Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          Ir8FhCD4GH7tajtrnNbWQPiTnSrcAQsGD3MC5m8jUhI=
Subject key identifier:   52:7A:BC:DB:87:BC:08:F4:37:E7:5D:85:71:6A:12:BA:29:24:59:CB
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       0199FB7CAA7CE6CA4DD093C117C5FB08DBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          1170
Signing time:             Sun 19 Oct 2025 08:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:15 +0000
Files and hashes:         1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=)
                          2: 5Y2NPf-2wwHQNFwN222T-_ksWjs.roa (hash: 7vHIYZQTiGeFh0mU2zpcuuX7KVBld5DcIlwlMA6in8o=)
                          3: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=)
                          4: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=)
                          5: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: EAG413IF9a9gpZPxEPbcdVTW/o7LrQkXSMjFaJ67Ch0=)
                          6: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=)
                          7: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:aa:7c:e6:ca:4d:d0:93:c1:17:c5:fb:08:db:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: Oct 19 08:01:15 2025 GMT
            Not After : Oct 20 08:01:15 2025 GMT
        Subject: CN=527abcdb87bc08f437e75d85716a12ba292459cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:85:93:56:53:0b:c2:e9:36:5d:06:8f:64:f7:
                    c4:8e:3c:5d:0e:0f:9f:da:11:38:25:47:fd:8d:42:
                    d0:59:ea:23:3f:ce:d8:ae:c9:84:6a:95:fc:5e:cb:
                    79:6b:05:34:7e:16:af:7b:2b:69:e8:24:28:45:cd:
                    49:a8:b6:1f:a9:b2:43:7f:fd:cf:f6:1e:95:a6:ba:
                    d8:8c:a0:16:90:ac:db:6f:40:ca:bb:45:df:48:18:
                    ca:ef:17:6b:a1:bf:06:2b:77:dc:10:82:1e:41:4a:
                    1a:94:50:24:3a:42:5e:c7:5a:75:a4:8f:fd:0c:11:
                    23:9f:6b:91:5d:d4:40:c2:0e:7b:8f:92:5a:24:e2:
                    b6:b5:85:16:64:00:bd:21:3f:fe:7e:4c:74:59:b1:
                    ff:8d:f3:89:5e:2f:60:5c:5f:06:a5:2a:bd:96:2c:
                    4f:ca:d1:a1:44:8f:13:3c:b6:d9:75:e7:d5:c4:c2:
                    da:c9:0e:85:d3:fc:35:0e:1f:b0:91:5a:8c:da:c9:
                    2b:be:a5:18:cf:eb:89:8e:a2:29:ae:4a:ac:12:0a:
                    b7:c3:ad:1b:f6:09:f8:0b:b7:a6:b5:64:27:38:c8:
                    00:18:63:16:1f:5f:74:7d:53:dd:48:af:eb:64:4a:
                    28:91:c8:f2:34:cc:64:e1:2e:6d:ac:9c:9a:54:de:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:BC:DB:87:BC:08:F4:37:E7:5D:85:71:6A:12:BA:29:24:59:CB
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a6:e2:6e:94:f4:98:77:5a:08:de:af:c0:ec:7c:e1:73:4a:
         df:0f:21:b9:cd:ac:6b:dc:d4:0f:1b:a5:7d:db:d4:8a:c2:d6:
         12:b1:a5:1f:f4:db:93:df:03:73:b8:52:9b:97:74:32:ae:f4:
         4b:f6:c9:89:ab:eb:8c:e9:79:8d:31:90:c8:53:42:71:93:b9:
         fe:35:60:9c:1c:af:9c:2d:8d:26:6c:14:6c:a1:3e:b9:2e:54:
         4e:4d:e7:e2:d6:25:14:09:79:7c:0a:32:c7:49:7c:d6:4b:7f:
         5c:06:8d:ff:68:04:c4:b5:29:77:9d:63:01:07:ee:c4:58:b2:
         b4:0a:9f:96:72:bb:32:82:f9:9e:53:fb:3d:67:82:96:95:6d:
         8f:af:f4:83:ef:c5:ee:16:f5:fd:7c:34:a4:a3:34:86:b9:7f:
         16:f8:85:f1:a7:48:e0:38:f1:8e:c1:89:b0:fc:56:71:a8:09:
         50:9f:7e:ee:f1:19:72:2e:28:3a:d6:c0:c6:57:50:ad:36:04:
         3e:d5:8f:88:78:fe:3a:cc:85:5a:1c:fe:5a:1c:be:61:3c:a3:
         bb:e5:06:1b:e1:d4:5a:33:67:c7:a1:b1:ad:66:8b:f5:45:53:
         1c:ed:9d:93:ab:50:e2:ab:e9:48:21:b6:a3:bb:18:85:2d:ce:
         5b:c2:15:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKp85spN0JPBF8X7CNvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz
OGVhYzEwHhcNMjUxMDE5MDgwMTE1WhcNMjUxMDIwMDgwMTE1WjAzMTEwLwYDVQQD
Eyg1MjdhYmNkYjg3YmMwOGY0MzdlNzVkODU3MTZhMTJiYTI5MjQ1OWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IWTVlMLwuk2XQaPZPfEjjxdDg+f
2hE4JUf9jULQWeojP87YrsmEapX8Xst5awU0fhaveytp6CQoRc1JqLYfqbJDf/3P
9h6VprrYjKAWkKzbb0DKu0XfSBjK7xdrob8GK3fcEIIeQUoalFAkOkJex1p1pI/9
DBEjn2uRXdRAwg57j5JaJOK2tYUWZAC9IT/+fkx0WbH/jfOJXi9gXF8GpSq9lixP
ytGhRI8TPLbZdefVxMLayQ6F0/w1Dh+wkVqM2skrvqUYz+uJjqIprkqsEgq3w60b
9gn4C7emtWQnOMgAGGMWH190fVPdSK/rZEookcjyNMxk4S5trJyaVN6K4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ6vNuHvAj0N+ddhXFqEropJFnLMB8GA1UdIwQY
MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt
MmZhZDlhMmZjM2VmLzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm
LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqbibpT0
mHdaCN6vwOx84XNK3w8huc2sa9zUDxulfdvUisLWErGlH/Tbk98Dc7hSm5d0Mq70
S/bJiavrjOl5jTGQyFNCcZO5/jVgnByvnC2NJmwUbKE+uS5UTk3n4tYlFAl5fAoy
x0l81kt/XAaN/2gExLUpd51jAQfuxFiytAqflnK7MoL5nlP7PWeClpVtj6/0g+/F
7hb1/Xw0pKM0hrl/FviF8adI4DjxjsGJsPxWcagJUJ9+7vEZci4oOtbAxldQrTYE
PtWPiHj+OsyFWhz+Why+YTyju+UGG+HUWjNnx6GxrWaL9UVTHO2dk6tQ4qvpSCG2
o7sYhS3OW8IV2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:04 2025 by rpki-client