Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File:                     ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier:          FveGUyOMJh2Gbl/o2OVqKHOP1un1WkI4v47ye6TepDE=
Subject key identifier:   86:E5:DC:78:73:BF:13:D0:5B:BC:1B:2D:6C:B9:58:4F:D5:95:F9:7E
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer:       /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial:       0199FC8FBDCC1DB7139D737B62CB57859E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number:          16F6
Signing time:             Sun 19 Oct 2025 13:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:42 +0000
Files and hashes:         1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=)
                          2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=)
                          3: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: mmCzqPIvVCIbybU7nr2gVI7qApQw18Tjdant79Mt0X4=)
                          4: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=)
                          5: xZI_bvE6JftjTV0B3dxc_5kYW0g.roa (hash: AB1DpoviLX3AxgItOuLbSEQmOM0xIHXrb99sosPXy80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:bd:cc:1d:b7:13:9d:73:7b:62:cb:57:85:9e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
        Validity
            Not Before: Oct 19 13:01:42 2025 GMT
            Not After : Oct 20 13:01:42 2025 GMT
        Subject: CN=86e5dc7873bf13d05bbc1b2d6cb9584fd595f97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:b1:dd:8f:13:10:42:fc:24:55:ab:15:ed:
                    fc:07:76:97:f0:58:74:65:e1:21:a4:ef:2a:d3:42:
                    cb:e9:73:d5:68:bd:81:6e:6d:a3:6a:c8:28:7a:4e:
                    33:94:c4:3e:12:7d:4b:b8:1b:d3:38:c7:f2:b5:f4:
                    8c:f3:c5:66:18:9d:a5:4f:80:4b:79:37:6c:80:5d:
                    9f:9a:70:24:69:d7:af:11:fc:56:76:a0:ca:39:6e:
                    5d:8a:01:7a:33:02:88:fd:6f:c4:c1:1e:e8:7a:2b:
                    d2:74:aa:d2:92:c6:22:13:d2:98:5e:d2:e5:61:0b:
                    37:1b:81:0c:3f:c6:78:c1:49:fa:04:80:47:a3:54:
                    f5:99:45:de:9a:c1:3e:b5:b6:4c:30:78:25:fd:2f:
                    15:62:33:7c:84:c7:c2:70:3d:f5:0b:15:82:f3:4f:
                    c2:16:11:e1:3a:ea:ca:0b:b4:6b:1c:2b:60:6d:ef:
                    17:e1:77:96:b9:87:7c:05:48:b1:82:c7:85:41:88:
                    64:39:6e:cc:90:dc:d5:42:0e:16:8b:00:88:f1:12:
                    63:7d:71:cd:af:6e:02:26:0b:64:e2:f6:06:ee:b8:
                    f2:bb:65:c5:9e:7d:66:2e:b3:e9:c6:a7:e9:3d:e2:
                    1f:5a:64:f3:43:1d:e1:a2:3a:9d:61:96:a1:4d:7c:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E5:DC:78:73:BF:13:D0:5B:BC:1B:2D:6C:B9:58:4F:D5:95:F9:7E
            X509v3 Authority Key Identifier:
                keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e4:24:bc:b7:b3:6b:71:94:f5:81:c8:40:be:af:de:fd:25:
         76:69:01:de:17:2b:af:2c:58:1c:93:d6:4a:a4:fe:1a:0d:d6:
         f7:0a:a1:b9:cc:63:5d:cc:a0:29:40:11:9e:c1:ae:22:44:30:
         9a:3d:f9:be:b6:59:26:90:3d:ad:cd:75:5a:76:26:78:d3:e6:
         29:77:70:32:45:c7:7d:a3:d5:77:06:2c:23:71:23:3d:58:a7:
         a1:5e:7f:60:2d:19:c9:49:15:d9:6d:15:54:f5:58:b9:e4:03:
         72:dc:bc:db:93:00:16:e2:38:1e:b7:b7:3f:b7:56:e7:43:46:
         6f:e4:27:96:51:74:f2:06:65:b3:5a:63:d5:97:42:59:c7:f0:
         4e:a1:2e:74:ec:8e:14:69:ee:4b:a8:49:14:97:0e:a9:4a:08:
         ed:6a:79:9b:3f:d0:c6:b0:e5:e9:b6:13:fa:58:17:91:c8:b7:
         ae:ab:f5:d6:41:e3:ae:4c:58:b0:0a:58:e9:a7:75:48:fc:2d:
         ee:97:a2:ce:f9:e4:10:de:ae:66:77:60:b0:0b:09:92:46:86:
         0d:2c:cb:69:c5:70:50:9c:62:fb:01:cb:91:77:b3:c3:1a:f9:
         e3:95:32:88:c1:6a:02:f8:02:e6:38:fe:ac:fa:3b:08:b8:54:
         a8:53:5d:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j73MHbcTnXN7YstXhZ5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDE3MWY5M2NjMWNhNzE2ZmM4MDZlMzZhNTU4NTJjZGY0
ZjFjMWMwHhcNMjUxMDE5MTMwMTQyWhcNMjUxMDIwMTMwMTQyWjAzMTEwLwYDVQQD
Eyg4NmU1ZGM3ODczYmYxM2QwNWJiYzFiMmQ2Y2I5NTg0ZmQ1OTVmOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8ex3Y8TEEL8JFWrFe38B3aX8Fh0
ZeEhpO8q00LL6XPVaL2Bbm2jasgoek4zlMQ+En1LuBvTOMfytfSM88VmGJ2lT4BL
eTdsgF2fmnAkadevEfxWdqDKOW5digF6MwKI/W/EwR7oeivSdKrSksYiE9KYXtLl
YQs3G4EMP8Z4wUn6BIBHo1T1mUXemsE+tbZMMHgl/S8VYjN8hMfCcD31CxWC80/C
FhHhOurKC7RrHCtgbe8X4XeWuYd8BUixgseFQYhkOW7MkNzVQg4WiwCI8RJjfXHN
r24CJgtk4vYG7rjyu2XFnn1mLrPpxqfpPeIfWmTzQx3hojqdYZahTXyFowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbl3HhzvxPQW7wbLWy5WE/Vlfl+MB8GA1UdIwQY
MBaAFGTRcfk8wcpxb8gG42pVhSzfTxwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAt
YTQ2MzVkZjQ3ZDcwLzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAtYTQ2MzVkZjQ3ZDcw
LzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOQkvLez
a3GU9YHIQL6v3v0ldmkB3hcrryxYHJPWSqT+Gg3W9wqhucxjXcygKUARnsGuIkQw
mj35vrZZJpA9rc11WnYmeNPmKXdwMkXHfaPVdwYsI3EjPVinoV5/YC0ZyUkV2W0V
VPVYueQDcty825MAFuI4Hre3P7dW50NGb+QnllF08gZls1pj1ZdCWcfwTqEudOyO
FGnuS6hJFJcOqUoI7Wp5mz/QxrDl6bYT+lgXkci3rqv11kHjrkxYsApY6ad1SPwt
7peizvnkEN6uZndgsAsJkkaGDSzLacVwUJxi+wHLkXezwxr545UyiMFqAvgC5jj+
rPo7CLhUqFNdWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:44 2025 by rpki-client