Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File:                     1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier:          XjRJJadhWTNHbDFlisl0usij5rPSwqIlLlgSZ/2HtBI=
Subject key identifier:   BE:00:16:B3:88:A6:61:63:FC:94:6C:CA:DD:A1:6C:CD:D2:F2:50:92
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer:       /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial:       019A52D20D5BECCE75172B8EAC8D4F57477B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number:          15F6
Signing time:             Wed 05 Nov 2025 07:01:28 +0000
Manifest this update:     Wed 05 Nov 2025 07:01:28 +0000
Manifest next update:     Thu 06 Nov 2025 07:01:28 +0000
Files and hashes:         1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: 1k4Itco6y+DMr1tbaTOzC31j95+0wFJ9fEhUJYk1cFM=)
                          2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d2:0d:5b:ec:ce:75:17:2b:8e:ac:8d:4f:57:47:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
        Validity
            Not Before: Nov  5 07:01:28 2025 GMT
            Not After : Nov  6 07:01:28 2025 GMT
        Subject: CN=be0016b388a66163fc946ccadda16ccdd2f25092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:9c:68:ac:d1:78:30:e3:e0:87:56:30:48:
                    0b:6f:8d:be:dd:c3:43:e3:c6:76:a4:37:7f:47:31:
                    36:22:96:29:64:89:11:de:ea:90:af:46:ce:8b:c4:
                    d9:5c:ca:63:56:a6:3d:ec:86:9c:81:cc:7b:60:65:
                    0b:7f:42:f0:42:01:e8:9c:a8:f9:51:d8:32:74:61:
                    51:f7:4d:53:04:64:28:3e:3e:1a:bb:27:bd:98:72:
                    29:57:af:5e:08:46:8f:f8:9e:15:9e:cd:48:2a:25:
                    12:87:99:5c:59:6f:eb:d8:77:4e:d6:1c:05:44:43:
                    05:58:0c:e2:c7:9e:cf:88:0f:b9:d9:da:3f:cc:51:
                    95:9b:09:83:41:be:a7:94:50:c4:a3:bd:c8:71:ef:
                    7f:65:dd:b2:6c:5e:a6:cd:04:cd:10:73:0a:96:b3:
                    2c:4b:68:b8:80:2a:ba:dd:be:e3:91:5c:d2:af:fc:
                    d5:04:53:fb:8a:07:a5:2f:77:71:23:32:57:5e:ad:
                    1a:b4:3d:9b:07:d9:8f:37:c9:b1:e8:e8:5b:2c:3f:
                    cd:77:1e:13:52:38:2b:94:af:03:b1:08:9a:bf:e5:
                    8e:73:81:e2:49:4c:44:4a:75:f9:e6:e6:de:ef:49:
                    b5:15:1e:62:ac:95:40:1f:06:6e:5a:67:54:57:20:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:00:16:B3:88:A6:61:63:FC:94:6C:CA:DD:A1:6C:CD:D2:F2:50:92
            X509v3 Authority Key Identifier:
                keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:0b:99:dd:fd:63:01:a9:2b:09:bb:91:37:d4:7d:bf:79:
         91:8e:98:4b:14:a2:61:a0:bf:33:11:7f:9b:45:9c:1b:73:58:
         fa:37:a8:e9:1e:ec:f1:5d:4b:46:68:1b:28:6b:8b:92:9d:ec:
         38:e1:15:59:c6:53:0a:67:63:b0:8f:aa:98:e6:ba:11:6c:e1:
         2d:c7:82:e0:18:23:96:49:8b:89:fd:b9:08:29:2d:39:40:1d:
         58:47:79:d9:7f:30:d6:09:5a:4c:18:54:25:78:ed:ed:cd:45:
         37:e1:a8:79:84:16:6c:6d:7a:be:7c:3d:35:f1:43:03:40:36:
         db:43:3e:a2:cf:6f:67:ec:e1:b4:72:68:9d:ff:75:c0:99:b7:
         42:f0:7e:1c:c1:e9:06:96:3d:29:2f:34:dc:f1:72:76:3c:c2:
         15:90:bf:7f:4d:a4:64:72:3c:48:81:89:78:ca:c9:ac:53:db:
         f7:38:32:b1:3b:7f:7c:a7:a0:83:e4:53:9f:0d:60:d6:c0:3e:
         4a:37:81:19:54:98:4f:34:ad:8f:6d:3b:d9:ea:0d:b4:9c:73:
         88:10:91:b5:51:3e:fd:52:d7:bd:f2:11:de:e4:57:24:b9:c6:
         7c:fb:b1:fb:38:e5:db:ff:eb:f1:fc:1b:a4:cf:9a:7c:15:ed:
         d2:3f:23:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0g1b7M51FyuOrI1PV0d7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjBmNGJhYzVmOWE1MDIyZmMyZGNiYzRhM2RiNGNjNmIx
MTY2NDQwHhcNMjUxMTA1MDcwMTI4WhcNMjUxMTA2MDcwMTI4WjAzMTEwLwYDVQQD
EyhiZTAwMTZiMzg4YTY2MTYzZmM5NDZjY2FkZGExNmNjZGQyZjI1MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUycaKzReDDj4IdWMEgLb42+3cND
48Z2pDd/RzE2IpYpZIkR3uqQr0bOi8TZXMpjVqY97Iacgcx7YGULf0LwQgHonKj5
UdgydGFR901TBGQoPj4auye9mHIpV69eCEaP+J4Vns1IKiUSh5lcWW/r2HdO1hwF
REMFWAzix57PiA+52do/zFGVmwmDQb6nlFDEo73Ice9/Zd2ybF6mzQTNEHMKlrMs
S2i4gCq63b7jkVzSr/zVBFP7igelL3dxIzJXXq0atD2bB9mPN8mx6OhbLD/Ndx4T
UjgrlK8DsQiav+WOc4HiSUxESnX55ube70m1FR5irJVAHwZuWmdUVyAUXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4AFrOIpmFj/JRsyt2hbM3S8lCSMB8GA1UdIwQY
MBaAFNXw9LrF+aUCL8LcvEo9tMxrEWZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAt
OTkyNTQxZmRlYmVhLzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAtOTkyNTQxZmRlYmVh
LzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuQLmd39
YwGpKwm7kTfUfb95kY6YSxSiYaC/MxF/m0WcG3NY+jeo6R7s8V1LRmgbKGuLkp3s
OOEVWcZTCmdjsI+qmOa6EWzhLceC4BgjlkmLif25CCktOUAdWEd52X8w1glaTBhU
JXjt7c1FN+GoeYQWbG16vnw9NfFDA0A220M+os9vZ+zhtHJonf91wJm3QvB+HMHp
BpY9KS803PFydjzCFZC/f02kZHI8SIGJeMrJrFPb9zgysTt/fKegg+RTnw1g1sA+
SjeBGVSYTzStj2072eoNtJxziBCRtVE+/VLXvfIR3uRXJLnGfPux+zjl2//r8fwb
pM+afBXt0j8jiQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:24:33 2025 by rpki-client