Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File:                     gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier:          /CW4BjXXDfzy3BoZXFRNaY/bsavN07KFYwhTewLbRlQ=
Subject key identifier:   C5:0A:D2:96:0B:D1:91:51:66:DA:74:8D:78:70:95:E0:93:6B:83:11
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer:       /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial:       0199FCFD5F469AE5E1B5EA262DFC273B9C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number:          0D5F
Signing time:             Sun 19 Oct 2025 15:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:27 +0000
Files and hashes:         1: 8IUfLut7BygQV_kfUjYxZ6R1hWo.roa (hash: osXEgzEeRLXEDV95MIWOG4REHDOr18vMvAPD5SIJRo8=)
                          2: e906IBwj4MSiW-e8owQAWsQ_4Jo.roa (hash: P83ELX1oAyr6YQ0Ab0RC6iwmwrr6PxLhv5UjiehFQxc=)
                          3: eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa (hash: ytxhtvq1ezR1if4ipOboDxmwy8xQfyDHM3VrrrzA9pU=)
                          4: g2b35-nULZDfmdIQobQp625Nk-I.roa (hash: daDEnydg6U3m1GEZ8hWZT3NDMPEI2dbQkvddvsu4lNo=)
                          5: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: MDuoFV7mxAoIMnZQmHlLSIYiSEHY0c/dkLLFi8ZxHwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:5f:46:9a:e5:e1:b5:ea:26:2d:fc:27:3b:9c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
        Validity
            Not Before: Oct 19 15:01:27 2025 GMT
            Not After : Oct 20 15:01:27 2025 GMT
        Subject: CN=c50ad2960bd1915166da748d787095e0936b8311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:98:d9:d2:13:cc:06:94:e3:c1:ed:1b:41:
                    d5:4b:aa:e8:42:ee:95:24:79:0e:f6:4e:bf:37:b0:
                    f9:b7:dc:ea:82:4f:63:1e:1a:fe:80:b2:80:d6:c9:
                    c0:c3:96:f4:6f:36:63:fe:c4:ad:22:53:a6:26:bd:
                    bd:7b:bc:23:57:13:6f:45:41:7f:29:6c:e4:3c:52:
                    07:4f:fe:af:1d:bb:59:8d:c6:4c:cb:b5:13:ea:0c:
                    1c:eb:fa:c6:98:24:35:79:ad:bc:6d:ab:d6:05:9b:
                    34:77:08:1d:87:87:5d:bd:8b:7d:9c:ec:ed:89:51:
                    f2:4c:77:a9:ba:ec:b7:a5:18:34:53:b6:f2:5f:81:
                    51:31:ae:f9:e8:08:db:3f:56:df:5b:e7:57:5e:96:
                    dc:94:23:a3:87:02:d1:f5:04:f0:e9:1b:0f:0b:95:
                    e4:27:03:0d:d3:9c:18:03:55:03:91:8a:19:6a:0d:
                    eb:62:35:8b:0a:8b:98:62:b6:ec:51:b2:77:a3:e0:
                    d5:92:e9:eb:1c:2f:59:f9:6f:ab:ef:b6:3c:9c:b3:
                    d8:fe:41:a3:f5:74:e8:bf:0e:08:9a:d9:85:db:c8:
                    f4:1b:e3:c9:30:05:3d:ad:ba:64:06:c8:0b:28:1a:
                    cb:63:b8:6b:1c:57:d0:ba:43:49:fa:84:36:96:fb:
                    d3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0A:D2:96:0B:D1:91:51:66:DA:74:8D:78:70:95:E0:93:6B:83:11
            X509v3 Authority Key Identifier:
                keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:80:aa:49:d2:2a:64:18:ac:a6:7d:c0:54:e7:17:78:aa:d7:
         c3:d0:58:fd:4d:eb:f0:32:ac:be:b6:6a:35:b6:13:cf:fb:10:
         e8:4c:e1:e8:4c:95:ce:a6:fd:27:4f:5b:3d:85:32:b5:9a:d3:
         6a:e2:79:97:d3:12:4d:2c:f2:b6:6e:d7:44:e3:43:64:35:3a:
         a4:72:ce:83:7a:e8:7b:b5:c6:98:e2:83:3d:ec:89:f8:b4:6b:
         37:aa:37:2a:26:b1:b1:c4:d7:d5:02:d4:ff:ad:9c:68:52:fe:
         9a:94:76:06:a7:b5:29:7a:f2:66:6d:50:af:00:9c:53:2c:80:
         a7:80:a5:fd:d2:f4:4e:97:a0:12:3d:24:f4:dd:64:70:89:aa:
         65:67:37:27:2a:71:32:e1:b5:3f:26:e7:5a:4c:0c:ad:50:fb:
         61:f2:9d:f2:6d:04:f4:23:82:70:17:3d:6d:62:0e:af:3f:c6:
         9f:a7:b3:a1:dc:3f:6b:fe:37:e8:5b:a5:74:fe:53:4d:6a:90:
         63:46:a0:58:8b:44:5b:55:cf:96:30:bc:89:6d:6e:7e:17:2d:
         14:79:45:53:9a:3a:5a:2d:e9:a6:1b:eb:13:15:0b:0b:eb:16:
         3a:77:41:8d:d4:43:c6:21:7f:ab:12:ef:7c:f0:71:29:cd:34:
         bb:e7:d7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/V9GmuXhteomLfwnO5xdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNzlhZmNiYTVhODc2MmZiNzlmNGU1ZTBkN2EzNWVlODRj
ZDNkZjQwHhcNMjUxMDE5MTUwMTI3WhcNMjUxMDIwMTUwMTI3WjAzMTEwLwYDVQQD
EyhjNTBhZDI5NjBiZDE5MTUxNjZkYTc0OGQ3ODcwOTVlMDkzNmI4MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydCY2dITzAaU48HtG0HVS6roQu6V
JHkO9k6/N7D5t9zqgk9jHhr+gLKA1snAw5b0bzZj/sStIlOmJr29e7wjVxNvRUF/
KWzkPFIHT/6vHbtZjcZMy7UT6gwc6/rGmCQ1ea28bavWBZs0dwgdh4ddvYt9nOzt
iVHyTHepuuy3pRg0U7byX4FRMa756AjbP1bfW+dXXpbclCOjhwLR9QTw6RsPC5Xk
JwMN05wYA1UDkYoZag3rYjWLCouYYrbsUbJ3o+DVkunrHC9Z+W+r77Y8nLPY/kGj
9XTovw4ImtmF28j0G+PJMAU9rbpkBsgLKBrLY7hrHFfQukNJ+oQ2lvvTowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUK0pYL0ZFRZtp0jXhwleCTa4MRMB8GA1UdIwQY
MBaAFIB5r8ulqHYvt59OXg16Ne6EzT30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMt
ZDJlMTBjOTc2NDVmLzEvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kNWViNmYtYjc4MS00ZDUyLTgyODMtZDJlMTBjOTc2NDVm
LzEvZ0htdnk2V29kaS0zbjA1ZURYbzE3b1ROUGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoCqSdIq
ZBispn3AVOcXeKrXw9BY/U3r8DKsvrZqNbYTz/sQ6Ezh6EyVzqb9J09bPYUytZrT
auJ5l9MSTSzytm7XRONDZDU6pHLOg3roe7XGmOKDPeyJ+LRrN6o3KiaxscTX1QLU
/62caFL+mpR2Bqe1KXryZm1QrwCcUyyAp4Cl/dL0TpegEj0k9N1kcImqZWc3Jypx
MuG1PybnWkwMrVD7YfKd8m0E9COCcBc9bWIOrz/Gn6ezodw/a/436FuldP5TTWqQ
Y0agWItEW1XPljC8iW1ufhctFHlFU5o6Wi3pphvrExULC+sWOndBjdRDxiF/qxLv
fPBxKc00u+fXiQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:14 2025 by rpki-client