Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File:                     FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier:          zU2A87nyGpawK94/EycLuT9IzRO4lp7inmdZ7RHWpHg=
Subject key identifier:   56:32:14:2B:66:7F:65:C7:07:18:A0:C7:6A:92:C6:A1:02:31:F4:A7
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer:       /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial:       019A71EE84C5218C2481D164C5055781D82E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number:          1720
Signing time:             Tue 11 Nov 2025 08:00:48 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:48 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:48 +0000
Files and hashes:         1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: gKiOEGPSiEcnf7+kFAg/zc+2R2pWnHZT/yQ5sFu7eig=)
                          2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:84:c5:21:8c:24:81:d1:64:c5:05:57:81:d8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
        Validity
            Not Before: Nov 11 08:00:48 2025 GMT
            Not After : Nov 12 08:00:48 2025 GMT
        Subject: CN=5632142b667f65c70718a0c76a92c6a10231f4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:02:58:81:fe:ca:e6:4d:e2:60:ae:7d:73:
                    32:d7:9d:d9:18:ee:64:11:76:f7:7c:aa:4c:99:35:
                    bf:fb:e5:8f:42:56:32:1a:3a:6a:47:fe:44:5b:d0:
                    f2:00:67:aa:e2:0d:e0:2d:87:a2:69:ee:01:48:fe:
                    4b:8f:f0:24:de:70:b8:bd:15:18:42:0d:bc:5b:fb:
                    a6:a6:7b:7a:99:c8:1f:0d:1a:55:22:e7:1a:7c:a0:
                    fa:dd:84:55:aa:b2:3f:4d:91:c8:92:23:8a:d2:e1:
                    53:54:3c:ed:4b:10:84:8a:66:72:bd:ea:00:54:3c:
                    c6:d0:a4:95:44:db:9b:cf:ec:f4:c4:93:15:ff:ed:
                    e6:3e:2a:94:05:5f:53:7f:ab:85:43:c1:a1:3b:54:
                    cf:34:ce:61:d6:0b:a0:73:e6:51:34:69:2b:9f:4d:
                    dd:cb:49:87:15:09:28:37:08:80:da:61:73:e3:d7:
                    e8:3d:a3:d1:38:f2:22:b6:89:96:e4:9a:99:bf:ac:
                    52:d3:b7:d1:2c:a9:e6:8d:ee:a9:c2:26:e4:28:8b:
                    b1:df:7a:f3:e4:76:70:88:57:a1:e3:d4:cc:89:92:
                    24:54:e6:cb:f4:64:4a:0e:54:cd:11:8e:98:36:a1:
                    13:03:d7:50:8c:b6:07:18:bd:9b:9d:79:7b:9b:de:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:32:14:2B:66:7F:65:C7:07:18:A0:C7:6A:92:C6:A1:02:31:F4:A7
            X509v3 Authority Key Identifier:
                keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:86:7b:f7:3d:c8:77:ad:75:22:fc:da:29:e4:ed:8e:83:25:
         97:34:92:36:53:ba:c1:c2:e4:6a:48:ec:2d:97:b4:94:da:08:
         ad:10:79:70:56:47:74:e8:48:1b:c6:3b:ab:36:82:1f:65:31:
         fa:37:97:75:13:dc:ec:9d:96:1c:7f:86:3f:e5:27:18:05:fe:
         d9:de:db:c5:ce:7f:13:85:76:7f:3a:62:a9:88:1e:b5:7e:bc:
         d7:0b:cb:01:e0:60:2b:6a:39:8f:b6:8f:7b:97:7c:38:c2:19:
         d3:e0:b7:24:62:c9:11:42:3a:7d:8d:7f:3f:9e:00:67:25:e7:
         fc:5f:45:42:63:24:74:00:ed:a2:29:4e:cf:fd:c0:c1:1a:49:
         33:de:90:7d:01:af:1b:78:2c:2a:0c:e1:d8:4d:17:cb:43:43:
         c0:a5:a6:e9:be:76:81:ab:70:2b:20:17:2e:1f:ae:4c:4b:0b:
         21:8c:f3:d9:50:9b:52:1c:65:e9:b7:f4:3d:f3:64:6c:65:14:
         50:fe:c0:fa:e5:96:bf:29:90:8d:da:7d:60:aa:61:73:d4:87:
         5d:ae:93:e5:0e:1f:e8:50:6a:34:72:5d:63:69:7a:3e:54:58:
         b3:b1:80:5d:4e:cf:c5:63:da:c7:6f:4b:84:00:7b:27:8e:08:
         14:1d:ed:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7oTFIYwkgdFkxQVXgdguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWYxMmJjMjhhMDYwYjU5YTJiMzBhZjI3NDNjOWRjYmQ3
NDhlM2EwHhcNMjUxMTExMDgwMDQ4WhcNMjUxMTEyMDgwMDQ4WjAzMTEwLwYDVQQD
Eyg1NjMyMTQyYjY2N2Y2NWM3MDcxOGEwYzc2YTkyYzZhMTAyMzFmNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9gCWIH+yuZN4mCufXMy153ZGO5k
EXb3fKpMmTW/++WPQlYyGjpqR/5EW9DyAGeq4g3gLYeiae4BSP5Lj/Ak3nC4vRUY
Qg28W/umpnt6mcgfDRpVIucafKD63YRVqrI/TZHIkiOK0uFTVDztSxCEimZyveoA
VDzG0KSVRNubz+z0xJMV/+3mPiqUBV9Tf6uFQ8GhO1TPNM5h1gugc+ZRNGkrn03d
y0mHFQkoNwiA2mFz49foPaPROPIitomW5JqZv6xS07fRLKnmje6pwibkKIux33rz
5HZwiFeh49TMiZIkVObL9GRKDlTNEY6YNqETA9dQjLYHGL2bnXl7m96DeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYyFCtmf2XHBxigx2qSxqECMfSnMB8GA1UdIwQY
MBaAFBSvErwooGC1miswrydDydy9dI46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjct
NTRlZTZjNTEzZmY5LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjctNTRlZTZjNTEzZmY5
LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYZ79z3I
d611IvzaKeTtjoMllzSSNlO6wcLkakjsLZe0lNoIrRB5cFZHdOhIG8Y7qzaCH2Ux
+jeXdRPc7J2WHH+GP+UnGAX+2d7bxc5/E4V2fzpiqYgetX681wvLAeBgK2o5j7aP
e5d8OMIZ0+C3JGLJEUI6fY1/P54AZyXn/F9FQmMkdADtoilOz/3AwRpJM96QfQGv
G3gsKgzh2E0Xy0NDwKWm6b52gatwKyAXLh+uTEsLIYzz2VCbUhxl6bf0PfNkbGUU
UP7A+uWWvymQjdp9YKphc9SHXa6T5Q4f6FBqNHJdY2l6PlRYs7GAXU7PxWPax29L
hAB7J44IFB3tuA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:26 2025 by rpki-client