Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          OZpslICRyk/p00B1UWytRIjgU9oQP+ORVQaYCu3+k1M=
Subject key identifier:   0C:50:6E:20:96:4C:5E:DF:8E:4A:5C:18:A0:16:D5:1B:97:2E:0B:25
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       019A0CDD3E54D66D7C329D01C75EA70AEABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          1120
Signing time:             Wed 22 Oct 2025 17:00:17 +0000
Manifest this update:     Wed 22 Oct 2025 17:00:17 +0000
Manifest next update:     Thu 23 Oct 2025 17:00:17 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: nT8IGOUfuu9OFHwbiQGrYHxcMa7bFI/tM0y7D4Jrmfw=)
                          2: yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa (hash: B4pB1U7bD/UVzN0Npz90KrUX1VNbCaaMzhCxilCVAfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0c:dd:3e:54:d6:6d:7c:32:9d:01:c7:5e:a7:0a:ea:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Oct 22 17:00:17 2025 GMT
            Not After : Oct 23 17:00:17 2025 GMT
        Subject: CN=0c506e20964c5edf8e4a5c18a016d51b972e0b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:74:ab:6c:6a:1b:a9:c6:ef:6c:99:fe:ca:ec:
                    19:d4:66:2e:7c:82:1d:7b:52:83:69:17:07:5c:19:
                    db:e9:15:5a:0a:13:d4:97:0c:60:fe:5f:67:12:b4:
                    8e:0f:9c:90:ff:19:f5:c2:1d:c2:06:cb:fd:06:9e:
                    12:21:50:68:c1:82:69:e1:95:45:f4:42:88:5d:59:
                    de:cc:ff:97:80:5e:bd:15:aa:e5:d9:f6:2a:0b:c5:
                    8a:e2:ca:c9:f9:a7:79:19:db:0e:b3:fa:00:ee:10:
                    f0:c8:64:1f:4b:7c:0e:fa:aa:bd:0c:b0:18:96:ab:
                    9c:8f:2a:dc:aa:58:62:5c:fa:93:0d:f1:87:0a:22:
                    4f:88:81:51:56:9f:0f:46:03:92:02:e4:24:2f:f9:
                    30:21:35:fd:d2:03:89:a3:ef:42:0c:3b:de:7d:34:
                    19:df:7b:07:52:01:c2:58:81:0f:e7:82:ba:54:26:
                    a8:a7:e7:35:db:6e:32:0e:e0:46:ad:79:57:10:aa:
                    6f:75:37:af:96:34:89:32:1d:0c:57:7f:ea:a6:75:
                    51:1b:0f:ca:e8:da:52:5d:30:1e:e4:57:9a:d8:07:
                    37:68:ca:62:98:91:74:31:1f:dd:03:3c:77:93:f6:
                    66:88:89:14:04:16:3a:5c:d8:e5:0a:76:af:6d:2b:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:50:6E:20:96:4C:5E:DF:8E:4A:5C:18:A0:16:D5:1B:97:2E:0B:25
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:58:3b:3c:48:4c:d4:83:5e:e0:7c:a6:29:6c:ac:ad:f9:84:
         23:9b:78:aa:82:dd:1d:39:e6:63:45:ef:b4:36:bd:a2:b6:31:
         32:5e:9f:66:ef:b4:9a:97:20:53:61:61:e6:91:5c:c4:6a:68:
         e3:fe:94:1f:72:d9:f5:6f:89:9f:1c:5f:96:f8:8a:d7:61:2d:
         4e:40:14:f9:e2:a1:88:54:74:68:6e:0b:a3:4f:d2:7e:df:af:
         f1:92:a3:b7:20:3b:e6:b5:b6:e5:5d:ef:bd:7a:b8:e6:a2:ea:
         f5:fa:15:9b:79:35:0b:1b:61:7a:41:b7:e8:e6:5a:46:9f:30:
         01:a8:80:26:82:00:b4:ad:1f:3e:60:9f:6f:85:39:61:ce:3a:
         1d:3b:ad:02:51:a9:63:b3:7b:cc:1c:c8:63:00:e6:53:16:08:
         94:d6:71:a2:54:67:f7:89:a3:8a:5a:17:23:ac:25:c2:25:f7:
         7b:44:fd:84:a2:52:ce:7e:f5:5a:31:e9:6c:be:31:ab:a5:38:
         0e:0b:60:ac:33:8b:de:96:b6:1f:6a:9f:0d:07:5b:75:9d:02:
         13:00:a0:24:b8:57:96:35:56:0e:9c:16:e2:37:38:c1:38:57:
         92:c4:b3:82:6b:4d:8a:24:0d:b1:3f:20:a5:d9:80:07:d4:aa:
         0c:22:2a:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoM3T5U1m18Mp0Bx16nCuq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTIzOWY5OTEzZGZjN2Q3YWFhYTk1ZmY0YzliNjFiZjQy
YjcyZDYwHhcNMjUxMDIyMTcwMDE3WhcNMjUxMDIzMTcwMDE3WjAzMTEwLwYDVQQD
EygwYzUwNmUyMDk2NGM1ZWRmOGU0YTVjMThhMDE2ZDUxYjk3MmUwYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XSrbGobqcbvbJn+yuwZ1GYufIId
e1KDaRcHXBnb6RVaChPUlwxg/l9nErSOD5yQ/xn1wh3CBsv9Bp4SIVBowYJp4ZVF
9EKIXVnezP+XgF69Farl2fYqC8WK4srJ+ad5GdsOs/oA7hDwyGQfS3wO+qq9DLAY
lqucjyrcqlhiXPqTDfGHCiJPiIFRVp8PRgOSAuQkL/kwITX90gOJo+9CDDvefTQZ
33sHUgHCWIEP54K6VCaop+c1224yDuBGrXlXEKpvdTevljSJMh0MV3/qpnVRGw/K
6NpSXTAe5Fea2Ac3aMpimJF0MR/dAzx3k/ZmiIkUBBY6XNjlCnavbStWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxQbiCWTF7fjkpcGKAW1RuXLgslMB8GA1UdIwQY
MBaAFBeSOfmRPfx9eqqpX/TJthv0K3LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYt
YzYxMjMwNWNmMDg5LzEvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYtYzYxMjMwNWNmMDg5
LzEvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1g7PEhM
1INe4HymKWysrfmEI5t4qoLdHTnmY0XvtDa9orYxMl6fZu+0mpcgU2Fh5pFcxGpo
4/6UH3LZ9W+JnxxflviK12EtTkAU+eKhiFR0aG4Lo0/Sft+v8ZKjtyA75rW25V3v
vXq45qLq9foVm3k1CxthekG36OZaRp8wAaiAJoIAtK0fPmCfb4U5Yc46HTutAlGp
Y7N7zBzIYwDmUxYIlNZxolRn94mjiloXI6wlwiX3e0T9hKJSzn71WjHpbL4xq6U4
DgtgrDOL3pa2H2qfDQdbdZ0CEwCgJLhXljVWDpwW4jc4wThXksSzgmtNiiQNsT8g
pdmAB9SqDCIquQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 19:46:38 2025 by rpki-client