Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          cIJ9t3bdoBC1imCGUM09y61YCnAEj83t9vSgy2YjXwA=
Subject key identifier:   FB:11:9D:C5:85:F7:E7:2F:E7:3D:F5:79:9A:84:B1:A3:E2:2D:93:6F
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       0199FB461FD3B48BB7085EB55CFE0B246D92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          0E7B
Signing time:             Sun 19 Oct 2025 07:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:40 +0000
Files and hashes:         1: 2elU8M79ZokIDRQA4FCMvXhZ_30.roa (hash: xpy/QNiCAMomRGDsG3lcQqLW5mZVYEG99RtMqAQeBgw=)
                          2: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: s0p24mfAZbYiDA2lGOqO/3jatViq39PTeg6/HXMq97Y=)
                          3: aivWngKJz6YVhMe876fRwO2Pwak.roa (hash: QrxS5tWIMxcDOD99WB/oU0c4ZizRW8rYWP871u28/z4=)
                          4: kgsIk8ju0wKKr0nkwVgHsRJydGg.roa (hash: 22cjkPvdduHGA9XlrCi4AiJihfCCZjAqzu2Hbki4taU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 01:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:1f:d3:b4:8b:b7:08:5e:b5:5c:fe:0b:24:6d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Oct 19 07:01:40 2025 GMT
            Not After : Oct 20 07:01:40 2025 GMT
        Subject: CN=fb119dc585f7e72fe73df5799a84b1a3e22d936f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d1:ed:ff:61:17:e7:5f:30:c8:3b:53:ec:4a:
                    09:ea:86:fa:60:f1:35:fe:33:41:c9:22:65:d4:47:
                    01:75:fd:d0:80:30:8e:06:1b:a3:37:0b:19:3c:99:
                    a2:33:89:9e:29:c9:9e:b4:06:55:d6:66:37:82:5b:
                    5b:94:7e:a7:84:38:86:f0:99:0f:b2:55:f9:48:b2:
                    d4:ce:25:6d:9e:82:67:f3:6d:5c:55:67:2c:3d:59:
                    05:9b:72:03:c8:39:81:0b:f6:e3:da:4a:4a:30:d1:
                    73:f9:57:f6:8f:99:ed:da:83:0a:7f:c8:87:73:e2:
                    24:5e:2b:6f:e3:a7:87:d9:84:9d:5b:47:e1:d1:06:
                    da:68:68:1c:f7:45:41:b6:d5:0d:5a:50:b3:42:5f:
                    8a:8f:e7:2f:f0:1e:7a:96:53:51:a9:c4:72:00:14:
                    24:da:dd:c6:03:68:e3:95:54:79:f9:b8:9d:61:4a:
                    cb:5b:e5:db:9d:b5:6e:9b:e4:bd:c3:fc:4a:60:24:
                    df:48:2d:77:84:2b:c0:1b:48:44:3b:d4:8d:51:cc:
                    be:8c:16:ef:00:d1:0f:66:76:da:88:12:38:da:98:
                    1a:e7:48:63:3e:50:a6:1c:ec:5d:b7:69:72:fa:09:
                    cc:d5:4d:1e:a4:df:ff:99:39:e5:4b:14:9b:3b:34:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:11:9D:C5:85:F7:E7:2F:E7:3D:F5:79:9A:84:B1:A3:E2:2D:93:6F
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e4:db:14:a9:f7:77:80:d3:5d:36:ca:b6:8d:f0:5a:79:d6:
         ee:f8:78:fd:07:a7:03:da:f1:97:c5:80:30:d5:90:45:8c:b2:
         e3:73:4e:3f:7f:01:0a:7c:89:58:de:f7:4b:43:54:6f:05:77:
         55:0b:c8:70:ca:d2:6e:18:a0:ea:81:72:43:5f:a5:81:7e:11:
         a8:cd:93:10:4d:53:95:15:9e:ff:c7:9b:41:aa:3b:6c:b5:5d:
         f8:65:0c:a9:00:88:df:3a:6c:e4:9d:c3:69:42:d7:e5:07:4b:
         e3:9c:7a:34:af:b4:8f:53:06:fc:e6:cb:70:ff:07:4f:62:7b:
         9d:98:41:e5:3c:97:b4:96:45:2d:9f:9c:e4:f1:e0:d7:03:c4:
         ef:e9:d6:37:f9:05:6a:09:05:25:c3:89:f7:4f:7f:eb:d2:77:
         c1:63:1c:ac:ce:6e:ab:41:3a:23:41:b6:0c:a1:61:91:64:50:
         c5:8f:a1:10:ce:8c:a2:b2:2f:d8:7a:03:06:fe:a4:28:6f:71:
         67:9c:2c:d8:29:b5:e5:c1:47:c0:61:44:f6:8f:b5:b0:65:00:
         00:78:67:42:34:4a:37:c1:6c:79:57:f4:92:34:29:82:ee:83:
         54:cc:fa:2b:dc:c9:db:f7:e4:7f:64:1c:77:dc:8c:06:33:41:
         1a:dc:f8:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rh/TtIu3CF61XP4LJG2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZGRkNGM5ZGMyM2ZhYzM1NTc0ZmNlMmI0Mjk0Mzk4YWRk
ODUyMWMwHhcNMjUxMDE5MDcwMTQwWhcNMjUxMDIwMDcwMTQwWjAzMTEwLwYDVQQD
EyhmYjExOWRjNTg1ZjdlNzJmZTczZGY1Nzk5YTg0YjFhM2UyMmQ5MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotHt/2EX518wyDtT7EoJ6ob6YPE1
/jNBySJl1EcBdf3QgDCOBhujNwsZPJmiM4meKcmetAZV1mY3gltblH6nhDiG8JkP
slX5SLLUziVtnoJn821cVWcsPVkFm3IDyDmBC/bj2kpKMNFz+Vf2j5nt2oMKf8iH
c+IkXitv46eH2YSdW0fh0QbaaGgc90VBttUNWlCzQl+Kj+cv8B56llNRqcRyABQk
2t3GA2jjlVR5+bidYUrLW+XbnbVum+S9w/xKYCTfSC13hCvAG0hEO9SNUcy+jBbv
ANEPZnbaiBI42pga50hjPlCmHOxdt2ly+gnM1U0epN//mTnlSxSbOzR8vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsRncWF9+cv5z31eZqEsaPiLZNvMB8GA1UdIwQY
MBaAFBXd1MncI/rDVXT84rQpQ5it2FIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEt
Y2IzY2QwNDA0YWI1LzEvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zNTgyNTMtNDFlOC00YzEzLWJmYWEtY2IzY2QwNDA0YWI1
LzEvRmQzVXlkd2otc05WZFB6aXRDbERtSzNZVWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeTbFKn3
d4DTXTbKto3wWnnW7vh4/QenA9rxl8WAMNWQRYyy43NOP38BCnyJWN73S0NUbwV3
VQvIcMrSbhig6oFyQ1+lgX4RqM2TEE1TlRWe/8ebQao7bLVd+GUMqQCI3zps5J3D
aULX5QdL45x6NK+0j1MG/ObLcP8HT2J7nZhB5TyXtJZFLZ+c5PHg1wPE7+nWN/kF
agkFJcOJ909/69J3wWMcrM5uq0E6I0G2DKFhkWRQxY+hEM6MorIv2HoDBv6kKG9x
Z5ws2Cm15cFHwGFE9o+1sGUAAHhnQjRKN8FseVf0kjQpgu6DVMz6K9zJ2/fkf2Qc
d9yMBjNBGtz45g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 11:03:49 2025 by rpki-client