Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          BiuDnwJWobsyvffqvnD+5uWT2Pi9YopfmDc+wYSqwiY=
Subject key identifier:   08:B4:9B:86:A1:D0:8B:B4:43:2F:55:4E:AD:0A:A5:C4:2E:CD:02:80
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       0199FC214546DD1A5E0EC409057ACF6450D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          1525
Signing time:             Sun 19 Oct 2025 11:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:02 +0000
Files and hashes:         1: 2vth8JCO_Wyd-5uRLg3PTDr-fFg.roa (hash: 9LUpst7vMTMHTa3hQ4R9T7kLec7gteJsYM3fKAc8ccE=)
                          2: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: q/tGWJpcfbKCE4vtrIA9DhXpW7m+/djHKojt4onFg/U=)
                          3: LNIMITYAbnJvMYE5J7ei8eACNa0.roa (hash: TvpR/eCPWYxWewvW/DN1BJNGxjnk3BZ6oYY2B4jFvf8=)
                          4: TLJiRRlOwtTTUz20TZKNV_ibyho.roa (hash: nl+gTrTAcZwj7M8TY8eq7Uo7CmcdFRJEseyL47O4t3o=)
                          5: vd7D-3mdClrE2pBAFW5I8DbmNHQ.roa (hash: XeWgnqjmy+ysQNojNpVwYywd9xnz6oTic5jOkSU+sTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:45:46:dd:1a:5e:0e:c4:09:05:7a:cf:64:50:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Oct 19 11:01:02 2025 GMT
            Not After : Oct 20 11:01:02 2025 GMT
        Subject: CN=08b49b86a1d08bb4432f554ead0aa5c42ecd0280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:f3:7c:0c:0a:8e:e1:b5:b9:ba:11:90:9e:
                    49:c4:dc:fc:89:aa:a8:f4:d6:40:a1:41:72:6c:f1:
                    0b:4f:43:bd:22:13:8b:02:e7:7a:9e:06:22:ab:7e:
                    e7:33:a7:ba:52:5b:aa:f5:b3:ab:5b:14:de:0a:34:
                    79:1b:5b:e6:19:26:1d:aa:fc:f3:5a:2d:b6:9f:9b:
                    ed:00:ac:f2:56:f9:81:9a:87:dd:bf:fc:c7:5d:20:
                    b2:1d:96:6b:5e:10:90:14:14:7f:05:43:9c:7c:df:
                    5b:f9:86:9e:45:1e:4f:e5:53:49:6d:3b:b1:9e:e0:
                    5c:34:e6:6a:82:d2:6b:5d:9e:79:1c:22:51:d5:96:
                    fe:e3:65:ef:fe:dd:b1:bb:f1:61:94:86:cb:40:3e:
                    d0:5f:91:7e:0e:cf:96:23:51:17:56:f1:55:2c:d3:
                    3e:bc:e2:52:f9:3c:47:03:34:60:41:3a:d5:3c:3f:
                    94:af:de:f5:52:ac:61:61:06:23:66:6d:0c:39:b5:
                    58:43:b9:e6:89:d2:3f:39:99:5b:a9:b6:c3:42:70:
                    ae:1b:46:eb:f0:1e:31:a4:bb:56:8d:a0:02:19:2a:
                    f9:ec:32:1f:c9:b7:81:b4:bb:ed:a8:01:48:88:c6:
                    e2:63:21:e7:03:87:89:f0:b1:45:7a:49:06:fb:2c:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B4:9B:86:A1:D0:8B:B4:43:2F:55:4E:AD:0A:A5:C4:2E:CD:02:80
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:00:bc:29:b7:ee:a2:ce:a0:48:29:49:cc:0c:23:ca:9f:6f:
         64:30:d8:52:a3:f1:80:5f:76:82:75:09:d8:88:28:76:2c:61:
         c2:ba:7f:b3:91:b3:2c:be:9e:86:f9:b9:3a:d1:58:9f:31:dd:
         23:1c:fd:e7:71:09:7a:51:9f:77:14:69:88:4b:66:82:15:de:
         7e:0f:9c:94:e2:50:ee:04:26:b5:be:b8:54:e3:bf:93:a5:37:
         4f:be:4c:90:2b:6b:fe:b2:41:55:30:29:8a:72:19:06:14:73:
         0c:3f:a6:23:e9:5c:5e:a5:54:8d:80:b3:dc:1a:6d:07:e2:e5:
         25:c9:d8:d7:a8:2f:d9:2b:f4:1a:a8:a3:78:0f:9e:2a:7f:8e:
         e0:88:e3:1e:be:26:7e:59:59:64:e4:fe:ef:c2:d0:a7:72:26:
         b0:43:c9:82:43:09:55:e8:46:e1:cb:b5:f3:85:4e:af:5f:e7:
         8f:b7:71:16:ad:87:37:eb:63:84:16:67:4e:93:e2:cc:96:82:
         99:5e:9e:7b:86:7f:7c:7d:41:c8:c5:e8:8f:5b:72:7c:36:f8:
         9b:dc:12:5e:c9:7a:3f:05:31:0e:d7:f0:7f:ff:d3:2b:a9:5f:
         0f:3e:1a:3b:9e:c5:c2:e6:97:93:0d:30:a9:95:fd:2a:bf:5a:
         71:8c:5f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUVG3RpeDsQJBXrPZFDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmZlODgyZDEzZTgwM2ZjMTk0MzczZWE0MGQ4YTVhOWU2
OWYzMDQwHhcNMjUxMDE5MTEwMTAyWhcNMjUxMDIwMTEwMTAyWjAzMTEwLwYDVQQD
EygwOGI0OWI4NmExZDA4YmI0NDMyZjU1NGVhZDBhYTVjNDJlY2QwMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupbzfAwKjuG1uboRkJ5JxNz8iaqo
9NZAoUFybPELT0O9IhOLAud6ngYiq37nM6e6Uluq9bOrWxTeCjR5G1vmGSYdqvzz
Wi22n5vtAKzyVvmBmofdv/zHXSCyHZZrXhCQFBR/BUOcfN9b+YaeRR5P5VNJbTux
nuBcNOZqgtJrXZ55HCJR1Zb+42Xv/t2xu/FhlIbLQD7QX5F+Ds+WI1EXVvFVLNM+
vOJS+TxHAzRgQTrVPD+Ur971UqxhYQYjZm0MObVYQ7nmidI/OZlbqbbDQnCuG0br
8B4xpLtWjaACGSr57DIfybeBtLvtqAFIiMbiYyHnA4eJ8LFFekkG+yxu9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAi0m4ah0Iu0Qy9VTq0KpcQuzQKAMB8GA1UdIwQY
MBaAFAG/6ILRPoA/wZQ3PqQNilqeafMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjIt
MmE1NTM5OWE4MGIwLzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NmMwOGEtZWU1OS00NzcxLWE4ZjItMmE1NTM5OWE4MGIw
LzEvQWJfb2d0RS1nRF9CbERjLXBBMktXcDVwOHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwC8Kbfu
os6gSClJzAwjyp9vZDDYUqPxgF92gnUJ2Igodixhwrp/s5GzLL6ehvm5OtFYnzHd
Ixz953EJelGfdxRpiEtmghXefg+clOJQ7gQmtb64VOO/k6U3T75MkCtr/rJBVTAp
inIZBhRzDD+mI+lcXqVUjYCz3BptB+LlJcnY16gv2Sv0GqijeA+eKn+O4IjjHr4m
fllZZOT+78LQp3ImsEPJgkMJVehG4cu184VOr1/nj7dxFq2HN+tjhBZnTpPizJaC
mV6ee4Z/fH1ByMXoj1tyfDb4m9wSXsl6PwUxDtfwf//TK6lfDz4aO57FwuaXkw0w
qZX9Kr9acYxfBw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:52 2025 by rpki-client