Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          T+UjKBcIBCo+MeDRUL9wmfSJZVWbiKdaa/7FrfPSKlg=
Subject key identifier:   E8:8A:F1:97:97:92:90:4F:50:52:84:8D:D6:31:E5:7B:03:1F:19:B0
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       019A00A2E573A11343A3A63D085247E8166A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          048F
Signing time:             Mon 20 Oct 2025 08:01:06 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:06 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:06 +0000
Files and hashes:         1: CDhfXiWmp-7DWGHRLkI1RXpNMUw.roa (hash: BdyrC92HV6fMOkqwdnwWMjP4WPGwGQmddKXw8S//IY4=)
                          2: GZLylFIePve8mzqKp098f5zxTUw.roa (hash: r5z9AFc8wnJRnVScCietCsc10ck15u9ra9fsksqINjA=)
                          3: QSxkF4rOw8CaQhbY1bgweRS2k84.roa (hash: /gVGhfkCO75vlxeNpsZvkhIuMR2YzpuGJXm7VvwUGkk=)
                          4: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (hash: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=)
                          5: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (hash: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=)
                          6: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: H+bvqvg7Q6K0UViW7sdyrCr9SO8jj931Lv1syva2PVc=)
                          7: vbkqK2A-5so6LdZx4ga1s9863ZI.roa (hash: 533TjtomKdjh/jTDvd0XbmB2CfJKlZIVlQUKaugW/Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a2:e5:73:a1:13:43:a3:a6:3d:08:52:47:e8:16:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Oct 20 08:01:06 2025 GMT
            Not After : Oct 21 08:01:06 2025 GMT
        Subject: CN=e88af1979792904f5052848dd631e57b031f19b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:24:85:bb:c5:65:de:8a:69:3b:ea:75:37:
                    9b:b7:61:dd:7e:b4:70:2b:0c:23:03:bc:21:18:fd:
                    02:b5:5f:14:b3:fb:0b:a5:00:d3:68:c7:50:25:35:
                    10:a6:3c:15:51:47:91:17:17:74:01:71:ec:00:bd:
                    03:3c:49:3a:28:d2:4f:66:4b:9c:46:af:09:4e:39:
                    48:fa:a3:34:2a:4f:ac:25:30:1a:a8:01:cb:c4:a6:
                    72:a9:59:5e:e7:4e:25:dc:83:0e:d7:6a:c9:e6:af:
                    91:2f:f8:ac:df:4a:97:fe:90:dc:4b:f6:2d:9a:ef:
                    a0:4d:a0:e7:74:7d:da:93:ac:47:78:39:d8:bc:df:
                    3f:68:89:8c:64:05:4e:18:c4:c8:c4:df:e7:37:3e:
                    18:a3:fe:45:a9:72:50:8c:3f:f0:c4:28:54:cd:96:
                    4d:52:92:98:18:a1:0b:e8:65:57:50:d5:8e:95:c4:
                    28:01:8b:83:d1:50:e6:7d:b7:a2:e0:a8:a5:eb:45:
                    fc:07:ec:51:c0:a7:4f:64:08:bf:e4:63:9e:fa:83:
                    27:10:dc:f2:e3:e4:0a:bc:1b:d6:e8:91:92:fe:3c:
                    37:5d:9b:9f:95:ba:5f:82:f7:8e:77:44:35:43:96:
                    06:be:7a:dd:56:63:83:a3:f9:58:98:69:78:38:6b:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8A:F1:97:97:92:90:4F:50:52:84:8D:D6:31:E5:7B:03:1F:19:B0
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f0:10:e0:84:67:db:8a:12:ff:20:68:0f:32:8a:d1:56:20:
         40:9a:5b:12:bc:ae:65:c5:e7:da:97:2f:ca:5b:93:9f:ab:36:
         a4:12:9b:7b:96:5c:f1:b4:d1:2a:6f:9e:c9:45:ef:66:37:02:
         27:92:0c:9e:9f:2f:a2:ca:a8:30:d9:02:2c:64:f5:ba:70:f8:
         53:17:a3:c6:64:f3:94:e7:9d:80:8e:3e:4a:1e:02:78:4a:7c:
         e1:e9:75:ad:f3:a6:c1:13:e8:d0:32:b2:d0:53:d1:52:4c:51:
         b4:db:6a:99:77:57:3a:25:be:07:a0:9e:ac:72:0f:66:85:bc:
         74:03:ce:4b:d1:f2:40:2f:70:6e:c8:dd:b2:46:21:c9:62:91:
         ce:3d:07:b2:cc:5d:2b:36:5a:21:d7:70:37:37:e5:27:a1:cb:
         da:42:88:76:a5:47:f1:96:d9:59:fd:dc:ad:da:f7:82:d6:6a:
         0e:69:8f:1b:d5:e9:96:f9:8a:58:50:f6:25:6f:3f:e6:23:e5:
         73:5b:f5:84:4a:0e:20:11:46:73:fc:73:84:cd:d1:d2:4a:3c:
         20:32:f2:19:0a:93:6d:e0:95:b5:ec:d7:dd:cd:75:c8:58:8a:
         78:f1:52:12:44:e3:44:b9:29:a7:38:a7:c4:15:b3:17:98:be:
         8e:73:3f:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAouVzoRNDo6Y9CFJH6BZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4
MmFjYmYwHhcNMjUxMDIwMDgwMTA2WhcNMjUxMDIxMDgwMTA2WjAzMTEwLwYDVQQD
EyhlODhhZjE5Nzk3OTI5MDRmNTA1Mjg0OGRkNjMxZTU3YjAzMWYxOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXkkhbvFZd6KaTvqdTebt2HdfrRw
KwwjA7whGP0CtV8Us/sLpQDTaMdQJTUQpjwVUUeRFxd0AXHsAL0DPEk6KNJPZkuc
Rq8JTjlI+qM0Kk+sJTAaqAHLxKZyqVle504l3IMO12rJ5q+RL/is30qX/pDcS/Yt
mu+gTaDndH3ak6xHeDnYvN8/aImMZAVOGMTIxN/nNz4Yo/5FqXJQjD/wxChUzZZN
UpKYGKEL6GVXUNWOlcQoAYuD0VDmfbei4Kil60X8B+xRwKdPZAi/5GOe+oMnENzy
4+QKvBvW6JGS/jw3XZuflbpfgveOd0Q1Q5YGvnrdVmODo/lYmGl4OGshoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiK8ZeXkpBPUFKEjdYx5XsDHxmwMB8GA1UdIwQY
MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt
YTE5Y2M4YTc2ZDA0LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0
LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvAQ4IRn
24oS/yBoDzKK0VYgQJpbEryuZcXn2pcvyluTn6s2pBKbe5Zc8bTRKm+eyUXvZjcC
J5IMnp8vosqoMNkCLGT1unD4UxejxmTzlOedgI4+Sh4CeEp84el1rfOmwRPo0DKy
0FPRUkxRtNtqmXdXOiW+B6CerHIPZoW8dAPOS9HyQC9wbsjdskYhyWKRzj0Hssxd
KzZaIddwNzflJ6HL2kKIdqVH8ZbZWf3crdr3gtZqDmmPG9XplvmKWFD2JW8/5iPl
c1v1hEoOIBFGc/xzhM3R0ko8IDLyGQqTbeCVtezX3c11yFiKePFSEkTjRLkppzin
xBWzF5i+jnM/8A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:25 2025 by rpki-client