Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File:                     v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier:          Z6BcYGgjBVGsBFQlYyGdt7/2w3gD4Ig699+ZENXABjc=
Subject key identifier:   DE:FE:CA:6E:CD:7D:AA:C1:8A:EE:3F:2B:C8:FF:34:A6:BE:01:E1:7C
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer:       /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial:       0199FB45E24EB14DF45DA37263FECA82F1CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number:          0FD8
Signing time:             Sun 19 Oct 2025 07:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:25 +0000
Files and hashes:         1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=)
                          2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: c1fIGL2XQ2/noRVJ2Tq7uDFxIVYGTKe+yOd1Xxh0lMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:e2:4e:b1:4d:f4:5d:a3:72:63:fe:ca:82:f1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
        Validity
            Not Before: Oct 19 07:01:25 2025 GMT
            Not After : Oct 20 07:01:25 2025 GMT
        Subject: CN=defeca6ecd7daac18aee3f2bc8ff34a6be01e17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:09:24:1d:70:72:3e:87:4c:4e:2f:e0:36:
                    07:50:c7:cb:fc:b0:1f:e5:e4:02:e5:7c:58:57:42:
                    61:84:8a:7d:44:a1:cd:73:28:7b:b7:73:7f:76:91:
                    63:66:09:2f:cd:a6:0e:2e:c0:e1:be:69:e5:70:aa:
                    e2:13:68:14:3e:fd:56:31:96:dc:ee:17:da:a1:9e:
                    39:e2:c8:0e:da:69:9c:e6:ed:e7:54:89:c2:eb:7e:
                    8c:d2:71:8b:1a:4f:72:2d:15:f0:2c:a5:fa:1e:e2:
                    17:ea:14:06:19:cc:2d:cc:0c:bc:da:9a:7c:ec:e0:
                    d8:3c:b5:24:30:d8:4e:dd:85:20:22:c3:b1:66:37:
                    9a:eb:4c:91:a5:7e:38:ee:cb:fd:26:30:1e:e0:7c:
                    a0:39:b2:0e:77:e6:0b:94:8c:38:44:42:17:44:10:
                    6e:c2:51:bc:05:00:5c:20:65:e5:67:80:29:35:58:
                    70:d3:62:32:c0:f8:f4:d1:55:9a:46:0c:ca:ad:7e:
                    e0:4b:b7:fa:7f:de:c4:53:18:2f:e5:f0:ed:5c:62:
                    52:a0:3d:2f:41:6c:91:95:7e:fb:2c:48:84:d2:cb:
                    37:04:ab:c8:41:8e:cf:82:c5:8e:c9:87:bb:b1:c3:
                    24:e0:c1:83:7a:05:63:76:26:03:f1:fd:cc:7b:86:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FE:CA:6E:CD:7D:AA:C1:8A:EE:3F:2B:C8:FF:34:A6:BE:01:E1:7C
            X509v3 Authority Key Identifier:
                keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:93:eb:23:0f:7a:ba:b0:80:44:fd:4b:52:e3:45:18:eb:
         9f:9a:d4:86:c6:c6:e2:a8:73:16:4f:89:01:b0:df:c0:b6:3a:
         d9:d3:33:3c:ca:66:86:b8:ce:bd:b6:03:ff:81:77:0b:d3:0f:
         82:20:59:3b:7f:a7:d7:94:4e:19:77:5b:c1:d8:b2:b0:f5:07:
         58:75:00:b2:2d:ee:2b:db:36:a7:ff:ce:a5:3e:30:e0:8e:f4:
         13:f9:fe:e7:77:1a:91:35:db:fb:d0:37:85:25:62:da:90:53:
         51:f8:86:8e:85:74:6b:af:7f:56:c7:c0:fc:64:3e:33:44:01:
         a4:c1:35:58:10:fa:bd:53:97:59:28:30:05:48:0e:01:b7:cd:
         5a:dd:4d:2e:c0:ae:3a:a1:71:99:ab:87:6f:60:ac:7f:7b:e6:
         8f:0f:57:90:ce:14:4d:fc:6a:52:52:20:21:3a:67:bb:08:d2:
         be:0b:cf:bb:01:8d:92:fd:b8:a2:38:56:66:9c:e3:03:76:52:
         d5:63:5d:fe:e2:0f:bf:40:2f:cb:e0:c2:6f:51:43:96:f4:a3:
         dd:1c:8b:50:90:84:44:24:b7:e6:d8:1c:cc:82:db:53:f7:fa:
         dc:7f:03:bf:66:8d:2d:43:bd:8c:cb:cb:bc:00:2e:d6:8e:24:
         d6:49:6f:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7ReJOsU30XaNyY/7KgvHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDdiYmZjYzJiOGZhYjY2YTU4MWI4MjI3Y2EwYWM4MTdm
YTE0NmIwHhcNMjUxMDE5MDcwMTI1WhcNMjUxMDIwMDcwMTI1WjAzMTEwLwYDVQQD
EyhkZWZlY2E2ZWNkN2RhYWMxOGFlZTNmMmJjOGZmMzRhNmJlMDFlMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPIJJB1wcj6HTE4v4DYHUMfL/LAf
5eQC5XxYV0JhhIp9RKHNcyh7t3N/dpFjZgkvzaYOLsDhvmnlcKriE2gUPv1WMZbc
7hfaoZ454sgO2mmc5u3nVInC636M0nGLGk9yLRXwLKX6HuIX6hQGGcwtzAy82pp8
7ODYPLUkMNhO3YUgIsOxZjea60yRpX447sv9JjAe4HygObIOd+YLlIw4REIXRBBu
wlG8BQBcIGXlZ4ApNVhw02IywPj00VWaRgzKrX7gS7f6f97EUxgv5fDtXGJSoD0v
QWyRlX77LEiE0ss3BKvIQY7PgsWOyYe7scMk4MGDegVjdiYD8f3Me4bGjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7+ym7NfarBiu4/K8j/NKa+AeF8MB8GA1UdIwQY
MBaAFL/Xu/zCuPq2algbgifKCsgX+hRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjct
MzZhZWQ4N2UzMzg4LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjctMzZhZWQ4N2UzMzg4
LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPeT6yMP
erqwgET9S1LjRRjrn5rUhsbG4qhzFk+JAbDfwLY62dMzPMpmhrjOvbYD/4F3C9MP
giBZO3+n15ROGXdbwdiysPUHWHUAsi3uK9s2p//OpT4w4I70E/n+53cakTXb+9A3
hSVi2pBTUfiGjoV0a69/VsfA/GQ+M0QBpME1WBD6vVOXWSgwBUgOAbfNWt1NLsCu
OqFxmauHb2Csf3vmjw9XkM4UTfxqUlIgITpnuwjSvgvPuwGNkv24ojhWZpzjA3ZS
1WNd/uIPv0Avy+DCb1FDlvSj3RyLUJCERCS35tgczILbU/f63H8Dv2aNLUO9jMvL
vAAu1o4k1klvzg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:14 2025 by rpki-client