Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File:                     nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier:          IVcB8j7hz3jhNjyNXFAig0JM/dAsxQ6id7so6yUGTtY=
Subject key identifier:   78:2A:50:77:37:9E:DD:39:CA:7B:62:7A:EA:AD:28:12:24:19:50:90
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer:       /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial:       0199FC8FC08149BD67590EFC2D0C0113A85B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number:          1701
Signing time:             Sun 19 Oct 2025 13:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:43 +0000
Files and hashes:         1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
                          2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
                          3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
                          4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
                          5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
                          6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: XfpGI3FurwtsUM8clry3QRzTgEsvHtBMZYR+HNKy/LA=)
                          7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
                          8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
                          9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:c0:81:49:bd:67:59:0e:fc:2d:0c:01:13:a8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
        Validity
            Not Before: Oct 19 13:01:43 2025 GMT
            Not After : Oct 20 13:01:43 2025 GMT
        Subject: CN=782a5077379edd39ca7b627aeaad281224195090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:37:b6:fe:d9:48:4c:83:51:c2:9d:70:b4:
                    8f:03:d2:c2:7f:f0:bb:67:d2:f4:ca:48:90:26:fb:
                    b0:36:b6:20:54:9d:1b:eb:05:c5:d0:d6:d2:4b:d1:
                    c6:6b:f4:ab:a2:37:23:d6:07:4d:af:b0:de:aa:3b:
                    ef:be:f1:f1:30:62:a2:a9:70:51:a9:16:73:0c:92:
                    e6:50:e6:f1:17:91:97:29:02:e6:4a:85:a5:37:91:
                    52:f7:c8:f7:8e:8c:20:b0:41:61:69:ed:5b:01:ff:
                    a2:1f:5f:cf:d8:b6:5a:7d:e6:40:90:10:68:e7:a3:
                    36:d5:c6:94:f7:7f:51:22:22:bd:e3:e3:b1:e4:a6:
                    77:8f:cb:59:14:d8:82:b5:33:eb:88:71:48:74:b8:
                    df:a9:cc:dc:94:00:ee:42:da:89:bf:97:f1:45:6f:
                    39:c9:3b:74:d9:86:f8:5d:78:89:ca:bc:b3:ef:83:
                    26:f6:31:de:05:54:91:ef:74:09:83:9d:11:da:63:
                    2e:2a:6c:fe:05:af:4f:83:02:6a:21:1b:a4:b0:42:
                    71:89:56:49:91:f3:27:57:91:4a:1b:d5:da:8a:a6:
                    52:0e:cf:ef:32:d7:ff:6d:2f:fd:56:fb:a2:1c:2c:
                    6c:ab:65:39:80:48:a3:67:c1:71:ce:29:b8:15:69:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2A:50:77:37:9E:DD:39:CA:7B:62:7A:EA:AD:28:12:24:19:50:90
            X509v3 Authority Key Identifier:
                keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4f:6b:b9:3e:45:c4:31:16:86:3c:67:6a:7f:2f:34:6d:25:
         2c:5a:8d:00:c9:50:c4:e9:32:7a:25:bc:70:67:6e:77:69:e3:
         1a:1f:08:ef:72:70:62:5f:36:ff:f3:57:f6:d2:c2:61:f8:a1:
         47:a9:71:cc:8e:9a:12:5b:d9:aa:3a:6d:68:07:d7:6b:c6:8d:
         e7:19:9e:cb:30:61:50:cf:27:d4:e5:b6:b4:01:ec:75:3e:ee:
         6f:0c:60:7e:8c:91:5f:b9:8c:2a:3f:36:b7:4e:6a:6f:fe:ff:
         9e:3e:96:51:55:e8:5d:1c:b5:bc:45:c3:c0:71:7a:2a:7f:83:
         52:9f:81:30:42:dc:60:d3:63:34:c9:bb:f0:85:b3:c2:06:1c:
         df:40:60:8c:e1:00:d6:94:19:27:8e:9d:c9:d3:c6:1e:9f:9f:
         bd:b6:1f:04:c3:64:e6:b3:f1:10:b1:cf:56:17:3b:ac:61:46:
         05:3f:38:c5:0b:a0:9e:da:91:66:40:f0:48:68:e6:43:ba:21:
         fc:8c:3c:43:bd:26:93:82:31:07:ba:2f:32:dd:8f:bb:64:a5:
         97:ba:a0:7b:ce:40:32:e6:7b:79:0f:af:33:50:fd:5c:6f:6d:
         fb:88:fa:9b:a8:3a:5a:7b:2a:bc:bc:18:c9:1c:c1:63:cb:7b:
         a9:e0:5d:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j8CBSb1nWQ78LQwBE6hbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw
NmViNzkwHhcNMjUxMDE5MTMwMTQzWhcNMjUxMDIwMTMwMTQzWjAzMTEwLwYDVQQD
Eyg3ODJhNTA3NzM3OWVkZDM5Y2E3YjYyN2FlYWFkMjgxMjI0MTk1MDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pg3tv7ZSEyDUcKdcLSPA9LCf/C7
Z9L0ykiQJvuwNrYgVJ0b6wXF0NbSS9HGa/Srojcj1gdNr7DeqjvvvvHxMGKiqXBR
qRZzDJLmUObxF5GXKQLmSoWlN5FS98j3jowgsEFhae1bAf+iH1/P2LZafeZAkBBo
56M21caU939RIiK94+Ox5KZ3j8tZFNiCtTPriHFIdLjfqczclADuQtqJv5fxRW85
yTt02Yb4XXiJyryz74Mm9jHeBVSR73QJg50R2mMuKmz+Ba9PgwJqIRuksEJxiVZJ
kfMnV5FKG9XaiqZSDs/vMtf/bS/9VvuiHCxsq2U5gEijZ8Fxzim4FWmZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgqUHc3nt05yntieuqtKBIkGVCQMB8GA1UdIwQY
MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt
MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0
LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI09ruT5F
xDEWhjxnan8vNG0lLFqNAMlQxOkyeiW8cGdud2njGh8I73JwYl82//NX9tLCYfih
R6lxzI6aElvZqjptaAfXa8aN5xmeyzBhUM8n1OW2tAHsdT7ubwxgfoyRX7mMKj82
t05qb/7/nj6WUVXoXRy1vEXDwHF6Kn+DUp+BMELcYNNjNMm78IWzwgYc30BgjOEA
1pQZJ46dydPGHp+fvbYfBMNk5rPxELHPVhc7rGFGBT84xQugntqRZkDwSGjmQ7oh
/Iw8Q70mk4IxB7ovMt2Pu2Sll7qge85AMuZ7eQ+vM1D9XG9t+4j6m6g6WnsqvLwY
yRzBY8t7qeBdaw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:03 2025 by rpki-client