Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File:                     J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier:          yfyc1LM2KnjmmiraPeVQYHciy7Wi5KU/eq8ilmNPpcg=
Subject key identifier:   44:E8:8D:B9:CF:16:AB:E1:5E:DF:DF:85:1C:12:E4:22:F9:68:01:6E
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer:       /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial:       0199FFC750478157AEA282131EC38100B59A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number:          0C0C
Signing time:             Mon 20 Oct 2025 04:01:16 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:16 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:16 +0000
Files and hashes:         1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
                          2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: fYIlCO4znRmePjOAWxyNRR8xojKrXjzkMNvGh9I7WmY=)
                          3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:50:47:81:57:ae:a2:82:13:1e:c3:81:00:b5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
        Validity
            Not Before: Oct 20 04:01:16 2025 GMT
            Not After : Oct 21 04:01:16 2025 GMT
        Subject: CN=44e88db9cf16abe15edfdf851c12e422f968016e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2f:e1:15:6f:28:f2:4f:d5:99:7d:9b:5b:9a:
                    07:ed:e9:e9:48:fe:15:42:22:46:f9:b2:9d:a8:42:
                    b4:3b:39:bf:d7:00:0b:0d:6a:66:a1:ac:92:db:6f:
                    07:3a:94:a6:9c:da:29:17:ed:70:1c:c6:50:d6:35:
                    01:b7:51:4c:c9:36:a8:f2:c6:8d:75:d3:5e:f6:cd:
                    0d:a8:ed:c2:52:b1:ac:f8:15:96:d0:e1:ed:e3:ca:
                    28:fa:d0:92:93:f4:89:02:fe:a0:de:f6:3f:f7:d5:
                    c0:c9:a4:b3:8a:8c:9b:36:a5:33:c9:aa:8e:da:85:
                    0c:17:c6:85:81:2e:fa:a9:b9:34:68:fb:ec:e5:ca:
                    0f:6d:9f:28:7d:02:c7:40:f1:44:24:c5:8b:cb:2a:
                    a1:4c:ad:d2:58:d2:26:f4:54:6c:cc:ec:45:86:d5:
                    7b:d7:29:3a:b5:1d:07:b6:e9:a8:dc:77:84:b5:c5:
                    2f:f7:60:cd:4d:15:f8:9b:16:3c:a4:33:27:72:56:
                    54:c5:ed:5e:b4:6b:c6:69:df:e9:6f:8b:d5:e1:54:
                    ed:70:1b:b7:e7:cf:c5:7e:fa:2c:4e:05:a5:80:ab:
                    56:49:8f:a9:12:6b:c9:e5:65:d9:49:e2:2e:9c:29:
                    e5:30:81:9d:5e:76:29:3d:84:59:1a:6e:ce:d3:28:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E8:8D:B9:CF:16:AB:E1:5E:DF:DF:85:1C:12:E4:22:F9:68:01:6E
            X509v3 Authority Key Identifier:
                keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:31:cf:87:31:e8:17:0e:19:73:43:2b:be:db:7c:7a:4d:4f:
         a1:97:d4:30:be:20:9f:d4:98:e8:2a:e8:a2:bb:d9:1e:bd:2e:
         d9:e3:92:dd:8b:da:22:ce:a7:f2:fc:90:d4:44:fa:b0:24:b7:
         2a:86:ac:97:84:9e:b0:81:29:50:b9:50:62:c6:2e:85:8a:0b:
         3f:ff:3c:63:10:bd:07:df:57:e6:1f:67:7a:20:0b:3f:32:9f:
         5e:bc:4e:2e:c9:e8:00:80:97:cf:13:aa:5d:8a:2e:74:03:e2:
         9f:86:61:91:cf:a1:8c:14:18:04:fc:db:92:77:fc:5c:bb:98:
         c1:17:bf:2f:59:c0:45:d4:d8:69:6c:a7:51:cb:68:8b:78:0b:
         f6:ad:12:6a:d2:c3:4f:ec:a4:a1:0a:09:6e:a0:24:58:8e:1d:
         5d:f6:47:8d:19:7f:69:76:e5:21:10:7b:ab:b7:d9:ef:ee:c6:
         72:44:9e:f3:ca:f5:d5:98:11:c8:89:56:17:46:c0:80:8f:08:
         0b:29:d6:ed:6f:af:e8:82:da:9d:b4:c4:4e:c3:70:42:63:69:
         c2:52:13:aa:b8:d5:de:90:fc:5a:1d:83:26:02:9b:fe:9e:01:
         81:3c:72:e9:61:d9:62:19:bb:e5:51:0e:34:35:18:46:83:d4:
         b6:97:10:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x1BHgVeuooITHsOBALWaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDU0ZTRhNzg4ZDY5NjdhMmVlZjNhNjY5MjYyMjYyNmY1
NGVmYWQwHhcNMjUxMDIwMDQwMTE2WhcNMjUxMDIxMDQwMTE2WjAzMTEwLwYDVQQD
Eyg0NGU4OGRiOWNmMTZhYmUxNWVkZmRmODUxYzEyZTQyMmY5NjgwMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i/hFW8o8k/VmX2bW5oH7enpSP4V
QiJG+bKdqEK0Ozm/1wALDWpmoayS228HOpSmnNopF+1wHMZQ1jUBt1FMyTao8saN
ddNe9s0NqO3CUrGs+BWW0OHt48oo+tCSk/SJAv6g3vY/99XAyaSzioybNqUzyaqO
2oUMF8aFgS76qbk0aPvs5coPbZ8ofQLHQPFEJMWLyyqhTK3SWNIm9FRszOxFhtV7
1yk6tR0Htumo3HeEtcUv92DNTRX4mxY8pDMnclZUxe1etGvGad/pb4vV4VTtcBu3
58/FfvosTgWlgKtWSY+pEmvJ5WXZSeIunCnlMIGdXnYpPYRZGm7O0yjsRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETojbnPFqvhXt/fhRwS5CL5aAFuMB8GA1UdIwQY
MBaAFCfVTkp4jWlnou7zpmkmImJvVO+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEt
ZTk5YThkYzMwMjU1LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEtZTk5YThkYzMwMjU1
LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzHPhzHo
Fw4Zc0Mrvtt8ek1PoZfUML4gn9SY6CroorvZHr0u2eOS3YvaIs6n8vyQ1ET6sCS3
Koasl4SesIEpULlQYsYuhYoLP/88YxC9B99X5h9neiALPzKfXrxOLsnoAICXzxOq
XYoudAPin4Zhkc+hjBQYBPzbknf8XLuYwRe/L1nARdTYaWynUctoi3gL9q0SatLD
T+ykoQoJbqAkWI4dXfZHjRl/aXblIRB7q7fZ7+7GckSe88r11ZgRyIlWF0bAgI8I
CynW7W+v6ILanbTETsNwQmNpwlITqrjV3pD8Wh2DJgKb/p4BgTxy6WHZYhm75VEO
NDUYRoPUtpcQyQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:01 2025 by rpki-client