Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File:                     m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier:          z+rNwv+BJuz9kcCYUC1+3pNj6x81n8X3zxM8hV4V4hs=
Subject key identifier:   A3:84:DF:7C:00:74:0E:E6:FB:DD:64:7F:B8:47:0A:F1:27:D6:AF:5E
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer:       /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial:       0199FBEB37FC0302202E62A8533CE82046F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number:          0B26
Signing time:             Sun 19 Oct 2025 10:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:00 +0000
Files and hashes:         1: aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa (hash: tukb95Gwd6x2BRzhLsZA0PSUEck+o+zvt8A2/7nuQh4=)
                          2: aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa (hash: o539XDvH7v6Q1Bwgk0cJJENARzLE2fligJ+8v8cr/cU=)
                          3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: XorBNJ7jhoStpD1CRoFVmuwQSyHaRAR3eX/MIJm+FNM=)
                          4: tI9ka3nY65XI0hS6cPovdv7yr60.roa (hash: +06LGDfkS/BJNhqCcOcJbY1vvOjfeeWWAoEc0fhS6DY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:37:fc:03:02:20:2e:62:a8:53:3c:e8:20:46:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
        Validity
            Not Before: Oct 19 10:02:00 2025 GMT
            Not After : Oct 20 10:02:00 2025 GMT
        Subject: CN=a384df7c00740ee6fbdd647fb8470af127d6af5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:5c:c4:ef:68:d5:54:8c:da:1d:32:27:e7:
                    ad:6f:95:f6:19:fe:f0:c8:0e:07:34:da:2e:fd:63:
                    1f:3d:8a:b4:45:53:95:66:92:04:32:b4:06:93:63:
                    bc:39:9b:8d:a2:e7:e3:ac:ae:f3:a5:b9:e0:20:f8:
                    72:68:22:90:c7:2e:a3:f0:81:2a:d8:ed:db:ec:56:
                    e6:f3:89:ec:49:29:10:67:79:54:20:79:69:18:c3:
                    21:23:1a:ab:20:06:e1:94:58:89:d7:a1:68:ce:35:
                    22:8b:84:6b:9f:e4:a9:89:73:64:5d:33:f9:89:8c:
                    31:2a:c1:cc:2e:2c:c3:a6:c4:63:de:19:b7:ac:2c:
                    b4:e7:ec:c2:62:9b:05:d4:8d:65:0d:e4:d8:cc:c9:
                    e6:d2:89:80:9d:10:69:56:87:d9:5f:db:50:d5:bf:
                    e9:b7:02:19:35:5d:25:f1:26:e2:5f:8f:46:22:97:
                    42:da:d7:80:b4:94:f6:68:a6:f2:5e:21:5a:c8:dd:
                    04:46:c6:30:08:ed:25:8a:c8:14:e9:e1:05:ab:09:
                    23:52:fb:5a:43:cc:47:cc:16:e9:ba:5b:fc:b8:c2:
                    15:82:9f:48:da:74:52:b3:30:07:4a:8e:0f:3e:a5:
                    43:a9:4a:ba:9a:20:f8:d0:81:7c:1b:06:40:5b:26:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:84:DF:7C:00:74:0E:E6:FB:DD:64:7F:B8:47:0A:F1:27:D6:AF:5E
            X509v3 Authority Key Identifier:
                keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:de:86:fa:d3:d7:ad:d3:de:0c:0d:7b:34:40:6c:b5:0c:
         9e:37:6a:1b:40:33:7b:f0:77:c1:c4:17:b3:86:e3:9e:f1:d7:
         19:21:ea:76:a8:08:c8:d2:59:c6:c3:8f:12:b3:2f:97:0e:c4:
         49:8b:35:d4:27:fd:12:4a:c4:aa:83:f4:62:7c:0b:b5:be:3a:
         43:e0:78:4e:35:3c:26:3e:9f:ab:a3:2f:46:5a:77:87:82:a1:
         d2:e9:2c:3b:23:24:af:cd:e6:e4:70:64:fc:83:1a:f1:50:67:
         a8:5e:2e:fb:e4:f8:26:71:f4:de:19:e9:46:14:94:d8:75:01:
         2e:c8:2e:70:91:cf:be:73:17:5b:a0:99:4d:51:a3:f6:1f:7a:
         e9:96:1a:9e:70:1b:cb:92:86:dc:9a:56:b9:27:6f:10:ab:9c:
         4e:36:ad:68:aa:4e:1f:da:16:56:03:af:51:67:00:cf:92:5e:
         c8:ef:29:95:73:ea:b6:98:bd:55:67:54:e3:64:01:bb:12:77:
         91:8a:3c:6f:56:c3:c0:42:7b:b2:3d:e0:55:39:c3:fd:0b:36:
         79:97:26:60:8a:58:96:1a:c9:aa:cf:6d:a8:76:f0:be:d5:cc:
         55:f1:67:2e:b9:2e:f8:8e:48:4a:f2:eb:fe:63:f6:9d:8c:09:
         7b:7b:9b:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zf8AwIgLmKoUzzoIEbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODZiZDg4MmU0NzZlNDY5ODMxOGYzNzA3MTJmNzFjMmJm
NTBkZmMwHhcNMjUxMDE5MTAwMjAwWhcNMjUxMDIwMTAwMjAwWjAzMTEwLwYDVQQD
EyhhMzg0ZGY3YzAwNzQwZWU2ZmJkZDY0N2ZiODQ3MGFmMTI3ZDZhZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFhcxO9o1VSM2h0yJ+etb5X2Gf7w
yA4HNNou/WMfPYq0RVOVZpIEMrQGk2O8OZuNoufjrK7zpbngIPhyaCKQxy6j8IEq
2O3b7Fbm84nsSSkQZ3lUIHlpGMMhIxqrIAbhlFiJ16FozjUii4Rrn+SpiXNkXTP5
iYwxKsHMLizDpsRj3hm3rCy05+zCYpsF1I1lDeTYzMnm0omAnRBpVofZX9tQ1b/p
twIZNV0l8SbiX49GIpdC2teAtJT2aKbyXiFayN0ERsYwCO0lisgU6eEFqwkjUvta
Q8xHzBbpulv8uMIVgp9I2nRSszAHSo4PPqVDqUq6miD40IF8GwZAWyap5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOE33wAdA7m+91kf7hHCvEn1q9eMB8GA1UdIwQY
MBaAFJuGvYguR25GmDGPNwcS9xwr9Q38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQt
YmZjNzNkZDBiYmI2LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQtYmZjNzNkZDBiYmI2
LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdPehvrT
163T3gwNezRAbLUMnjdqG0Aze/B3wcQXs4bjnvHXGSHqdqgIyNJZxsOPErMvlw7E
SYs11Cf9EkrEqoP0YnwLtb46Q+B4TjU8Jj6fq6MvRlp3h4Kh0uksOyMkr83m5HBk
/IMa8VBnqF4u++T4JnH03hnpRhSU2HUBLsgucJHPvnMXW6CZTVGj9h966ZYannAb
y5KG3JpWuSdvEKucTjataKpOH9oWVgOvUWcAz5JeyO8plXPqtpi9VWdU42QBuxJ3
kYo8b1bDwEJ7sj3gVTnD/Qs2eZcmYIpYlhrJqs9tqHbwvtXMVfFnLrku+I5ISvLr
/mP2nYwJe3ubUg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:24 2025 by rpki-client