Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          mDbHQGvz0vIqybsJAQjRqNo39TG083Z265qTz3Ym5ig=
Subject key identifier:   59:F4:81:C7:9D:90:A5:CC:D9:B2:90:B2:FD:FD:11:A9:D8:03:BC:5F
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       019A00A32134A84D706008B98D3A28769489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          0E6A
Signing time:             Mon 20 Oct 2025 08:01:22 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:22 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:22 +0000
Files and hashes:         1: 1aXSgr_gUgovXfJiITFePiXzxSk.roa (hash: jkxbT1LZqZ8DIR9TrEhNrVWEu3vyrY3VEx/71A/Vpxo=)
                          2: 9bZMaVRDUPty_7efLT2YpkpIYcM.roa (hash: CtsPPucmvohErAHToYEeV/HheWSPpHxQEHc0Z1mOfCU=)
                          3: AtctRtEqNWKPB5rlQKlPqC6yWDs.roa (hash: 05XetyyHEDIPnW6uLoBtl5Z9uPB/DAO88wvWzPJ/MPs=)
                          4: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: ZVMTCNvTNoapxT3JYBX1uNK0w4Fa760Kia39UzsX2wI=)
                          5: PSBx1Ap1dSVwu4S3zItuhXFXT84.roa (hash: BJW2moxRlz3fWDKj7aaF6fzBur3RzPQUthWd7EvMjfQ=)
                          6: Yv5Vb1UYXxXLpSQFLwUNvoBL1uk.roa (hash: zQenlhAbszJDRqh2xIFTp2RhN0nwTs4w2oT1T/Kp9dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:21:34:a8:4d:70:60:08:b9:8d:3a:28:76:94:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Oct 20 08:01:22 2025 GMT
            Not After : Oct 21 08:01:22 2025 GMT
        Subject: CN=59f481c79d90a5ccd9b290b2fdfd11a9d803bc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:a0:15:1d:ff:bc:a1:4b:3c:e3:44:72:2d:
                    3d:bb:8d:59:c3:54:e2:01:9d:7a:da:2d:10:99:e8:
                    35:d6:5d:28:5a:35:78:13:c3:ed:4a:fc:45:ed:80:
                    4d:65:43:38:b3:ee:ce:61:e6:c1:d8:27:bb:b1:c8:
                    45:39:70:d8:76:31:90:78:54:fb:99:70:d3:85:d0:
                    80:f3:1a:3d:82:eb:d2:6b:bd:84:89:53:cd:1b:80:
                    c7:fa:cf:05:11:ea:8b:a3:fe:46:10:72:32:e2:0c:
                    e9:ed:ed:31:2e:f4:d2:6b:1d:2b:1f:00:2e:a6:cc:
                    14:68:26:3c:4d:0d:8e:e5:7b:00:cf:d7:13:30:2b:
                    d2:a1:07:0c:a7:c0:1c:96:49:cf:f7:a1:1b:7f:a2:
                    93:67:cb:78:ef:5d:18:65:d1:d7:0d:74:de:17:1d:
                    fb:58:ce:69:a8:c5:98:85:ed:49:56:9a:e4:b3:9d:
                    06:bc:b7:ba:f3:55:cb:e8:fd:b1:62:82:70:4c:15:
                    75:88:23:d7:07:52:a6:ba:4d:2c:91:94:5a:a0:7f:
                    63:df:71:9b:a0:ae:97:77:9e:13:77:10:a4:f5:b8:
                    08:0a:c4:23:da:76:18:6e:c8:9c:ae:be:de:33:69:
                    63:46:d4:2a:37:c2:56:70:17:a4:0b:50:bf:8c:ee:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F4:81:C7:9D:90:A5:CC:D9:B2:90:B2:FD:FD:11:A9:D8:03:BC:5F
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:5f:d9:6b:66:5f:5f:98:a1:df:0c:4e:38:7f:59:9f:b5:
         0d:50:57:d2:da:65:6a:38:c0:68:eb:3a:99:34:59:c6:4e:ec:
         61:60:89:0d:0e:b9:4a:61:9b:89:dd:02:69:f2:28:5c:67:4f:
         2c:34:d1:74:bd:1e:d9:19:c4:0e:63:37:b7:b8:04:3c:f9:b0:
         28:66:16:7e:d5:7d:8b:00:61:d3:32:c4:d3:f4:ae:67:0b:6e:
         41:9d:59:b8:77:a4:92:5d:5f:80:77:f2:e3:51:15:d8:ba:b7:
         3f:16:9f:a0:78:4a:de:89:2e:5f:9a:cd:7b:b0:db:df:bf:f7:
         22:f6:32:c2:af:db:a4:82:25:46:38:cc:66:48:e3:64:6d:b3:
         a7:5c:f3:14:4f:f5:88:b6:21:b7:1d:df:82:f5:0a:02:d0:34:
         9f:56:0f:fe:17:79:79:6f:c3:9e:44:dd:66:8f:c6:0e:ff:5a:
         e6:8d:4b:4b:57:97:6a:e0:5a:94:b7:a5:a7:11:e6:dc:ad:9b:
         8d:3e:95:84:91:67:8e:c5:2d:c9:a3:44:71:2e:71:1a:9c:ef:
         fd:8d:98:45:5b:00:f2:e3:90:4d:ae:76:e0:b4:b9:68:3d:0a:
         12:89:0f:b7:3f:b3:69:2b:f2:89:00:95:ea:06:13:d8:a4:5e:
         80:f7:44:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAoyE0qE1wYAi5jToodpSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxY2IyYWMzNzdmYzYwM2Y5NWZhZWNjNTRhYzdkNTkwZjJj
YzMxOWQwHhcNMjUxMDIwMDgwMTIyWhcNMjUxMDIxMDgwMTIyWjAzMTEwLwYDVQQD
Eyg1OWY0ODFjNzlkOTBhNWNjZDliMjkwYjJmZGZkMTFhOWQ4MDNiYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bigFR3/vKFLPONEci09u41Zw1Ti
AZ162i0Qmeg11l0oWjV4E8PtSvxF7YBNZUM4s+7OYebB2Ce7schFOXDYdjGQeFT7
mXDThdCA8xo9guvSa72EiVPNG4DH+s8FEeqLo/5GEHIy4gzp7e0xLvTSax0rHwAu
pswUaCY8TQ2O5XsAz9cTMCvSoQcMp8AclknP96Ebf6KTZ8t4710YZdHXDXTeFx37
WM5pqMWYhe1JVprks50GvLe681XL6P2xYoJwTBV1iCPXB1Kmuk0skZRaoH9j33Gb
oK6Xd54TdxCk9bgICsQj2nYYbsicrr7eM2ljRtQqN8JWcBekC1C/jO6erwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn0gcedkKXM2bKQsv39EanYA7xfMB8GA1UdIwQY
MBaAFCHLKsN3/GA/lfrsxUrH1ZDyzDGdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUt
ZmI0MGQ2ZGEyNDY4LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82N2MyMWQtMGU5Mi00MjQyLTk5NGUtZmI0MGQ2ZGEyNDY4
LzEvSWNzcXczZjhZRC1WLXV6RlNzZlZrUExNTVowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiApf2Wtm
X1+Yod8MTjh/WZ+1DVBX0tplajjAaOs6mTRZxk7sYWCJDQ65SmGbid0CafIoXGdP
LDTRdL0e2RnEDmM3t7gEPPmwKGYWftV9iwBh0zLE0/SuZwtuQZ1ZuHekkl1fgHfy
41EV2Lq3PxafoHhK3okuX5rNe7Db37/3IvYywq/bpIIlRjjMZkjjZG2zp1zzFE/1
iLYhtx3fgvUKAtA0n1YP/hd5eW/DnkTdZo/GDv9a5o1LS1eXauBalLelpxHm3K2b
jT6VhJFnjsUtyaNEcS5xGpzv/Y2YRVsA8uOQTa524LS5aD0KEokPtz+zaSvyiQCV
6gYT2KRegPdEdA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:03:02 2025 by rpki-client