Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          13yYLHxQo+hNpVpNpiy6UMP3ssy55i9poONpslEjbiQ=
Subject key identifier:   F4:DE:2C:40:15:0E:0F:30:65:20:1A:8A:8A:04:18:5A:67:64:38:AA
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       0199FBB35A8E0DCE596B5FC5C2E30808FE8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          0E0E
Signing time:             Sun 19 Oct 2025 09:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 09:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 09:00:59 +0000
Files and hashes:         1: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=)
                          2: BOD3dcxTc2yY6D5t1Z9HjEwK_rU.roa (hash: GaifOabvqdT7+yzCu9A/2BB5BkajLIn0jWyTPBEgmVc=)
                          3: CWC-_a8HUEUvngVKFseL99HpvO8.roa (hash: bBD89zUEpX0u+izz9bm4cDvyJ5cJ+pVnrC9fz46p5LY=)
                          4: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: UrJcRuFi3rcqxNsYFpz1pnpsPMqdZPIfY1Rt+cxXjeE=)
                          5: JKGv7JswQLjbC19dE9o5h0g8JIk.roa (hash: lD7tHzbRlXXakgNULkZ7gsS4NThjWVn11kLT8eGgblU=)
                          6: ll0sY2OE3Zn46qY5JlGYvtLl7Xs.roa (hash: uICBvePHH26ZnEOUDyEGetCnDDAiofNJKq9IFV1xei0=)
                          7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:5a:8e:0d:ce:59:6b:5f:c5:c2:e3:08:08:fe:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Oct 19 09:00:59 2025 GMT
            Not After : Oct 20 09:00:59 2025 GMT
        Subject: CN=f4de2c40150e0f3065201a8a8a04185a676438aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:45:f1:d3:7d:a5:1a:7a:70:8e:9c:f3:01:b2:
                    bb:0f:9e:c7:62:9d:63:6e:93:53:0b:3d:74:43:85:
                    3c:6d:a4:ac:6a:a5:2b:48:45:2b:0e:1f:a7:83:17:
                    ed:33:6d:45:78:64:67:5d:d4:a3:18:38:fa:d0:5d:
                    5a:1f:75:c1:c7:44:d2:16:db:f6:98:b9:05:dc:4d:
                    20:d5:3c:92:0d:c2:62:de:12:fe:72:c7:e9:a3:24:
                    e5:32:be:ec:62:05:c0:48:5b:44:3f:fe:cb:4f:7e:
                    8e:37:37:93:d4:fa:38:06:58:7d:13:1a:e8:51:72:
                    60:17:79:c0:f5:af:9e:c6:47:5a:20:f2:07:ca:43:
                    a5:1e:f3:2d:39:c8:2d:e9:5e:b0:d6:c7:78:63:48:
                    2b:e0:49:c7:64:30:d2:3e:8c:84:65:51:2c:23:25:
                    37:9d:c6:41:e7:d1:1f:3f:09:28:02:e9:a3:df:f4:
                    09:a4:a3:08:83:3d:29:ea:63:e2:16:36:07:5d:c5:
                    52:de:f5:55:d0:17:f7:ef:3e:a9:2b:bf:86:48:b2:
                    ee:70:bd:1c:86:eb:ff:33:53:cf:19:90:e2:7e:86:
                    c3:de:41:8e:69:f9:5c:dc:63:2d:b8:d1:04:46:98:
                    0a:59:9a:7e:f5:f7:fb:74:9d:10:08:62:a9:23:0a:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DE:2C:40:15:0E:0F:30:65:20:1A:8A:8A:04:18:5A:67:64:38:AA
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:20:9f:5a:ce:e9:69:3d:8e:8d:88:0b:cf:80:96:da:80:57:
         ea:06:0c:24:87:1f:74:74:e8:03:de:b3:ec:18:62:ca:c6:aa:
         49:eb:01:d4:2b:57:f9:aa:31:76:de:63:f5:45:3b:34:ea:9d:
         65:3b:22:95:a5:b6:e0:54:a0:87:c3:f3:9e:27:ae:c8:f6:b3:
         ea:03:e8:e2:12:38:c0:af:1e:85:cc:d4:d1:3b:e8:fa:8c:de:
         1d:ca:fa:1e:6d:53:45:41:2e:9f:32:27:1d:b5:9f:59:43:29:
         ec:2c:69:b6:ce:61:b8:11:e1:4b:2a:06:90:23:bc:7c:a2:34:
         e3:14:21:2b:68:e0:7e:cb:5e:1d:61:2a:a1:19:3b:69:c4:c1:
         4c:0a:bb:ca:a0:79:ce:2a:81:87:b2:dd:0d:38:f0:ea:c6:34:
         c9:f7:75:90:98:81:0f:ba:7e:56:8c:73:9a:91:f1:7b:6e:8c:
         ea:08:af:a1:a6:61:19:d7:35:72:03:77:bf:6c:38:95:fe:b1:
         fc:d2:79:2d:cd:e1:ab:bd:f0:cf:a9:ed:0f:c4:9a:22:f2:98:
         f5:f7:9e:79:72:01:92:f8:22:1c:f7:9c:6b:94:40:dc:ab:5c:
         da:50:5b:a7:e5:3e:14:7c:fd:ca:bd:80:19:62:22:d3:68:04:
         4d:d4:0a:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s1qODc5Za1/FwuMICP6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3
NDIxYTYwHhcNMjUxMDE5MDkwMDU5WhcNMjUxMDIwMDkwMDU5WjAzMTEwLwYDVQQD
EyhmNGRlMmM0MDE1MGUwZjMwNjUyMDFhOGE4YTA0MTg1YTY3NjQzOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EXx032lGnpwjpzzAbK7D57HYp1j
bpNTCz10Q4U8baSsaqUrSEUrDh+ngxftM21FeGRnXdSjGDj60F1aH3XBx0TSFtv2
mLkF3E0g1TySDcJi3hL+csfpoyTlMr7sYgXASFtEP/7LT36ONzeT1Po4Blh9Exro
UXJgF3nA9a+exkdaIPIHykOlHvMtOcgt6V6w1sd4Y0gr4EnHZDDSPoyEZVEsIyU3
ncZB59EfPwkoAumj3/QJpKMIgz0p6mPiFjYHXcVS3vVV0Bf37z6pK7+GSLLucL0c
huv/M1PPGZDifobD3kGOaflc3GMtuNEERpgKWZp+9ff7dJ0QCGKpIwoL6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTeLEAVDg8wZSAaiooEGFpnZDiqMB8GA1UdIwQY
MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt
N2Q3MDM3NGQ3NmQyLzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy
LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSCfWs7p
aT2OjYgLz4CW2oBX6gYMJIcfdHToA96z7BhiysaqSesB1CtX+aoxdt5j9UU7NOqd
ZTsilaW24FSgh8PznieuyPaz6gPo4hI4wK8ehczU0Tvo+ozeHcr6Hm1TRUEunzIn
HbWfWUMp7Cxpts5huBHhSyoGkCO8fKI04xQhK2jgfsteHWEqoRk7acTBTAq7yqB5
ziqBh7LdDTjw6sY0yfd1kJiBD7p+VoxzmpHxe26M6givoaZhGdc1cgN3v2w4lf6x
/NJ5Lc3hq73wz6ntD8SaIvKY9feeeXIBkvgiHPeca5RA3Ktc2lBbp+U+FHz9yr2A
GWIi02gETdQKtA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:59 2025 by rpki-client