Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          cCZPHI7xgFICj/3yjD1BpoJ/gnpLu+omuMgvNkFkcPg=
Subject key identifier:   87:C7:61:F7:A7:50:27:8D:35:13:3B:62:88:F1:A9:B4:2B:2F:F6:15
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       0199C6457879BE70208CB810EA92D2356343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          11D7
Signing time:             Thu 09 Oct 2025 00:01:05 +0000
Manifest this update:     Thu 09 Oct 2025 00:01:05 +0000
Manifest next update:     Fri 10 Oct 2025 00:01:05 +0000
Files and hashes:         1: 5ZcLxiewB6SlgnkXrkL_qV-6c70.roa (hash: GbaGUbv69G2XGzJlZWZreb/2hT1CRKa032XRQqRiLc0=)
                          2: I1O4inp7HBvWNe9o3Cdiqxo24PI.roa (hash: w0+4BIRKhD7XUvL36J282b0/EXDqyGM8URO+oQQ/ReM=)
                          3: QUq_as-wJbivzxLijTmqQSzAeeM.roa (hash: Obggdbq+FXYocjRAbiQV6ufwU9548OHhlSGKsE0Fnq0=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: 0kl6EVXZbEEz7fIDm6866NW5TaoIKFQEV9iYKkxYTKM=)
                          5: fUAyjzobbYqY4LtTx9KW62S7ym8.roa (hash: IdzdGJHWpk15Q0jGSrpbWLOfiHsRudIY06wcbYibU3s=)
                          6: rSVe0qwmHRmRSbc-BqRXWgwo8xg.roa (hash: r3p05wO+xtEje8UL55zhFJYQg8/aaGUGyXfpX1tlFYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c6:45:78:79:be:70:20:8c:b8:10:ea:92:d2:35:63:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Oct  9 00:01:05 2025 GMT
            Not After : Oct 10 00:01:05 2025 GMT
        Subject: CN=87c761f7a750278d35133b6288f1a9b42b2ff615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:b6:26:11:6f:62:d6:3c:cf:f5:b0:5d:15:
                    f9:2c:46:b3:0e:02:5b:3c:1d:bb:ea:d8:37:44:f3:
                    4f:4c:2a:97:42:a2:66:32:c2:2a:cd:7d:7f:5b:2e:
                    2b:7c:ae:a8:ca:96:33:db:94:4b:b6:e4:df:85:76:
                    79:b6:2f:20:20:97:37:4d:9c:ab:76:a1:1c:c3:13:
                    80:83:51:8f:01:41:ef:cd:fe:cb:3a:94:93:cb:66:
                    bd:90:64:1f:e4:93:81:c4:bc:b8:05:f0:05:8f:48:
                    ce:1f:50:de:8c:e0:23:30:56:54:6d:3b:1a:bf:68:
                    37:a9:4a:41:b7:78:33:3c:c0:32:96:ce:89:8c:14:
                    de:61:06:92:25:f8:e6:cb:00:47:76:a7:6f:54:34:
                    71:30:bf:cc:12:8b:ab:9c:c9:0f:be:c4:a5:86:ad:
                    d5:cb:08:90:0f:b6:b6:8a:06:99:30:22:3c:d0:37:
                    36:04:d6:1b:8e:3f:96:a1:ee:c9:74:32:52:3d:46:
                    22:33:12:a7:7c:1a:d1:9d:d0:71:d2:d2:75:3b:05:
                    f6:7c:c4:3a:49:46:e1:c3:3d:f6:9c:eb:35:f1:b9:
                    29:dd:a9:c6:18:f9:2c:df:85:45:6e:68:44:77:78:
                    c5:25:b8:2a:8a:1c:26:cc:23:8c:20:a3:ee:b5:12:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C7:61:F7:A7:50:27:8D:35:13:3B:62:88:F1:A9:B4:2B:2F:F6:15
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:90:8c:f1:c8:e8:6d:a8:cc:1e:6e:22:95:d2:78:b2:92:
         5d:c2:95:d3:34:09:0b:d9:81:c8:e9:19:cb:54:93:19:10:f4:
         f0:ff:e1:9e:e4:49:e5:fa:bd:a1:b8:c6:10:43:56:c8:d6:22:
         48:3e:02:b7:28:b5:37:a8:e2:a9:be:88:14:56:f2:66:74:d2:
         cb:0e:23:46:e5:0b:c0:01:e2:56:b5:b7:be:db:ad:32:ed:80:
         40:94:c8:a6:60:4d:5d:d3:16:e2:30:76:2f:45:f2:37:f7:64:
         e7:9e:f3:1a:89:b7:22:2e:96:4b:19:40:1e:7e:0c:0a:c9:61:
         9b:47:f0:fe:13:88:49:3b:7c:0e:19:c7:eb:33:e7:2f:bb:b2:
         55:6a:42:e4:8e:52:17:b2:2c:ab:82:f4:d6:2d:13:95:1a:5f:
         37:14:b1:19:28:c8:1a:5d:35:42:c7:38:4b:9d:7e:4a:16:61:
         fe:9a:dc:69:b6:30:eb:7b:d2:ac:0f:75:96:78:bc:af:ec:4c:
         0c:dc:e6:37:00:fc:e7:a4:2b:42:16:35:12:8b:23:f0:76:80:
         df:aa:a2:f9:d3:ab:66:85:aa:e2:62:6a:71:ea:0a:bc:70:c8:
         a6:0e:e5:ca:c7:44:4c:2f:19:8e:ee:76:a2:a7:ef:57:1c:9f:
         5d:c4:aa:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnGRXh5vnAgjLgQ6pLSNWNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMjFjYjRiYWExNTg2MmQxYjU3NzNiZjJiZTYwY2E1ZjRm
YzI0ZDQwHhcNMjUxMDA5MDAwMTA1WhcNMjUxMDEwMDAwMTA1WjAzMTEwLwYDVQQD
Eyg4N2M3NjFmN2E3NTAyNzhkMzUxMzNiNjI4OGYxYTliNDJiMmZmNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG62JhFvYtY8z/WwXRX5LEazDgJb
PB276tg3RPNPTCqXQqJmMsIqzX1/Wy4rfK6oypYz25RLtuTfhXZ5ti8gIJc3TZyr
dqEcwxOAg1GPAUHvzf7LOpSTy2a9kGQf5JOBxLy4BfAFj0jOH1DejOAjMFZUbTsa
v2g3qUpBt3gzPMAyls6JjBTeYQaSJfjmywBHdqdvVDRxML/MEournMkPvsSlhq3V
ywiQD7a2igaZMCI80Dc2BNYbjj+Woe7JdDJSPUYiMxKnfBrRndBx0tJ1OwX2fMQ6
SUbhwz32nOs18bkp3anGGPks34VFbmhEd3jFJbgqihwmzCOMIKPutRJFlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfHYfenUCeNNRM7YojxqbQrL/YVMB8GA1UdIwQY
MBaAFP0hy0uqFYYtG1dzvyvmDKX0/CTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUt
YmU1NTIwYTVjODIxLzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUtYmU1NTIwYTVjODIx
LzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwuQjPHI
6G2ozB5uIpXSeLKSXcKV0zQJC9mByOkZy1STGRD08P/hnuRJ5fq9objGEENWyNYi
SD4Ctyi1N6jiqb6IFFbyZnTSyw4jRuULwAHiVrW3vtutMu2AQJTIpmBNXdMW4jB2
L0XyN/dk557zGom3Ii6WSxlAHn4MCslhm0fw/hOISTt8DhnH6zPnL7uyVWpC5I5S
F7Isq4L01i0TlRpfNxSxGSjIGl01Qsc4S51+ShZh/prcabYw63vSrA91lni8r+xM
DNzmNwD856QrQhY1Eosj8HaA36qi+dOrZoWq4mJqceoKvHDIpg7lysdETC8Zju52
oqfvVxyfXcSqFw==
-----END CERTIFICATE-----
Generated at Thu Oct 9 02:03:11 2025 by rpki-client