Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File:                     vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier:          Y8fl/yCo2ALofvhvDJ79uFEOYUwd64WmeCJJjKwORyE=
Subject key identifier:   56:2D:81:4F:95:62:5E:C4:C5:42:60:AB:58:46:64:20:FC:C0:D6:89
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer:       /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial:       019A1D62EAF980E5B925C9B9D89D8186C4F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number:          16F7
Signing time:             Sat 25 Oct 2025 22:00:13 +0000
Manifest this update:     Sat 25 Oct 2025 22:00:13 +0000
Manifest next update:     Sun 26 Oct 2025 22:00:13 +0000
Files and hashes:         1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=)
                          2: NapDO-qA7UAI5E6E7u_3VLwwM-s.roa (hash: iMhIICohdfOIKJztiTyPfcGxnS6EMr6CVn/3WJubO/g=)
                          3: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=)
                          4: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: h4Jcgk2xlvE4ovnryfszVLi8jKWr6YLvfUZAScpDDaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:62:ea:f9:80:e5:b9:25:c9:b9:d8:9d:81:86:c4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
        Validity
            Not Before: Oct 25 22:00:13 2025 GMT
            Not After : Oct 26 22:00:13 2025 GMT
        Subject: CN=562d814f95625ec4c54260ab58466420fcc0d689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:d3:90:f8:11:35:10:85:8e:69:05:54:6f:
                    79:fe:4d:85:43:7f:ab:4e:1d:5b:7c:94:a0:37:51:
                    cb:d5:df:3c:fb:b0:13:68:4b:be:db:65:ca:bc:b3:
                    50:fa:cf:4b:a5:70:d6:5a:ca:68:6f:af:9d:ec:32:
                    c8:a6:47:55:14:03:e5:86:95:a4:fe:58:f2:08:7e:
                    4d:b9:7b:e9:0f:34:11:58:c0:9d:cf:9f:bb:30:f7:
                    31:c6:8d:5e:ea:2f:4d:cc:7d:7a:83:f1:1a:f7:e2:
                    2a:b6:2f:35:ab:d6:48:21:39:d5:17:bf:0b:d9:cc:
                    7a:e5:43:93:bc:2a:d5:dc:1c:8a:ea:e7:48:41:ee:
                    e4:0e:7e:76:33:a4:3d:7a:f3:ff:5f:aa:44:e4:07:
                    2a:d2:08:17:56:4e:bb:7d:86:a7:bd:ea:52:4c:6a:
                    82:2d:35:2a:af:20:cf:08:6a:e9:01:46:92:f6:8c:
                    3e:0c:e3:7d:a6:e1:7b:6b:db:2c:a9:3c:bb:a3:b1:
                    5e:4e:dd:f9:38:f2:c3:dc:24:24:0c:79:94:f2:f9:
                    fc:52:79:78:03:c6:9d:b8:bc:36:a8:e3:48:bf:72:
                    ae:af:9d:a6:2b:2f:1b:a6:c9:83:5a:b6:4d:dd:82:
                    f0:87:b8:8c:f6:33:50:da:6c:ec:70:5a:f8:d3:e4:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2D:81:4F:95:62:5E:C4:C5:42:60:AB:58:46:64:20:FC:C0:D6:89
            X509v3 Authority Key Identifier:
                keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:04:ad:69:77:2f:ec:4a:80:f0:97:61:f1:ed:9a:4b:30:88:
         b5:66:d4:fe:32:2f:2f:be:81:e5:f9:17:06:67:22:6f:be:47:
         2b:c9:bc:c4:32:c9:f9:a4:80:9e:d2:59:23:f6:fd:e7:7e:38:
         44:25:58:81:00:77:bd:6b:37:c0:ce:21:9f:72:00:ad:a5:9a:
         6e:eb:91:55:3a:28:d6:d4:87:8b:e5:21:55:24:ba:0a:78:cb:
         89:3b:44:14:45:b9:ba:12:19:ac:47:b5:f2:82:fd:bc:da:9f:
         c5:d6:05:25:d1:74:1b:f1:c8:12:5d:56:d7:12:96:10:c6:71:
         7f:98:43:17:63:08:b6:78:db:d1:e9:0a:3a:a3:42:8a:ff:b5:
         07:3c:6a:4f:4c:bf:45:2d:6c:a2:d4:ac:44:b5:05:8f:2c:18:
         27:6d:fc:eb:98:42:a0:d1:34:5b:f7:39:70:42:c7:4c:0d:7e:
         5b:ab:98:bf:35:11:f6:24:60:66:1e:74:75:36:1b:e9:75:b3:
         71:4b:bb:f3:41:f4:77:21:11:aa:34:51:d2:83:70:b8:8a:eb:
         b4:aa:06:29:6e:5a:30:55:ad:9a:fa:a6:9d:7f:08:9f:a2:c0:
         93:3b:84:21:65:db:e3:da:55:3e:9f:c3:3e:96:e1:df:42:1c:
         da:a6:f3:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodYur5gOW5Jcm52J2BhsT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNTZkYjc5NmRlZjBkYmRiNGM3OGYyNDQ1YWJlY2MxNTcw
YTZmZDkwHhcNMjUxMDI1MjIwMDEzWhcNMjUxMDI2MjIwMDEzWjAzMTEwLwYDVQQD
Eyg1NjJkODE0Zjk1NjI1ZWM0YzU0MjYwYWI1ODQ2NjQyMGZjYzBkNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzjTkPgRNRCFjmkFVG95/k2FQ3+r
Th1bfJSgN1HL1d88+7ATaEu+22XKvLNQ+s9LpXDWWspob6+d7DLIpkdVFAPlhpWk
/ljyCH5NuXvpDzQRWMCdz5+7MPcxxo1e6i9NzH16g/Ea9+Iqti81q9ZIITnVF78L
2cx65UOTvCrV3ByK6udIQe7kDn52M6Q9evP/X6pE5Acq0ggXVk67fYanvepSTGqC
LTUqryDPCGrpAUaS9ow+DON9puF7a9ssqTy7o7FeTt35OPLD3CQkDHmU8vn8Unl4
A8aduLw2qONIv3Kur52mKy8bpsmDWrZN3YLwh7iM9jNQ2mzscFr40+QxcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYtgU+VYl7ExUJgq1hGZCD8wNaJMB8GA1UdIwQY
MBaAFLxW23lt7w29tMePJEWr7MFXCm/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUt
MWVjNzIxZmEyYTMwLzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC84YjliZDktM2Y2Mi00ZTMwLTgwODUtMWVjNzIxZmEyYTMw
LzEvdkZiYmVXM3ZEYjIweDQ4a1JhdnN3VmNLYjlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQStaXcv
7EqA8Jdh8e2aSzCItWbU/jIvL76B5fkXBmcib75HK8m8xDLJ+aSAntJZI/b95344
RCVYgQB3vWs3wM4hn3IAraWabuuRVToo1tSHi+UhVSS6CnjLiTtEFEW5uhIZrEe1
8oL9vNqfxdYFJdF0G/HIEl1W1xKWEMZxf5hDF2MItnjb0ekKOqNCiv+1BzxqT0y/
RS1sotSsRLUFjywYJ23865hCoNE0W/c5cELHTA1+W6uYvzUR9iRgZh50dTYb6XWz
cUu780H0dyERqjRR0oNwuIrrtKoGKW5aMFWtmvqmnX8In6LAkzuEIWXb49pVPp/D
Ppbh30Ic2qbzFQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 03:17:31 2025 by rpki-client