Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File:                     k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier:          7m8Uo4ANkOrfHz465xKtiWjsB1ART2mlrq1AMubIE4U=
Subject key identifier:   DB:60:CF:E5:A4:51:C7:E0:2F:0D:A1:27:72:33:CE:C0:7F:F7:E8:DE
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer:       /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial:       0199FCFDA9C38B98D260C31C33ACC4505CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number:          04EE
Signing time:             Sun 19 Oct 2025 15:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:46 +0000
Files and hashes:         1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=)
                          2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: uK07xjSZAPZVo5sjCA7pWqULkbExfGw2GI+27iCTGW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:a9:c3:8b:98:d2:60:c3:1c:33:ac:c4:50:5c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
        Validity
            Not Before: Oct 19 15:01:46 2025 GMT
            Not After : Oct 20 15:01:46 2025 GMT
        Subject: CN=db60cfe5a451c7e02f0da1277233cec07ff7e8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:a9:3b:67:80:93:89:fa:bb:0d:9f:b8:a1:
                    ff:f6:39:50:61:3a:8b:05:5f:c5:4d:73:e2:43:e3:
                    c6:40:33:a3:7b:14:00:84:2d:e6:8f:d5:8e:9f:81:
                    06:9a:03:cf:c2:b1:d9:5b:f0:19:eb:7f:b3:d7:90:
                    1d:cb:7e:64:4e:f6:d2:0f:59:ff:53:09:2a:90:70:
                    1d:03:31:f8:a4:49:dd:32:b9:c4:0b:78:bf:bb:44:
                    a2:ad:d1:c0:04:94:a2:99:f1:1e:90:45:27:88:64:
                    de:a0:6c:bc:18:1e:f2:4b:ca:62:15:d9:ca:b8:b7:
                    5b:da:a7:dd:82:3d:e9:05:2b:74:32:1f:4c:87:34:
                    d5:f6:e5:fa:3e:c9:7f:8f:3d:4b:d7:31:f2:94:df:
                    00:13:7f:5d:f4:8f:81:9b:7b:7f:61:4c:27:17:e5:
                    8e:09:5c:f2:b5:d1:1d:9b:5e:4d:db:46:d7:b7:bf:
                    10:83:bb:c2:eb:c2:4c:1e:21:c4:47:92:9e:6f:c9:
                    27:c5:16:42:59:78:f4:8a:81:dc:13:55:db:82:d0:
                    0c:b7:88:b9:5c:46:97:f7:07:f2:e8:ba:20:d2:33:
                    17:62:c0:a2:16:64:16:fd:3b:96:94:b5:0b:aa:d1:
                    a4:6e:e1:9d:39:d2:dc:3f:e7:9e:cb:47:64:f2:bd:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:60:CF:E5:A4:51:C7:E0:2F:0D:A1:27:72:33:CE:C0:7F:F7:E8:DE
            X509v3 Authority Key Identifier:
                keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:df:89:5c:dd:b6:a2:d0:14:d6:89:cd:2d:06:bf:bf:fa:
         ef:92:a4:7d:59:cc:4a:d2:b1:b1:86:0b:d6:e9:d0:2f:f3:dc:
         06:39:5b:14:90:c9:fd:1d:38:df:88:90:73:f0:da:7c:b4:5c:
         c3:19:85:72:09:43:c1:8d:dd:b9:b6:2f:38:f7:58:da:95:e7:
         de:dd:85:5b:6f:ea:95:19:66:98:4d:15:82:44:f1:ae:5d:00:
         48:f3:70:18:9a:72:2b:7f:8f:07:7e:5f:3d:45:16:9e:e0:18:
         a1:3f:0c:52:c3:43:98:b6:ef:8a:f8:eb:86:fb:6e:6c:fe:a9:
         37:24:b6:68:52:96:75:0e:ab:09:fe:0f:0a:17:eb:1a:35:70:
         45:a3:a2:bc:89:d9:d0:69:13:06:be:55:22:69:a5:5b:2e:61:
         65:c6:81:7e:12:bf:a7:8b:89:ce:45:c3:21:44:96:e5:b2:ab:
         d2:6d:c1:9a:28:2b:aa:ef:9e:e7:ef:86:a7:43:9a:07:58:bf:
         50:47:12:17:85:8b:de:ca:ed:d5:83:84:60:ab:6e:ba:2c:54:
         55:54:5c:38:29:3a:2a:f7:b5:4c:dc:9e:16:01:bd:8c:6e:50:
         c2:b7:b2:88:d9:d6:06:21:d7:dd:26:07:4f:f3:97:e3:e0:4b:
         c4:81:f0:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/anDi5jSYMMcM6zEUFzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZTlmNGJkZGY0YjJkZjExMGFjMzA4MzQ2ZjQ2ZDk0NTBm
MTNiM2EwHhcNMjUxMDE5MTUwMTQ2WhcNMjUxMDIwMTUwMTQ2WjAzMTEwLwYDVQQD
EyhkYjYwY2ZlNWE0NTFjN2UwMmYwZGExMjc3MjMzY2VjMDdmZjdlOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly+pO2eAk4n6uw2fuKH/9jlQYTqL
BV/FTXPiQ+PGQDOjexQAhC3mj9WOn4EGmgPPwrHZW/AZ63+z15Ady35kTvbSD1n/
UwkqkHAdAzH4pEndMrnEC3i/u0SirdHABJSimfEekEUniGTeoGy8GB7yS8piFdnK
uLdb2qfdgj3pBSt0Mh9MhzTV9uX6Psl/jz1L1zHylN8AE39d9I+Bm3t/YUwnF+WO
CVzytdEdm15N20bXt78Qg7vC68JMHiHER5Keb8knxRZCWXj0ioHcE1XbgtAMt4i5
XEaX9wfy6Log0jMXYsCiFmQW/TuWlLULqtGkbuGdOdLcP+eey0dk8r25fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtgz+WkUcfgLw2hJ3IzzsB/9+jeMB8GA1UdIwQY
MBaAFJPp9L3fSy3xEKwwg0b0bZRQ8Ts6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMmEyYjEtODY1Ny00Y2YyLWExYTgt
YzJiNjFmODZiMGFhLzEvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jMmEyYjEtODY1Ny00Y2YyLWExYTgtYzJiNjFmODZiMGFh
LzEvay1uMHZkOUxMZkVRckRDRFJ2UnRsRkR4T3pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicbfiVzd
tqLQFNaJzS0Gv7/675KkfVnMStKxsYYL1unQL/PcBjlbFJDJ/R0434iQc/DafLRc
wxmFcglDwY3dubYvOPdY2pXn3t2FW2/qlRlmmE0VgkTxrl0ASPNwGJpyK3+PB35f
PUUWnuAYoT8MUsNDmLbvivjrhvtubP6pNyS2aFKWdQ6rCf4PChfrGjVwRaOivInZ
0GkTBr5VImmlWy5hZcaBfhK/p4uJzkXDIUSW5bKr0m3Bmigrqu+e5++Gp0OaB1i/
UEcSF4WL3srt1YOEYKtuuixUVVRcOCk6Kve1TNyeFgG9jG5QwreyiNnWBiHX3SYH
T/OX4+BLxIHwnA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:07 2025 by rpki-client