Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          IdUvvXXQC/k7zB0mjM43ao7e7CNw/i89qUiX8l04WxE=
Subject key identifier:   C5:C2:1F:9C:72:05:58:61:5E:68:57:0E:FE:21:A7:33:EA:95:94:BF
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       019A462879EB5D98535780D967B251EFB9F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          04B3
Signing time:             Sun 02 Nov 2025 20:00:48 +0000
Manifest this update:     Sun 02 Nov 2025 20:00:48 +0000
Manifest next update:     Mon 03 Nov 2025 20:00:48 +0000
Files and hashes:         1: CDhfXiWmp-7DWGHRLkI1RXpNMUw.roa (hash: BdyrC92HV6fMOkqwdnwWMjP4WPGwGQmddKXw8S//IY4=)
                          2: GZLylFIePve8mzqKp098f5zxTUw.roa (hash: r5z9AFc8wnJRnVScCietCsc10ck15u9ra9fsksqINjA=)
                          3: QSxkF4rOw8CaQhbY1bgweRS2k84.roa (hash: /gVGhfkCO75vlxeNpsZvkhIuMR2YzpuGJXm7VvwUGkk=)
                          4: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (hash: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=)
                          5: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (hash: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=)
                          6: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: svv4QYRaRGjSv2N7a2C+I4p6W38k97S2M6OwVYQwnsI=)
                          7: vbkqK2A-5so6LdZx4ga1s9863ZI.roa (hash: 533TjtomKdjh/jTDvd0XbmB2CfJKlZIVlQUKaugW/Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Nov 2025 15:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:46:28:79:eb:5d:98:53:57:80:d9:67:b2:51:ef:b9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Nov  2 20:00:48 2025 GMT
            Not After : Nov  3 20:00:48 2025 GMT
        Subject: CN=c5c21f9c720558615e68570efe21a733ea9594bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:72:37:b3:5a:61:cc:cf:db:91:4c:e7:b7:
                    ef:52:34:d7:a2:46:be:b6:4d:50:40:12:d4:6f:6c:
                    cc:25:38:a2:c4:66:9b:44:eb:81:cc:be:31:29:6c:
                    f2:bc:3e:1d:86:6a:0f:80:64:dd:27:81:ab:1c:88:
                    20:5d:41:eb:13:87:73:2c:35:fa:1d:99:fa:c2:95:
                    ef:61:f8:48:f4:a0:17:27:ba:3d:68:4f:19:b0:3a:
                    ca:1b:2e:c4:81:f1:5c:98:c3:cb:e0:00:54:d4:38:
                    09:da:65:22:ee:68:2e:92:a1:b7:8c:5e:71:18:05:
                    60:d7:62:87:80:83:ae:4b:f1:87:d9:09:e8:bd:dc:
                    a0:e3:75:96:9c:01:e2:57:4d:c7:85:20:de:83:f7:
                    ca:34:6a:03:19:cb:9f:67:d1:9e:e6:0c:3a:30:b5:
                    5d:3f:f8:e5:52:b2:b4:a0:9a:19:49:dc:09:18:76:
                    71:f8:4e:59:38:75:17:06:b8:92:46:f6:11:45:ae:
                    0c:bb:30:fb:e8:4b:33:1b:fd:91:c2:25:33:de:c1:
                    9a:a9:75:f0:a8:4e:54:60:a8:59:69:67:c8:b0:5f:
                    9c:2b:53:d0:a8:70:ad:70:32:9f:5a:74:b1:fc:4c:
                    12:7b:53:cf:e8:6e:f8:c3:1d:54:a1:fe:8e:a4:07:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C2:1F:9C:72:05:58:61:5E:68:57:0E:FE:21:A7:33:EA:95:94:BF
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c5:58:cf:52:6f:fe:a4:c2:40:96:c5:e8:db:95:90:79:09:
         87:51:1e:6a:97:38:99:af:c4:97:70:48:ab:b9:ae:09:82:26:
         b9:39:e9:d6:f1:00:15:f7:eb:b9:7a:05:12:bf:a7:2a:b5:fe:
         60:fb:e2:0b:78:8e:26:5a:3f:53:f8:8f:12:8f:68:0e:3f:f0:
         8e:6f:d6:17:87:a2:62:36:ef:24:5f:a5:c9:5e:ee:fb:b8:7a:
         7b:24:d0:ab:80:f8:8a:32:47:e6:a0:0e:fb:36:47:88:d1:7a:
         af:37:eb:ee:1c:f1:29:f1:c1:32:87:4c:48:36:2f:cb:18:e6:
         6a:3e:be:19:41:88:80:2e:a2:f7:bd:cf:fd:c8:94:84:cc:fc:
         ea:56:92:1e:61:8c:29:e5:fb:1d:21:f4:d6:23:b2:af:49:34:
         f7:c7:a4:48:3d:97:72:46:0f:5d:57:56:66:bc:04:93:11:c0:
         ca:bc:c2:cb:d1:33:bf:48:8f:b2:b7:4a:dd:83:0e:3d:f8:ca:
         c3:b6:91:5c:6a:73:3c:ca:c3:01:f7:0a:18:2a:74:59:0b:b1:
         d8:b2:d9:53:ec:4b:c1:d0:41:f0:2b:92:96:97:51:ec:48:65:
         6e:18:2a:70:5b:e6:0e:68:ea:fe:72:c3:ee:6b:3d:3b:01:05:
         c9:e9:3b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpGKHnrXZhTV4DZZ7JR77n5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4
MmFjYmYwHhcNMjUxMTAyMjAwMDQ4WhcNMjUxMTAzMjAwMDQ4WjAzMTEwLwYDVQQD
EyhjNWMyMWY5YzcyMDU1ODYxNWU2ODU3MGVmZTIxYTczM2VhOTU5NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv21yN7NaYczP25FM57fvUjTXoka+
tk1QQBLUb2zMJTiixGabROuBzL4xKWzyvD4dhmoPgGTdJ4GrHIggXUHrE4dzLDX6
HZn6wpXvYfhI9KAXJ7o9aE8ZsDrKGy7EgfFcmMPL4ABU1DgJ2mUi7mgukqG3jF5x
GAVg12KHgIOuS/GH2Qnovdyg43WWnAHiV03HhSDeg/fKNGoDGcufZ9Ge5gw6MLVd
P/jlUrK0oJoZSdwJGHZx+E5ZOHUXBriSRvYRRa4MuzD76EszG/2RwiUz3sGaqXXw
qE5UYKhZaWfIsF+cK1PQqHCtcDKfWnSx/EwSe1PP6G74wx1Uof6OpAd41wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXCH5xyBVhhXmhXDv4hpzPqlZS/MB8GA1UdIwQY
MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt
YTE5Y2M4YTc2ZDA0LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0
LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcVYz1Jv
/qTCQJbF6NuVkHkJh1Eeapc4ma/El3BIq7muCYImuTnp1vEAFffruXoFEr+nKrX+
YPviC3iOJlo/U/iPEo9oDj/wjm/WF4eiYjbvJF+lyV7u+7h6eyTQq4D4ijJH5qAO
+zZHiNF6rzfr7hzxKfHBModMSDYvyxjmaj6+GUGIgC6i973P/ciUhMz86laSHmGM
KeX7HSH01iOyr0k098ekSD2XckYPXVdWZrwEkxHAyrzCy9Ezv0iPsrdK3YMOPfjK
w7aRXGpzPMrDAfcKGCp0WQux2LLZU+xLwdBB8CuSlpdR7EhlbhgqcFvmDmjq/nLD
7ms9OwEFyek7KA==
-----END CERTIFICATE-----
Generated at Mon Nov 3 00:09:15 2025 by rpki-client