Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File:                     dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier:          BMtFzEx4njJI9HBFjk99wR5RcShAQ/xgqKPNUQDw1ic=
Subject key identifier:   B3:AB:C9:7E:00:42:31:4E:BF:C7:8A:64:ED:BB:8A:1B:0A:D2:2C:F4
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer:       /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial:       0199FB7D0379FCB594BD04954773576AE0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number:          03FC
Signing time:             Sun 19 Oct 2025 08:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:38 +0000
Files and hashes:         1: 9pwkvVGUxZHUtwNlu3Y83Nxaz_8.roa (hash: wGfSTyvkpA3QffCb7EADqonJa2uikcNI7XZWM9G88mE=)
                          2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: pyNz4TqFTi7eZ0GMGBIye9KmiZsrDpGEMBpwJDIw6PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7d:03:79:fc:b5:94:bd:04:95:47:73:57:6a:e0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
        Validity
            Not Before: Oct 19 08:01:38 2025 GMT
            Not After : Oct 20 08:01:38 2025 GMT
        Subject: CN=b3abc97e0042314ebfc78a64edbb8a1b0ad22cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:15:dd:3d:32:4c:f3:74:16:c2:d9:94:c8:
                    70:c5:49:96:d0:96:58:8d:3f:74:82:4a:40:e4:4f:
                    a8:b7:37:9f:8f:6b:04:fe:2f:22:f0:d3:e2:88:88:
                    95:f7:fc:b0:33:03:20:7c:a2:22:92:21:8a:58:79:
                    2a:63:c0:d7:06:04:e5:99:08:c0:49:bb:eb:12:bf:
                    a6:8c:45:0d:9c:25:92:1d:9a:ef:d3:25:5d:89:70:
                    c2:e6:fa:04:9d:b2:1c:9f:04:03:ab:78:18:a7:88:
                    70:04:ee:2a:73:0f:f8:e5:e4:e6:1b:d5:af:f3:c1:
                    ad:4e:84:fb:30:af:41:7f:43:7f:dd:73:d1:d3:37:
                    d9:f6:1a:01:40:84:b8:f6:79:89:81:5a:1f:ec:83:
                    99:b5:b8:e6:ad:de:74:80:3c:c9:ba:2d:4b:d0:c4:
                    5d:d7:7c:d7:fa:ba:cf:1d:6b:3b:0e:61:7a:52:ef:
                    a7:6d:19:f0:63:a0:c3:71:cb:a9:b2:84:89:c9:99:
                    63:e5:d3:3f:83:fd:ea:cf:3b:63:62:39:8f:e1:e3:
                    6c:33:51:45:6f:15:93:5a:5d:55:37:a3:47:69:01:
                    e4:cf:e9:d3:88:c4:2a:8a:f7:3a:14:85:86:28:ad:
                    96:dd:a0:45:25:45:de:14:6f:3d:6d:e3:d4:f4:a7:
                    0e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AB:C9:7E:00:42:31:4E:BF:C7:8A:64:ED:BB:8A:1B:0A:D2:2C:F4
            X509v3 Authority Key Identifier:
                keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ea:29:58:18:bc:11:93:51:6e:60:77:bc:a4:6c:80:d4:b8:
         56:92:89:fc:47:ca:db:2c:17:c5:4d:4c:f2:6e:83:62:71:ac:
         8a:8d:63:04:0e:8e:c3:5f:46:9d:48:d4:2d:a0:c2:2d:4d:1b:
         19:cc:05:d2:dd:71:b3:e3:ce:5e:de:cf:59:13:d1:04:ad:a5:
         ad:dc:0a:43:31:18:06:90:07:fc:11:98:c6:4a:f1:27:aa:08:
         f6:0a:7c:83:79:df:e3:e0:07:f8:df:0e:18:4e:51:cf:da:c8:
         5f:94:39:6c:ac:83:15:c6:e2:00:0a:13:55:fa:2f:d5:d9:d1:
         3d:6f:21:08:77:c4:0f:93:c5:c4:0b:6f:f7:cc:40:4a:bb:ef:
         a3:9a:b8:41:13:ce:43:8e:68:26:43:ee:6b:92:12:12:3e:f3:
         ed:c7:29:40:88:c5:07:74:70:1f:da:cc:08:ab:cb:dd:1c:e2:
         b9:18:22:94:b5:55:b0:ef:9a:77:3e:8b:e7:fa:64:35:e8:c4:
         cd:3b:68:46:68:56:73:28:ed:63:9f:86:a0:c5:ef:97:9c:b4:
         a8:20:47:59:f8:be:b0:e9:f6:14:d5:59:91:38:b8:41:12:81:
         9f:b0:11:74:e4:0a:45:d3:3a:87:a3:58:d1:e8:73:79:06:18:
         3b:ab:69:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fQN5/LWUvQSVR3NXauC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjE4ZWYyYzRiNGY4MjQ5ZjlhNmVkYTBiMzNmMGU1N2Rh
OGE5ZGMwHhcNMjUxMDE5MDgwMTM4WhcNMjUxMDIwMDgwMTM4WjAzMTEwLwYDVQQD
EyhiM2FiYzk3ZTAwNDIzMTRlYmZjNzhhNjRlZGJiOGExYjBhZDIyY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAUV3T0yTPN0FsLZlMhwxUmW0JZY
jT90gkpA5E+otzefj2sE/i8i8NPiiIiV9/ywMwMgfKIikiGKWHkqY8DXBgTlmQjA
SbvrEr+mjEUNnCWSHZrv0yVdiXDC5voEnbIcnwQDq3gYp4hwBO4qcw/45eTmG9Wv
88GtToT7MK9Bf0N/3XPR0zfZ9hoBQIS49nmJgVof7IOZtbjmrd50gDzJui1L0MRd
13zX+rrPHWs7DmF6Uu+nbRnwY6DDccupsoSJyZlj5dM/g/3qzztjYjmP4eNsM1FF
bxWTWl1VN6NHaQHkz+nTiMQqivc6FIWGKK2W3aBFJUXeFG89bePU9KcOSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOryX4AQjFOv8eKZO27ihsK0iz0MB8GA1UdIwQY
MBaAFHWxjvLEtPgkn5pu2gsz8OV9qKncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUt
YjVlNTZlMGVjY2RlLzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUtYjVlNTZlMGVjY2Rl
LzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduopWBi8
EZNRbmB3vKRsgNS4VpKJ/EfK2ywXxU1M8m6DYnGsio1jBA6Ow19GnUjULaDCLU0b
GcwF0t1xs+POXt7PWRPRBK2lrdwKQzEYBpAH/BGYxkrxJ6oI9gp8g3nf4+AH+N8O
GE5Rz9rIX5Q5bKyDFcbiAAoTVfov1dnRPW8hCHfED5PFxAtv98xASrvvo5q4QRPO
Q45oJkPua5ISEj7z7ccpQIjFB3RwH9rMCKvL3RziuRgilLVVsO+adz6L5/pkNejE
zTtoRmhWcyjtY5+GoMXvl5y0qCBHWfi+sOn2FNVZkTi4QRKBn7ARdOQKRdM6h6NY
0ehzeQYYO6tpWA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:14 2025 by rpki-client