Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File:                     dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier:          wO14Z65VajaVKjr+HkzfSZZCerGUHBK4q2IYPop7JKI=
Subject key identifier:   76:47:8F:87:63:E9:88:D4:69:CD:91:40:AA:0F:94:64:68:B9:97:CD
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer:       /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial:       019A32D8BA27BA71865EFDCC8BE7986B3C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number:          1708
Signing time:             Thu 30 Oct 2025 02:00:55 +0000
Manifest this update:     Thu 30 Oct 2025 02:00:55 +0000
Manifest next update:     Fri 31 Oct 2025 02:00:55 +0000
Files and hashes:         1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: P6i+u6OdYjTHI5gwCL8qyYSD+0bCO1hXmZk+Dj+o7aI=)
                          2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=)
                          3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=)
                          4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=)
                          5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 Oct 2025 01:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:32:d8:ba:27:ba:71:86:5e:fd:cc:8b:e7:98:6b:3c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
        Validity
            Not Before: Oct 30 02:00:55 2025 GMT
            Not After : Oct 31 02:00:55 2025 GMT
        Subject: CN=76478f8763e988d469cd9140aa0f946468b997cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:34:1a:3f:1e:35:55:ba:ea:e9:1f:3c:d9:
                    75:27:ce:c1:44:90:7d:04:c7:38:15:05:48:66:fe:
                    8f:23:a0:a3:7f:2c:b0:a6:05:50:47:42:a0:bd:21:
                    21:6f:11:03:9a:8d:18:dd:e6:f1:42:8f:31:32:e4:
                    a1:e8:44:dc:49:6a:38:37:69:f0:e3:f1:ce:83:85:
                    b5:f0:30:a1:b7:37:5f:b3:65:d8:3a:b3:cb:09:a8:
                    bd:00:c8:e9:a2:22:41:34:87:f1:fc:84:11:6a:95:
                    57:34:0c:b9:aa:66:80:a3:fb:29:1d:15:95:51:81:
                    34:08:8c:60:93:2b:54:a5:39:9a:90:4e:31:6b:a5:
                    bb:42:76:dc:a8:dc:39:2b:ae:19:1f:e5:ac:f0:81:
                    96:a2:91:a1:23:b5:61:f7:1c:e5:50:a4:f0:4c:18:
                    1a:f4:52:d5:39:d3:b7:a7:0e:78:f8:0f:82:ad:da:
                    15:b4:f5:95:54:85:1b:8f:0e:fa:f2:3c:fc:6f:a2:
                    2c:d8:8e:7c:67:0c:b8:5c:01:88:e7:64:68:c1:83:
                    5b:7d:35:96:28:be:15:ab:84:de:d2:c7:ab:84:70:
                    6c:f4:b8:fd:e2:a9:23:a3:50:db:61:b1:7b:35:a7:
                    1b:f2:75:bd:9f:c6:bb:dd:7e:af:8c:04:c2:52:95:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:47:8F:87:63:E9:88:D4:69:CD:91:40:AA:0F:94:64:68:B9:97:CD
            X509v3 Authority Key Identifier:
                keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:47:e8:b8:aa:43:b9:95:5a:ae:ea:17:f0:72:2b:66:f2:76:
         50:b7:b0:52:17:ff:99:2a:36:34:45:7b:65:b2:c9:37:d1:8c:
         00:ab:be:93:1e:f2:6f:b4:6c:1b:98:54:66:55:a5:54:e8:40:
         e2:cb:ba:72:9b:2a:da:2a:08:29:d3:ea:92:1c:a9:6a:8d:6b:
         1e:e6:15:96:3c:99:5e:4d:90:e8:e3:5c:31:76:be:18:08:b7:
         fa:b6:22:04:6b:16:8b:42:e6:3c:ce:5f:f6:67:e4:29:e4:fb:
         bd:ef:aa:f6:90:4f:ea:13:2e:f7:cd:08:dc:bd:2e:43:b0:36:
         96:be:a7:7c:21:5d:7d:9a:55:04:5f:5a:5e:7b:e4:77:5e:69:
         df:49:7d:4d:23:a8:7b:bb:eb:d3:5a:a9:91:06:65:fd:b6:6b:
         65:ea:44:20:e3:b0:65:22:43:83:3a:cd:74:d3:96:71:0f:c2:
         26:7c:b3:0a:98:73:d0:8e:ea:96:df:2c:48:cf:63:3b:03:91:
         2b:93:96:41:cf:ff:49:a9:f9:01:47:8f:55:b2:d3:89:2d:95:
         4d:10:94:49:62:0a:d7:a7:05:6f:96:1f:3b:85:f3:32:1a:fb:
         aa:87:8a:87:8b:d7:70:d5:22:1c:7e:7a:e6:a7:cc:73:4f:26:
         23:3a:df:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoy2LonunGGXv3Mi+eYazwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1
ODliYTgwHhcNMjUxMDMwMDIwMDU1WhcNMjUxMDMxMDIwMDU1WjAzMTEwLwYDVQQD
Eyg3NjQ3OGY4NzYzZTk4OGQ0NjljZDkxNDBhYTBmOTQ2NDY4Yjk5N2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RE0Gj8eNVW66ukfPNl1J87BRJB9
BMc4FQVIZv6PI6CjfyywpgVQR0KgvSEhbxEDmo0Y3ebxQo8xMuSh6ETcSWo4N2nw
4/HOg4W18DChtzdfs2XYOrPLCai9AMjpoiJBNIfx/IQRapVXNAy5qmaAo/spHRWV
UYE0CIxgkytUpTmakE4xa6W7QnbcqNw5K64ZH+Ws8IGWopGhI7Vh9xzlUKTwTBga
9FLVOdO3pw54+A+CrdoVtPWVVIUbjw768jz8b6Is2I58Zwy4XAGI52RowYNbfTWW
KL4Vq4Te0serhHBs9Lj94qkjo1DbYbF7Nacb8nW9n8a73X6vjATCUpVLUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZHj4dj6YjUac2RQKoPlGRouZfNMB8GA1UdIwQY
MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt
Y2YxZjRjN2M5MjIyLzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy
LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0fouKpD
uZVaruoX8HIrZvJ2ULewUhf/mSo2NEV7ZbLJN9GMAKu+kx7yb7RsG5hUZlWlVOhA
4su6cpsq2ioIKdPqkhypao1rHuYVljyZXk2Q6ONcMXa+GAi3+rYiBGsWi0LmPM5f
9mfkKeT7ve+q9pBP6hMu980I3L0uQ7A2lr6nfCFdfZpVBF9aXnvkd15p30l9TSOo
e7vr01qpkQZl/bZrZepEIOOwZSJDgzrNdNOWcQ/CJnyzCphz0I7qlt8sSM9jOwOR
K5OWQc//San5AUePVbLTiS2VTRCUSWIK16cFb5YfO4XzMhr7qoeKh4vXcNUiHH56
5qfMc08mIzrfcw==
-----END CERTIFICATE-----
Generated at Thu Oct 30 04:34:44 2025 by rpki-client