Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File:                     r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier:          5Psv16fbw9yA8u/kt45fRHIXoTKFrqA/d3zKKcUVJPU=
Subject key identifier:   70:55:08:18:54:F6:F9:04:FE:0A:6F:CF:1A:4A:6F:19:93:3A:19:73
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer:       /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial:       019921B22F8CD3C44910D285850258712EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number:          104C
Signing time:             Sun 07 Sep 2025 01:02:29 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:29 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:29 +0000
Files and hashes:         1: 4fpK3rH7dDsLZcwC8fv__9MCBNk.roa (hash: H+mNwrXZUXB3OGGb/VrqoSQBBpWlzYIXILfgLQd6xuU=)
                          2: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (hash: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=)
                          3: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (hash: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=)
                          4: UNKbAcEAJHWJC-HG72D-vYqbVfQ.roa (hash: m35AjrcjrDzhORVJU0fjE54zFfVUjrq+cuZi9udA0+8=)
                          5: cLFAPtOqlcUfpbbbNNENVqdfu8I.roa (hash: fE/OxbEqrhzEaEBEiWo6VY8shfzEaI5zfx5000I8b5Q=)
                          6: hgq-3QFFzN187B-65tYpaJQwwz8.roa (hash: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=)
                          7: j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa (hash: bJ01HQANAS/OiptPUmVVckwNOFEFT58VNH/38hKXIpc=)
                          8: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: RyhB6ED8rVnRysauNv6BqCGbr/5dqKDMSuNiYf4g+3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:2f:8c:d3:c4:49:10:d2:85:85:02:58:71:2e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
        Validity
            Not Before: Sep  7 01:02:29 2025 GMT
            Not After : Sep  8 01:02:29 2025 GMT
        Subject: CN=7055081854f6f904fe0a6fcf1a4a6f19933a1973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:84:05:d8:59:79:c5:8d:cf:b8:0b:82:00:
                    df:55:d5:58:e8:f0:33:c8:fe:03:b2:43:8d:79:bb:
                    f0:2e:16:d1:18:e1:be:7d:6e:87:80:5c:60:96:bd:
                    ee:87:88:2b:f8:c9:0c:87:88:8f:58:74:b6:33:06:
                    10:54:99:25:ed:24:d2:96:d0:9b:33:d1:a4:25:02:
                    c3:70:6b:ac:b8:f9:cf:e1:c4:4f:75:79:f6:5d:c1:
                    25:06:58:6e:a5:b5:5c:43:15:17:f5:7b:d1:d0:66:
                    a0:5a:1e:76:e1:47:ca:98:76:f0:24:67:52:e5:06:
                    80:9c:c7:de:f4:c3:8c:cf:4b:95:07:39:0f:95:a6:
                    8b:10:7d:ea:98:2d:88:92:ae:3b:2e:ae:b7:f6:c9:
                    42:da:73:64:c8:a8:67:ec:07:8a:85:47:b8:08:66:
                    a8:a2:17:4f:ae:24:ab:ec:32:cf:96:e1:c3:e1:68:
                    08:72:6c:8d:fa:c6:70:10:2b:a0:bb:b5:a3:4e:4a:
                    f5:ac:54:ac:9c:23:3e:7e:d2:46:45:e7:96:e9:f8:
                    33:05:9c:44:a3:36:a3:7a:25:92:c9:29:8b:f4:d8:
                    44:3f:f2:05:b2:bd:e4:2b:35:fa:86:53:9d:b3:34:
                    93:64:1b:05:bd:72:17:2c:44:46:ae:b9:e7:2f:02:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:55:08:18:54:F6:F9:04:FE:0A:6F:CF:1A:4A:6F:19:93:3A:19:73
            X509v3 Authority Key Identifier:
                keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:69:b6:a4:93:72:a5:fa:c8:9c:ed:03:75:ae:a0:87:79:c2:
         97:21:6b:84:79:de:6a:f4:2a:95:cb:97:07:89:70:0c:d4:4d:
         c7:ff:c0:19:59:80:58:4d:0f:32:20:d3:c5:55:80:e7:30:84:
         ea:f6:56:52:3f:f3:51:ce:38:92:fe:ff:e9:df:61:8b:25:dd:
         63:90:81:9f:ea:29:58:03:82:81:09:33:32:2d:55:db:c9:df:
         48:8b:68:72:9e:19:9b:c7:c7:6d:a0:a9:a1:f7:09:19:53:a4:
         fa:41:08:50:3b:e1:b1:4d:47:4b:51:8c:7a:94:d7:62:56:6c:
         cd:19:98:8e:2b:f1:cd:98:a8:ed:b0:82:c1:b5:1e:15:b5:88:
         1b:37:b4:f7:d0:14:41:19:73:ed:f1:ea:39:06:3e:99:03:6e:
         50:d7:67:6f:09:ee:be:a4:32:7f:b5:b3:bb:6c:d2:6a:56:c5:
         ec:37:a6:d8:7f:26:58:1b:06:94:59:b5:28:6c:fd:af:47:03:
         0f:c8:c2:2f:f8:d5:2e:42:7f:c5:f3:64:70:e2:13:d4:44:f9:
         20:84:7f:a7:58:3d:7b:2f:38:29:8f:02:35:da:7e:22:5f:34:
         53:3e:de:60:80:3e:11:bb:e6:46:12:cf:79:f4:fa:3a:93:4a:
         64:1f:7f:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsi+M08RJENKFhQJYcS6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4
OGU5MmMwHhcNMjUwOTA3MDEwMjI5WhcNMjUwOTA4MDEwMjI5WjAzMTEwLwYDVQQD
Eyg3MDU1MDgxODU0ZjZmOTA0ZmUwYTZmY2YxYTRhNmYxOTkzM2ExOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIuEBdhZecWNz7gLggDfVdVY6PAz
yP4DskONebvwLhbRGOG+fW6HgFxglr3uh4gr+MkMh4iPWHS2MwYQVJkl7STSltCb
M9GkJQLDcGusuPnP4cRPdXn2XcElBlhupbVcQxUX9XvR0GagWh524UfKmHbwJGdS
5QaAnMfe9MOMz0uVBzkPlaaLEH3qmC2Ikq47Lq639slC2nNkyKhn7AeKhUe4CGao
ohdPriSr7DLPluHD4WgIcmyN+sZwECugu7WjTkr1rFSsnCM+ftJGReeW6fgzBZxE
ozajeiWSySmL9NhEP/IFsr3kKzX6hlOdszSTZBsFvXIXLERGrrnnLwLkRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBVCBhU9vkE/gpvzxpKbxmTOhlzMB8GA1UdIwQY
MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt
NjQ0YmQwZmM3ZjgwLzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw
LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGm2pJNy
pfrInO0Dda6gh3nClyFrhHneavQqlcuXB4lwDNRNx//AGVmAWE0PMiDTxVWA5zCE
6vZWUj/zUc44kv7/6d9hiyXdY5CBn+opWAOCgQkzMi1V28nfSItocp4Zm8fHbaCp
ofcJGVOk+kEIUDvhsU1HS1GMepTXYlZszRmYjivxzZio7bCCwbUeFbWIGze099AU
QRlz7fHqOQY+mQNuUNdnbwnuvqQyf7Wzu2zSalbF7Dem2H8mWBsGlFm1KGz9r0cD
D8jCL/jVLkJ/xfNkcOIT1ET5IIR/p1g9ey84KY8CNdp+Il80Uz7eYIA+EbvmRhLP
efT6OpNKZB9/tw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:59 2025 by rpki-client