Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File:                     Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier:          RztIDfM3z21C31DNbvYD3uM4CjoLo0OHhuFyhd9rYGk=
Subject key identifier:   63:2A:05:EC:51:E9:C9:E9:26:FF:C8:75:6F:F1:57:26:17:8B:61:4D
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer:       /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial:       0199FAD81928206CF5C46905031AA6D6C244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number:          0485
Signing time:             Sun 19 Oct 2025 05:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:30 +0000
Files and hashes:         1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
                          2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: ZRMqEh7Fssb9PNds3G9RQ2q4/aAWk/HxV0Ymuv9KOA8=)
                          3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:19:28:20:6c:f5:c4:69:05:03:1a:a6:d6:c2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
        Validity
            Not Before: Oct 19 05:01:30 2025 GMT
            Not After : Oct 20 05:01:30 2025 GMT
        Subject: CN=632a05ec51e9c9e926ffc8756ff15726178b614d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:0f:69:77:71:3e:18:d6:25:8a:a7:59:8c:
                    be:27:54:d5:6a:fc:0c:d5:9d:66:71:9c:2c:28:94:
                    92:41:3b:5f:68:d7:68:8a:9a:db:11:31:fb:f8:61:
                    ca:39:83:48:e0:58:3f:ed:9e:95:c9:95:a3:55:4d:
                    d6:de:d5:00:6c:8c:47:7d:63:83:19:49:2e:e8:4c:
                    b0:42:74:1d:52:8d:47:49:3b:4d:0b:02:89:e6:40:
                    08:98:97:dc:9e:38:dd:e7:28:d9:ed:9b:34:e6:63:
                    56:33:18:e7:d5:43:93:45:66:d9:14:4f:d5:cc:1b:
                    8a:e2:3e:2e:80:ee:26:75:b1:a6:fa:3b:15:99:4a:
                    21:6c:83:3d:06:92:55:ca:c6:e0:25:ab:92:68:ab:
                    3d:68:a2:d9:12:81:ec:4b:a1:28:f5:9c:c5:bf:d6:
                    57:48:ca:e2:61:31:bf:9c:40:e9:44:f5:b8:eb:a2:
                    27:25:02:42:84:e1:21:2c:17:3e:75:0e:9f:df:28:
                    99:97:0b:7e:60:f0:28:09:6c:67:6d:05:96:ba:97:
                    14:ba:c9:c4:c7:be:b6:31:44:74:f5:42:3e:86:4a:
                    ef:af:96:eb:43:8a:e3:a8:23:fb:20:67:cb:1d:16:
                    b1:82:cc:d1:9b:23:6a:80:f9:20:5e:fa:4e:26:66:
                    ac:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2A:05:EC:51:E9:C9:E9:26:FF:C8:75:6F:F1:57:26:17:8B:61:4D
            X509v3 Authority Key Identifier:
                keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:dc:fe:7a:34:a6:0e:16:b6:db:a9:a0:1a:b6:74:05:2f:
         24:48:36:22:f8:d8:59:ca:de:50:fb:b5:b5:47:fd:0d:b7:9f:
         2e:78:9b:41:5e:0a:ae:cb:e0:79:4e:55:01:cc:17:4f:c1:a9:
         68:85:32:ad:06:44:39:85:08:3c:0c:51:f5:dc:8b:de:51:f3:
         bf:5a:9e:b3:94:ae:43:5d:e6:f4:b0:88:dc:7c:59:bc:cd:03:
         c6:18:8a:47:1e:53:20:19:17:45:a8:dd:dc:28:5a:5b:43:59:
         0f:80:16:03:c4:f4:d8:a3:ef:55:14:e7:65:a4:41:20:90:a9:
         3f:fd:bc:a7:fb:c0:77:77:9c:23:37:02:c4:c2:f0:ec:8a:6d:
         4c:6a:90:ad:09:87:ea:02:d7:f6:0e:35:42:26:0b:77:95:d0:
         66:63:a9:ea:30:da:34:5a:42:a3:da:e1:31:22:36:ad:18:28:
         7f:cf:79:83:70:7c:8d:4f:df:b1:d4:aa:e9:1c:48:9c:0c:6e:
         20:3a:d5:71:e2:8e:41:55:1d:68:ca:7b:4d:c9:23:62:17:59:
         d8:1f:78:ce:36:9d:75:f8:8b:69:39:3e:8b:e5:85:35:6e:d3:
         f9:0e:d3:96:9b:03:35:83:ee:65:a3:85:59:2d:06:34:9f:df:
         6f:a4:54:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62BkoIGz1xGkFAxqm1sJEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMmQ5MWI0YWE5NmNjNTczMjU3NmQ0MjMzNWZkZGQwZTVk
NjI5NGYwHhcNMjUxMDE5MDUwMTMwWhcNMjUxMDIwMDUwMTMwWjAzMTEwLwYDVQQD
Eyg2MzJhMDVlYzUxZTljOWU5MjZmZmM4NzU2ZmYxNTcyNjE3OGI2MTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2EPaXdxPhjWJYqnWYy+J1TVavwM
1Z1mcZwsKJSSQTtfaNdoiprbETH7+GHKOYNI4Fg/7Z6VyZWjVU3W3tUAbIxHfWOD
GUku6EywQnQdUo1HSTtNCwKJ5kAImJfcnjjd5yjZ7Zs05mNWMxjn1UOTRWbZFE/V
zBuK4j4ugO4mdbGm+jsVmUohbIM9BpJVysbgJauSaKs9aKLZEoHsS6Eo9ZzFv9ZX
SMriYTG/nEDpRPW466InJQJChOEhLBc+dQ6f3yiZlwt+YPAoCWxnbQWWupcUusnE
x762MUR09UI+hkrvr5brQ4rjqCP7IGfLHRaxgszRmyNqgPkgXvpOJmasSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMqBexR6cnpJv/IdW/xVyYXi2FNMB8GA1UdIwQY
MBaAFDItkbSqlsxXMldtQjNf3dDl1ilPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YmQxMjItZDZhOS00YTQwLTg2MGIt
YjBlZmMwMWQ0ZjljLzEvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85YmQxMjItZDZhOS00YTQwLTg2MGItYjBlZmMwMWQ0Zjlj
LzEvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYzc/no0
pg4WttupoBq2dAUvJEg2IvjYWcreUPu1tUf9DbefLnibQV4KrsvgeU5VAcwXT8Gp
aIUyrQZEOYUIPAxR9dyL3lHzv1qes5SuQ13m9LCI3HxZvM0DxhiKRx5TIBkXRajd
3ChaW0NZD4AWA8T02KPvVRTnZaRBIJCpP/28p/vAd3ecIzcCxMLw7IptTGqQrQmH
6gLX9g41QiYLd5XQZmOp6jDaNFpCo9rhMSI2rRgof895g3B8jU/fsdSq6RxInAxu
IDrVceKOQVUdaMp7TckjYhdZ2B94zjaddfiLaTk+i+WFNW7T+Q7TlpsDNYPuZaOF
WS0GNJ/fb6RU7g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:34 2025 by rpki-client