebuae7o4USUXNJvSnTZr/R7II3bNdrJaYwaOaWw=)
                          12: mNSZJOUVeZicld4QAL_-bUUCGDI.roa (hash: nBD9zjll4ut7eXUVf0/WxLdu+1b2MWKBGI9qLKkr07w=)
                          13: qxsheS1XzS3dymYbKGRvC_3BiO4.roa (hash: VtweZ6shC74Bgwh1irW6gEbqeXbHeH8CL8orxJ3cqko=)
                          14: sejuuPdZzCrTGWMQL8q6fL6s1bI.roa (hash: Ijpq2YAMnAhyxDacqfun38Wp4QxYF9meZt2cnqXBEVs=)
                          15: z4bsjVbTnI81Y7pi92gQtwuMcMA.roa (hash: 6k5So3y2nhT6Ksfiwx9bk8ELUKmJlBzOynlhbHwQFMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:ec:03:c8:6a:7b:9f:d0:88:ea:dd:96:09:ca:b1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
        Validity
            Not Before: Oct 20 00:01:44 2025 GMT
            Not After : Oct 21 00:01:44 2025 GMT
        Subject: CN=bad47677bb763bdd157a1ce9320b0267b4d21d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:3f:d7:a9:19:6c:90:b5:d9:6b:5e:c4:9c:
                    20:67:bf:7b:8b:f0:8a:7e:e0:d8:2d:0a:4f:db:8d:
                    61:15:19:62:94:71:c0:41:f1:06:f8:84:86:89:33:
                    3e:00:da:c1:52:6d:5a:74:c4:a9:0e:14:4a:09:5b:
                    2c:79:40:82:82:2b:7f:e8:32:59:6a:91:30:ef:35:
                    eb:69:0d:f8:3c:a0:c3:50:35:a4:74:bf:26:82:5d:
                    a8:0b:22:da:5c:8f:73:85:fe:7e:7f:22:6f:04:76:
                    5a:a2:7e:26:f1:7c:2a:a3:4e:0a:d7:a3:fc:68:59:
                    71:5f:29:01:79:8f:1a:ed:57:0a:1c:0f:91:cf:3b:
                    e7:59:a6:f1:c6:c8:d1:36:fe:aa:fc:2c:87:30:f9:
                    2e:d7:3c:1b:d3:85:6c:38:f2:f3:3b:e3:5e:e5:a4:
                    9f:ce:47:74:ed:e9:f4:50:d2:fb:48:79:ab:1a:a7:
                    e6:27:f1:a9:84:da:20:b0:3d:0e:6d:6a:8d:11:4e:
                    e7:f7:11:56:e6:f8:c1:42:77:0c:ab:eb:56:82:58:
                    98:c5:2a:a1:e2:fa:8e:c2:23:bd:a4:6b:d7:84:cd:
                    95:4f:1e:37:0e:68:df:99:85:85:08:99:e1:bd:68:
                    fc:02:c5:db:5e:5c:60:7d:f7:a6:bc:47:d3:57:84:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D4:76:77:BB:76:3B:DD:15:7A:1C:E9:32:0B:02:67:B4:D2:1D:5E
            X509v3 Authority Key Identifier:
                keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2d:3c:78:6e:38:e1:d5:f6:fa:03:a5:13:24:f1:fa:29:a1:
         f4:ce:4a:a2:a6:ee:f9:ca:a0:65:9e:83:e9:11:5e:c8:fc:75:
         7e:23:af:c7:b9:cc:44:41:98:d5:f1:e4:44:5e:b1:91:eb:ac:
         01:36:a3:d9:ea:63:79:fb:f5:29:0a:57:34:43:86:4b:e1:57:
         3a:60:55:bd:1e:a3:e2:99:1f:83:6b:ad:42:7a:6c:44:dd:99:
         ce:35:5e:7e:1e:62:3a:b7:a4:a3:ae:d3:4c:de:2c:34:1b:75:
         e5:9f:1f:6e:85:6d:ea:c8:fd:7c:55:b2:7c:b3:34:38:ce:21:
         f7:be:b4:81:30:52:eb:b4:75:97:08:be:5a:9e:de:b4:2e:39:
         fe:7d:cd:a6:53:04:57:2c:9b:3f:43:34:53:b5:9b:c6:b1:68:
         18:66:ed:54:8e:15:e5:10:8a:0e:01:c9:13:36:f0:a7:06:50:
         28:eb:f9:a1:7c:52:db:e6:5c:07:99:ad:c7:d6:60:eb:27:63:
         c9:d3:a7:07:08:b2:97:31:31:84:86:d4:f6:05:00:d3:be:9a:
         4a:c9:8b:df:a0:8f:d0:6c:43:2d:5e:ef:65:d0:5c:44:a4:78:
         02:0a:c9:b1:3e:dc:b9:b9:f6:ab:8e:67:2d:9c:a2:c1:80:03:
         c1:f9:64:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+7APIanuf0Ijq3ZYJyrGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjUxMDIwMDAwMTQ0WhcNMjUxMDIxMDAwMTQ0WjAzMTEwLwYDVQQD
EyhiYWQ0NzY3N2JiNzYzYmRkMTU3YTFjZTkzMjBiMDI2N2I0ZDIxZDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQw/16kZbJC12WtexJwgZ797i/CK
fuDYLQpP241hFRlilHHAQfEG+ISGiTM+ANrBUm1adMSpDhRKCVsseUCCgit/6DJZ
apEw7zXraQ34PKDDUDWkdL8mgl2oCyLaXI9zhf5+fyJvBHZaon4m8Xwqo04K16P8
aFlxXykBeY8a7VcKHA+RzzvnWabxxsjRNv6q/CyHMPku1zwb04VsOPLzO+Ne5aSf
zkd07en0UNL7SHmrGqfmJ/GphNogsD0ObWqNEU7n9xFW5vjBQncMq+tWgliYxSqh
4vqOwiO9pGvXhM2VTx43DmjfmYWFCJnhvWj8AsXbXlxgffemvEfTV4QITQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrUdne7djvdFXoc6TILAme00h1eMB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYS08eG44
4dX2+gOlEyTx+imh9M5Koqbu+cqgZZ6D6RFeyPx1fiOvx7nMREGY1fHkRF6xkeus
ATaj2epjefv1KQpXNEOGS+FXOmBVvR6j4pkfg2utQnpsRN2ZzjVefh5iOreko67T
TN4sNBt15Z8fboVt6sj9fFWyfLM0OM4h9760gTBS67R1lwi+Wp7etC45/n3NplME
VyybP0M0U7WbxrFoGGbtVI4V5RCKDgHJEzbwpwZQKOv5oXxS2+ZcB5mtx9Zg6ydj
ydOnBwiylzExhIbU9gUA076aSsmL36CP0GxDLV7vZdBcRKR4AgrJsT7cubn2q45n
LZyiwYADwflk0A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:52 2025 by rpki-client