Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File:                     zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier:          APlSqI/10mvU/Bgt2LsQyuCup/ldYd57hG0g+Z/mwCc=
Subject key identifier:   8E:FD:EB:6B:8C:5A:F9:AD:9E:AC:99:EA:7B:7D:8C:37:F6:48:30:D5
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer:       /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial:       019A1B74FDDB85E8771307B2725BFF5A211D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number:          115B
Signing time:             Sat 25 Oct 2025 13:00:43 +0000
Manifest this update:     Sat 25 Oct 2025 13:00:43 +0000
Manifest next update:     Sun 26 Oct 2025 13:00:43 +0000
Files and hashes:         1: jT9M2q3-JmfBGqlkvqfv7X_lK7k.roa (hash: 2EpzeWTEb3JVIFCKyCL/tj06ZaHz1YBQQFcfRdYnEzo=)
                          2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: E2KwFZWMXjQIUHaPt0ZryIQPbnvLnvfEg/bqBG0vi7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 08:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1b:74:fd:db:85:e8:77:13:07:b2:72:5b:ff:5a:21:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
        Validity
            Not Before: Oct 25 13:00:43 2025 GMT
            Not After : Oct 26 13:00:43 2025 GMT
        Subject: CN=8efdeb6b8c5af9ad9eac99ea7b7d8c37f64830d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:5f:2a:b1:e0:ec:a2:cb:8f:78:22:f3:ea:
                    5f:d5:c2:b9:25:9b:04:5e:5a:0d:66:8b:48:30:25:
                    d9:cd:b6:19:a1:bd:5d:62:4e:16:37:9e:6f:ad:48:
                    73:1c:9f:37:c4:dd:08:f0:26:fd:44:fe:34:2d:c6:
                    49:20:ea:f4:c5:8a:1a:a3:a1:8c:e8:f7:d2:6c:d6:
                    3b:fe:7d:53:1e:5c:d6:18:dc:e7:56:51:1a:d8:ae:
                    b4:a0:c4:6e:c8:e5:18:25:4f:25:79:56:02:dd:0f:
                    1b:be:c5:7d:1f:1c:0a:af:6a:bc:8b:ff:cc:b9:d4:
                    47:f7:66:08:2e:d3:c1:9a:21:2b:1d:29:b1:c3:d8:
                    ca:89:3b:99:23:d8:af:5f:16:fb:14:e9:29:af:61:
                    ab:81:19:9d:f2:78:ee:fd:49:90:37:f0:d7:a7:b9:
                    db:14:08:c3:1b:18:ed:c5:72:cf:53:7c:d6:08:19:
                    76:3f:bc:e0:ef:c6:4e:2c:6e:27:0c:3b:f0:65:1f:
                    e1:18:48:df:71:a2:d4:98:73:bc:67:01:87:b0:18:
                    72:2f:c0:a0:09:2e:35:9f:38:97:5b:01:38:a3:19:
                    6b:8a:d0:8f:2a:6e:b1:be:51:3e:2f:06:7d:87:aa:
                    a0:ee:10:d2:9a:98:0d:fe:6e:a9:a1:0b:99:10:fb:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FD:EB:6B:8C:5A:F9:AD:9E:AC:99:EA:7B:7D:8C:37:F6:48:30:D5
            X509v3 Authority Key Identifier:
                keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:43:ec:27:54:cc:37:c9:23:43:6c:00:bd:3a:69:58:8d:
         a1:5c:f0:32:c8:ea:ec:0a:f0:43:0d:63:17:41:4d:e2:09:19:
         a9:ee:41:a1:f5:12:d4:31:d1:c0:cd:7c:8c:60:34:a3:87:a1:
         bd:1c:25:91:b5:bb:71:a1:c6:86:79:83:9a:a5:4b:b5:ca:d8:
         6d:0a:d4:d5:9b:f7:8c:f4:58:2d:a2:bc:03:73:97:db:71:d4:
         ea:5d:a0:8f:e4:c9:4b:a1:19:d6:78:0e:db:de:57:34:45:db:
         55:aa:6b:76:b6:12:63:72:a6:06:d4:8e:e5:1c:c4:e7:99:4c:
         0a:7e:41:0a:c3:72:17:cc:c0:01:4b:49:2c:98:0b:b2:36:df:
         5b:6e:da:f3:87:a7:58:54:5f:64:fb:76:f2:c6:f8:9e:7c:83:
         f6:90:97:bc:37:31:a3:b8:80:56:e2:8d:05:89:b7:54:18:1b:
         31:cc:e5:d0:cb:17:a5:0e:bb:eb:93:3c:df:df:0b:ba:a0:98:
         cb:b4:e3:49:57:09:c5:7c:13:2f:fd:b2:2b:7f:6b:d9:45:6d:
         11:bf:7f:9c:fd:77:26:26:10:f6:be:93:c5:68:9b:21:3f:b2:
         f8:1c:dd:2e:b7:26:59:ca:59:5d:b1:d2:44:31:8d:fb:72:a6:
         05:9c:85:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobdP3bheh3Eweyclv/WiEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjg0ZTQ3NDljY2NkNTgzZmVmYzc3OTdjM2Q2N2IxMDg5
OGExODgwHhcNMjUxMDI1MTMwMDQzWhcNMjUxMDI2MTMwMDQzWjAzMTEwLwYDVQQD
Eyg4ZWZkZWI2YjhjNWFmOWFkOWVhYzk5ZWE3YjdkOGMzN2Y2NDgzMGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXxfKrHg7KLLj3gi8+pf1cK5JZsE
XloNZotIMCXZzbYZob1dYk4WN55vrUhzHJ83xN0I8Cb9RP40LcZJIOr0xYoao6GM
6PfSbNY7/n1THlzWGNznVlEa2K60oMRuyOUYJU8leVYC3Q8bvsV9HxwKr2q8i//M
udRH92YILtPBmiErHSmxw9jKiTuZI9ivXxb7FOkpr2GrgRmd8nju/UmQN/DXp7nb
FAjDGxjtxXLPU3zWCBl2P7zg78ZOLG4nDDvwZR/hGEjfcaLUmHO8ZwGHsBhyL8Cg
CS41nziXWwE4oxlritCPKm6xvlE+LwZ9h6qg7hDSmpgN/m6poQuZEPvSVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7962uMWvmtnqyZ6nt9jDf2SDDVMB8GA1UdIwQY
MBaAFM74TkdJzM1YP+/HeXw9Z7EImKGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2Qt
ZGFiNmUyYzVmZGQ5LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2QtZGFiNmUyYzVmZGQ5
LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0VD7CdU
zDfJI0NsAL06aViNoVzwMsjq7ArwQw1jF0FN4gkZqe5BofUS1DHRwM18jGA0o4eh
vRwlkbW7caHGhnmDmqVLtcrYbQrU1Zv3jPRYLaK8A3OX23HU6l2gj+TJS6EZ1ngO
295XNEXbVaprdrYSY3KmBtSO5RzE55lMCn5BCsNyF8zAAUtJLJgLsjbfW27a84en
WFRfZPt28sb4nnyD9pCXvDcxo7iAVuKNBYm3VBgbMczl0MsXpQ6765M8398LuqCY
y7TjSVcJxXwTL/2yK39r2UVtEb9/nP13JiYQ9r6TxWibIT+y+BzdLrcmWcpZXbHS
RDGN+3KmBZyFtg==
-----END CERTIFICATE-----
Generated at Sat Oct 25 16:51:12 2025 by rpki-client