Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
File:                     SV5QAUnOjXG5YEtYngwy_qB6mLg.mft (raw, json)
Hash identifier:          ++F5h/tl1kv7vbF1TBHCEEtP8/WqO+eKWvwBKgMyHdw=
Subject key identifier:   85:34:88:37:7C:B2:D0:78:C1:22:B5:06:54:1F:7C:54:AA:BB:46:90
Authority key identifier: 49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
Certificate issuer:       /CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Certificate serial:       019A71EE897558379EEF5E7349435DD8834B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
Manifest number:          0661
Signing time:             Tue 11 Nov 2025 08:00:49 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:49 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:49 +0000
Files and hashes:         1: SLaZNAjxImfT9EGvzPi0i7_1Yj0.roa (hash: 82hv0vYxLgPvo/8wkECNbefCFSwFm1NfG9R8MJN+I0g=)
                          2: SV5QAUnOjXG5YEtYngwy_qB6mLg.crl (hash: FxRcw9B/6sK3y+R+hNpf+aCgdgK8TtkT90qPsO74tb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:89:75:58:37:9e:ef:5e:73:49:43:5d:d8:83:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=495e500149ce8d71b9604b589e0c32fea07a98b8
        Validity
            Not Before: Nov 11 08:00:49 2025 GMT
            Not After : Nov 12 08:00:49 2025 GMT
        Subject: CN=853488377cb2d078c122b506541f7c54aabb4690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:c6:fd:28:92:df:79:7b:56:b7:7d:15:c1:
                    8b:9e:dd:51:3e:4d:33:ca:7d:0c:af:f0:3c:14:9b:
                    37:71:4b:b5:5b:dd:a4:a7:c6:aa:84:ae:0c:72:6d:
                    96:71:af:53:5c:9c:28:2d:1d:8c:d9:6b:f3:9d:b9:
                    fb:16:5d:91:a1:0e:a9:80:5d:22:41:02:bd:1e:f2:
                    37:62:90:71:7c:b1:33:f2:c3:4f:72:ea:5b:ac:83:
                    62:22:62:7f:93:72:41:9a:4d:7c:64:98:c1:02:2a:
                    e3:53:7c:b5:94:29:59:25:9d:64:b9:00:ab:70:7a:
                    5d:f0:05:22:9f:b6:f8:ce:47:fc:c7:bb:a0:06:75:
                    7a:88:11:80:06:00:0a:59:3c:bd:66:5d:b4:77:09:
                    6a:80:86:40:f2:4d:c1:84:9a:5b:69:15:97:68:19:
                    fe:5c:f8:cf:fd:de:75:1d:a6:a6:bb:1d:2b:2c:cb:
                    fd:ec:6f:6a:6c:34:fd:9b:2e:9b:2d:33:9c:1e:b0:
                    a8:9c:c5:a9:66:bc:5b:bf:a0:cb:ea:c0:c7:f9:10:
                    ab:b2:30:71:7d:0f:48:f8:53:2e:60:40:c9:44:3f:
                    4a:be:ae:94:dc:a0:a5:dd:a9:ed:57:2d:cb:a1:89:
                    7f:0e:3a:0b:dc:15:77:d1:05:cf:90:9f:9e:67:6d:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:34:88:37:7C:B2:D0:78:C1:22:B5:06:54:1F:7C:54:AA:BB:46:90
            X509v3 Authority Key Identifier:
                keyid:49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:18:5d:29:8f:96:69:51:11:be:df:a1:13:dc:a5:a1:2a:
         60:9d:58:b0:9d:86:4b:ac:70:d0:df:80:18:ee:05:6c:7f:7b:
         bc:42:7d:05:ac:ca:6d:49:64:17:f2:97:4d:e1:07:ae:5b:d3:
         c4:bb:67:81:97:b8:4e:9d:49:6a:6e:ee:dc:de:e2:98:82:b9:
         4b:41:7c:3f:4f:c4:55:8f:12:93:6a:19:27:e3:25:73:4a:c7:
         17:b4:5a:38:17:9a:2c:18:3c:f7:5c:25:9d:62:f5:67:47:c8:
         6b:87:af:26:44:4a:18:16:70:b2:b2:91:fb:1e:bb:6e:c8:fc:
         15:17:f8:6d:0e:80:3e:4f:de:ee:af:94:b4:22:b3:84:54:57:
         c4:1f:09:0e:3f:5d:ba:47:87:84:24:42:73:64:27:74:28:b0:
         b5:f8:3f:2d:35:7c:73:3d:68:d4:83:55:48:6a:02:50:de:79:
         5d:a2:ee:4b:43:3c:15:04:d0:72:ef:e6:14:08:b6:c3:70:c9:
         43:4d:61:bd:10:45:74:15:47:12:4f:17:a3:e4:dc:74:a8:5f:
         46:90:5b:1f:d1:c4:05:15:5b:78:ea:6e:be:f0:2d:25:d3:c5:
         06:13:a0:ce:e2:60:84:1c:95:74:fd:ed:1a:15:88:0b:9e:f1:
         84:7a:ee:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7ol1WDee715zSUNd2INLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NWU1MDAxNDljZThkNzFiOTYwNGI1ODllMGMzMmZlYTA3
YTk4YjgwHhcNMjUxMTExMDgwMDQ5WhcNMjUxMTEyMDgwMDQ5WjAzMTEwLwYDVQQD
Eyg4NTM0ODgzNzdjYjJkMDc4YzEyMmI1MDY1NDFmN2M1NGFhYmI0NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ifG/SiS33l7Vrd9FcGLnt1RPk0z
yn0Mr/A8FJs3cUu1W92kp8aqhK4Mcm2Wca9TXJwoLR2M2Wvznbn7Fl2RoQ6pgF0i
QQK9HvI3YpBxfLEz8sNPcupbrINiImJ/k3JBmk18ZJjBAirjU3y1lClZJZ1kuQCr
cHpd8AUin7b4zkf8x7ugBnV6iBGABgAKWTy9Zl20dwlqgIZA8k3BhJpbaRWXaBn+
XPjP/d51Haamux0rLMv97G9qbDT9my6bLTOcHrConMWpZrxbv6DL6sDH+RCrsjBx
fQ9I+FMuYEDJRD9Kvq6U3KCl3antVy3LoYl/DjoL3BV30QXPkJ+eZ20DpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU0iDd8stB4wSK1BlQffFSqu0aQMB8GA1UdIwQY
MBaAFEleUAFJzo1xuWBLWJ4MMv6gepi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1Y1UUFVbk9qWEc1WUV0WW5nd3lfcUI2bUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lMGNmNDMtZTRjMC00NmY3LWJkZTgt
MTZmZDViYTRmMGU0LzEvU1Y1UUFVbk9qWEc1WUV0WW5nd3lfcUI2bUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9lMGNmNDMtZTRjMC00NmY3LWJkZTgtMTZmZDViYTRmMGU0
LzEvU1Y1UUFVbk9qWEc1WUV0WW5nd3lfcUI2bUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnAYXSmP
lmlREb7foRPcpaEqYJ1YsJ2GS6xw0N+AGO4FbH97vEJ9BazKbUlkF/KXTeEHrlvT
xLtngZe4Tp1Jam7u3N7imIK5S0F8P0/EVY8Sk2oZJ+Mlc0rHF7RaOBeaLBg891wl
nWL1Z0fIa4evJkRKGBZwsrKR+x67bsj8FRf4bQ6APk/e7q+UtCKzhFRXxB8JDj9d
ukeHhCRCc2QndCiwtfg/LTV8cz1o1INVSGoCUN55XaLuS0M8FQTQcu/mFAi2w3DJ
Q01hvRBFdBVHEk8Xo+TcdKhfRpBbH9HEBRVbeOpuvvAtJdPFBhOgzuJghByVdP3t
GhWIC57xhHruYA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:40 2025 by rpki-client