Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          1SrucNgK5n5qNrCW0jFytkF3dpkMpkMR51pk831Sj/Y=
Subject key identifier:   52:4D:6A:30:0E:21:50:EA:77:23:5C:B1:2A:7F:1C:2C:76:6C:02:7E
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       0199FAA10CB7C060C4D8A7512A844808718A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          1212
Signing time:             Sun 19 Oct 2025 04:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:22 +0000
Files and hashes:         1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=)
                          2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=)
                          3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=)
                          4: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=)
                          5: HTIT17mRc9e31Xn9TEUf-JUYEKw.roa (hash: o+qmexnhIWhbYDzE4H1wC704iZvwZtN0i6d8jZKUoCg=)
                          6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=)
                          7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=)
                          8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=)
                          9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=)
                          10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=)
                          11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=)
                          12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=)
                          13: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=)
                          14: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=)
                          15: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=)
                          16: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=)
                          17: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=)
                          18: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=)
                          19: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=)
                          20: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: HywqgliI0raIQH+Pnl+i92WJdqK4Qw2R5niEmK8hNow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:0c:b7:c0:60:c4:d8:a7:51:2a:84:48:08:71:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Oct 19 04:01:22 2025 GMT
            Not After : Oct 20 04:01:22 2025 GMT
        Subject: CN=524d6a300e2150ea77235cb12a7f1c2c766c027e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c8:84:ec:90:14:09:5c:b9:61:81:59:e3:95:
                    fd:b9:9c:b8:36:8a:1c:11:11:dd:78:d5:69:51:65:
                    e1:cd:f1:f1:84:10:16:24:4e:fa:ad:55:05:a0:75:
                    f9:5f:b4:99:00:6f:1a:6c:e8:f6:8d:fb:3c:5a:34:
                    0f:80:ab:12:a1:8f:8b:c1:ca:43:6c:70:f9:2e:6b:
                    61:71:98:45:38:78:cf:1b:c4:c6:cd:92:43:ee:0e:
                    d4:a4:a9:2c:36:12:39:34:40:fc:3b:5f:c9:73:c2:
                    46:90:c5:db:d1:01:b5:f8:53:37:75:b0:db:7f:96:
                    21:de:a6:36:4c:56:f4:60:e2:f1:36:d3:78:bd:b9:
                    23:6e:31:cf:9a:c9:fa:71:60:a6:59:a0:b2:9c:96:
                    40:d1:82:53:fb:93:42:59:d8:4c:31:ed:1b:c1:2e:
                    8c:e6:16:b7:ed:ba:d2:a6:da:67:60:93:a6:4b:9c:
                    af:b3:c7:2d:e1:c7:69:db:08:da:3a:67:46:b3:f6:
                    6d:74:25:db:b4:f8:90:ac:94:2d:f6:bd:4e:c4:e5:
                    83:23:8e:18:72:93:5e:d8:af:cb:6a:f5:1c:f6:47:
                    37:5f:f5:7a:06:3d:aa:db:9c:90:48:90:48:6c:f7:
                    9d:db:45:2c:44:f4:8e:87:be:96:3d:0e:c2:00:e0:
                    3f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4D:6A:30:0E:21:50:EA:77:23:5C:B1:2A:7F:1C:2C:76:6C:02:7E
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:62:28:fb:cc:e8:1d:dd:3f:1d:e8:fb:48:bd:2b:76:8f:
         2e:bb:ea:86:c3:d2:3b:f1:75:e2:65:e0:28:69:ab:a5:82:4b:
         f1:ca:86:09:6e:37:90:6e:70:a4:a4:0c:59:0c:4b:5c:e3:68:
         a6:20:e6:6b:30:fc:60:21:46:9e:26:a4:9c:25:da:97:7b:93:
         f7:f2:5d:d8:b3:38:01:ce:e4:89:22:fc:5e:a5:63:4e:c1:7e:
         09:e0:78:01:36:36:19:f8:7d:1a:e5:34:aa:0d:99:07:4e:65:
         36:49:d7:74:0b:8a:bb:cb:2b:82:17:e8:ca:9e:0a:72:5b:14:
         89:a4:fa:67:c4:9c:85:b8:07:86:a5:fd:34:62:8b:87:8c:50:
         f2:2d:ae:5a:ea:e0:57:1d:f4:92:66:e8:5c:dd:68:1b:61:7c:
         e0:f1:73:c2:c2:8e:d8:fc:c6:db:b7:99:79:f4:08:2c:08:4f:
         7b:55:d1:54:ee:e2:3b:b9:a3:82:72:0e:87:27:d0:0c:7b:44:
         4f:c5:30:61:98:df:70:5b:a0:34:30:51:ac:11:ec:03:d6:eb:
         dc:49:c5:9a:e1:fc:11:43:45:72:4e:08:e7:3e:cc:36:54:73:
         0b:6e:9f:de:31:33:f2:38:be:3d:24:ac:59:96:84:4b:3f:ff:
         43:8c:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:30 2025 by rpki-client