Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File:                     n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier:          nnwl649LG/ffxO9q4/5V2B9GxukULQJ6LTgXlWR97OI=
Subject key identifier:   2E:E5:98:45:B8:1B:37:3D:17:7A:0B:5A:8C:D5:B3:90:5C:50:48:E4
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       019A0DEFE0598042ABA273560DEE4CBF2C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number:          11A6
Signing time:             Wed 22 Oct 2025 22:00:15 +0000
Manifest this update:     Wed 22 Oct 2025 22:00:15 +0000
Manifest next update:     Thu 23 Oct 2025 22:00:15 +0000
Files and hashes:         1: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=)
                          2: EdV2Oe0GLiqkn4fRwHvGS41mIRI.roa (hash: 6GlEIhQOXuUho2GfltUEy5vYiGJJuRaCTD7Fy/yAIGQ=)
                          3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=)
                          4: RiAjvvXs-bKn0uvcReZD6TgI_kE.roa (hash: v7x2MHjHDj3Do43R2jIjE1U3WWSCVGbO+STW7f8Hkic=)
                          5: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=)
                          6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: e/q8E496EVMn8Jh3jrJXdVdRfhBLtLKRtA4nQ5D9Mj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0d:ef:e0:59:80:42:ab:a2:73:56:0d:ee:4c:bf:2c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Oct 22 22:00:15 2025 GMT
            Not After : Oct 23 22:00:15 2025 GMT
        Subject: CN=2ee59845b81b373d177a0b5a8cd5b3905c5048e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:69:07:1f:9f:32:c1:ad:3c:77:70:aa:9c:
                    cf:08:d9:30:2f:3b:5b:04:fb:7c:e2:cd:fa:c2:33:
                    9c:56:7c:d3:9e:cb:0f:ba:75:15:43:52:43:f6:cc:
                    16:f8:65:60:76:b8:bf:17:6d:2b:9b:7e:a2:f9:f5:
                    09:46:c9:31:f5:8d:67:67:ee:4b:d8:f0:07:a8:0f:
                    5c:70:27:72:5c:41:e7:1f:ac:cd:65:bc:11:e3:9d:
                    28:9f:1f:1c:7a:81:26:0a:9f:30:26:82:d5:c0:30:
                    66:f3:8f:40:82:c2:0b:b4:cd:14:0c:b5:61:5d:db:
                    4e:78:75:13:7c:76:b6:96:34:71:36:47:df:ca:f8:
                    6c:ad:df:10:29:b2:80:27:63:c0:bf:dc:65:fd:65:
                    30:0f:88:72:2a:e5:9d:7e:c6:ad:1c:fd:55:2f:40:
                    e4:ff:8b:05:ce:75:6d:cc:52:87:aa:90:c2:af:ec:
                    15:45:d2:6b:b3:b7:30:29:fa:33:8e:7e:28:d2:f4:
                    e7:fb:45:83:30:e7:c4:d5:dc:fc:17:ce:e7:1a:83:
                    85:5f:e8:62:36:f4:1a:d4:fe:d6:f6:c5:ae:07:e0:
                    58:d9:e3:ba:87:1d:2a:09:10:c5:7a:bb:d3:7a:3b:
                    68:a2:99:fe:c4:d4:c7:73:89:5e:00:22:38:dc:02:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E5:98:45:B8:1B:37:3D:17:7A:0B:5A:8C:D5:B3:90:5C:50:48:E4
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c0:59:40:75:37:87:28:da:80:68:41:36:ff:f8:73:2a:80:
         ad:8e:d7:b1:0e:5d:fa:f1:37:f4:af:c6:e1:cd:65:ff:d6:c6:
         cb:5d:0a:79:a4:0d:b9:93:40:56:e0:a0:8a:e5:29:ec:94:5e:
         65:3a:44:2c:55:2a:2b:34:35:6c:a2:04:a3:27:b0:74:59:e8:
         12:8f:5c:24:91:4c:b5:2b:78:1f:91:ba:b8:f2:b5:4a:f0:70:
         88:e7:cd:86:99:95:54:35:0e:cf:4f:f5:b0:30:ae:cf:aa:1a:
         3f:3b:98:e9:68:ba:18:9e:3d:1d:13:42:cc:e8:56:ba:76:11:
         1d:c3:56:01:61:7f:6e:ea:4c:66:75:94:3e:67:bb:03:99:c9:
         c7:75:f0:81:42:66:98:74:4e:1c:15:9f:50:cc:42:5c:dd:59:
         4b:7f:37:90:75:7e:c6:d5:c6:16:54:e2:b4:23:39:7f:9f:8b:
         42:8e:07:9c:6d:8f:b0:26:2a:35:99:4f:f3:df:75:97:17:ff:
         0e:b7:73:ff:55:ab:7a:a3:11:bb:1b:e8:b6:0b:77:d9:61:82:
         a7:26:de:86:e3:06:b0:d1:cd:15:de:fd:17:87:8c:4f:61:14:
         f5:ed:bc:94:9d:ab:3d:f1:87:f3:33:d3:d1:7e:19:26:3f:4d:
         85:fb:b5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoN7+BZgEKronNWDe5MvyxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl
MTI5ODcwHhcNMjUxMDIyMjIwMDE1WhcNMjUxMDIzMjIwMDE1WjAzMTEwLwYDVQQD
EygyZWU1OTg0NWI4MWIzNzNkMTc3YTBiNWE4Y2Q1YjM5MDVjNTA0OGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQFpBx+fMsGtPHdwqpzPCNkwLztb
BPt84s36wjOcVnzTnssPunUVQ1JD9swW+GVgdri/F20rm36i+fUJRskx9Y1nZ+5L
2PAHqA9ccCdyXEHnH6zNZbwR450onx8ceoEmCp8wJoLVwDBm849AgsILtM0UDLVh
XdtOeHUTfHa2ljRxNkffyvhsrd8QKbKAJ2PAv9xl/WUwD4hyKuWdfsatHP1VL0Dk
/4sFznVtzFKHqpDCr+wVRdJrs7cwKfozjn4o0vTn+0WDMOfE1dz8F87nGoOFX+hi
NvQa1P7W9sWuB+BY2eO6hx0qCRDFervTejtoopn+xNTHc4leACI43AIn5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7lmEW4Gzc9F3oLWozVs5BcUEjkMB8GA1UdIwQY
MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt
NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk
LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMBZQHU3
hyjagGhBNv/4cyqArY7XsQ5d+vE39K/G4c1l/9bGy10KeaQNuZNAVuCgiuUp7JRe
ZTpELFUqKzQ1bKIEoyewdFnoEo9cJJFMtSt4H5G6uPK1SvBwiOfNhpmVVDUOz0/1
sDCuz6oaPzuY6Wi6GJ49HRNCzOhWunYRHcNWAWF/bupMZnWUPme7A5nJx3XwgUJm
mHROHBWfUMxCXN1ZS383kHV+xtXGFlTitCM5f5+LQo4HnG2PsCYqNZlP8991lxf/
Drdz/1WreqMRuxvotgt32WGCpybehuMGsNHNFd79F4eMT2EU9e28lJ2rPfGH8zPT
0X4ZJj9Nhfu1rQ==
-----END CERTIFICATE-----
Generated at Thu Oct 23 06:55:48 2025 by rpki-client