Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File:                     RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier:          DwzX6kthWqZgW7R0WBumNJEfNSj2hxobWZax/r0nGw0=
Subject key identifier:   AE:0F:3A:40:27:F0:B3:A2:0B:73:56:06:C1:F6:DB:A9:C6:E3:E9:A1
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer:       /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial:       019A041183F1B015337A0AF744F91CD84B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number:          163A
Signing time:             Tue 21 Oct 2025 00:00:47 +0000
Manifest this update:     Tue 21 Oct 2025 00:00:47 +0000
Manifest next update:     Wed 22 Oct 2025 00:00:47 +0000
Files and hashes:         1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
                          2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: +b/Tl3Hy222/6EYmW7aXqAVxwYrAoIzvXgLm2EhuHhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:11:83:f1:b0:15:33:7a:0a:f7:44:f9:1c:d8:4b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
        Validity
            Not Before: Oct 21 00:00:47 2025 GMT
            Not After : Oct 22 00:00:47 2025 GMT
        Subject: CN=ae0f3a4027f0b3a20b735606c1f6dba9c6e3e9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:0d:de:8c:56:68:0f:f9:6b:7c:df:54:55:
                    ba:ad:6f:94:6d:4b:4e:4d:fb:3e:c6:ac:cd:f4:02:
                    18:4c:fb:0c:91:38:da:84:a5:3f:93:fd:11:d7:14:
                    d2:b4:40:85:a2:66:54:41:18:7c:53:97:27:e8:8e:
                    bd:42:53:1d:8b:84:6d:39:0a:b5:50:68:1b:3f:7a:
                    d5:d9:8a:35:96:1b:b4:a6:56:22:b8:a4:71:9d:55:
                    0c:bc:94:f0:f9:06:79:b0:b4:47:6c:13:7b:c6:6a:
                    02:c1:56:4e:42:f0:4e:8a:90:30:8a:52:31:fb:e7:
                    99:b9:b0:99:41:ae:76:9e:91:45:d8:19:e8:a6:65:
                    81:62:16:0e:e9:1e:8d:0a:97:7b:ad:9c:5f:6c:f6:
                    a8:9b:64:f8:58:59:2c:1d:56:a4:eb:fb:7b:fd:62:
                    f1:3a:25:8d:ef:7f:a1:f7:ed:92:b7:eb:6f:74:48:
                    9d:78:31:27:38:13:29:37:83:23:f4:a9:8a:20:15:
                    e1:d2:31:b2:38:72:9b:7b:e2:25:6a:77:38:f7:e9:
                    3a:44:2d:68:b6:3d:86:2f:02:b7:d7:d4:03:4c:d6:
                    19:87:51:c3:35:a3:fc:92:4c:ec:07:ef:d0:5b:9f:
                    d7:02:dc:7d:2c:ee:1a:91:e9:d4:cb:43:c1:9d:50:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0F:3A:40:27:F0:B3:A2:0B:73:56:06:C1:F6:DB:A9:C6:E3:E9:A1
            X509v3 Authority Key Identifier:
                keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:5c:5a:3a:44:37:ac:f4:50:dc:47:07:8c:68:1e:39:b1:
         99:30:6d:80:9a:97:6a:99:80:73:95:cd:df:34:71:5c:68:9f:
         ce:10:2f:e2:69:21:98:ed:9a:56:7b:7c:7f:70:cc:ec:97:8b:
         d4:8e:8d:54:2d:14:e1:9e:e9:84:99:3b:b8:9d:36:53:0a:33:
         3a:c6:6b:84:19:46:27:3b:44:c5:f1:85:0c:44:1d:af:08:c8:
         78:f6:28:db:0e:c8:6f:00:37:18:28:ad:93:4c:96:9a:c8:44:
         c4:5b:73:33:4a:7c:88:1c:56:e4:2f:8a:cc:03:ca:26:46:ee:
         40:b5:df:d9:3f:3a:35:54:3d:e7:8b:e3:b5:bc:d4:70:8d:91:
         e3:8e:07:24:a1:13:bb:bf:20:c1:ed:e4:32:f6:36:07:e5:33:
         b6:20:cd:7b:14:57:6a:51:68:f8:d6:88:bb:13:df:70:7f:e9:
         5e:88:6c:fd:85:fa:55:9e:87:f0:cf:86:79:70:10:3e:ca:52:
         d1:7d:b0:41:95:6b:19:b6:5f:a9:ac:07:2c:6d:e2:73:40:55:
         a6:f4:de:5d:7b:8a:35:c6:97:96:b6:c4:87:56:58:79:55:4e:
         77:43:b0:e2:76:e0:69:70:f8:90:7b:bf:f8:5d:88:ae:38:cd:
         b0:e7:7f:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoEEYPxsBUzegr3RPkc2EtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MzFhZDQ2ZTBiOWMwMTBjZDI4ODVlNjAwMmMxYTViOTNj
ZDUxMTIwHhcNMjUxMDIxMDAwMDQ3WhcNMjUxMDIyMDAwMDQ3WjAzMTEwLwYDVQQD
EyhhZTBmM2E0MDI3ZjBiM2EyMGI3MzU2MDZjMWY2ZGJhOWM2ZTNlOWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4EN3oxWaA/5a3zfVFW6rW+UbUtO
Tfs+xqzN9AIYTPsMkTjahKU/k/0R1xTStECFomZUQRh8U5cn6I69QlMdi4RtOQq1
UGgbP3rV2Yo1lhu0plYiuKRxnVUMvJTw+QZ5sLRHbBN7xmoCwVZOQvBOipAwilIx
++eZubCZQa52npFF2BnopmWBYhYO6R6NCpd7rZxfbPaom2T4WFksHVak6/t7/WLx
OiWN73+h9+2St+tvdEideDEnOBMpN4Mj9KmKIBXh0jGyOHKbe+Ilanc49+k6RC1o
tj2GLwK319QDTNYZh1HDNaP8kkzsB+/QW5/XAtx9LO4akenUy0PBnVCXkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4POkAn8LOiC3NWBsH226nG4+mhMB8GA1UdIwQY
MBaAFEUxrUbgucAQzSiF5gAsGluTzVESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAt
MzJkZTU4NThiYTZjLzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAtMzJkZTU4NThiYTZj
LzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIapcWjpE
N6z0UNxHB4xoHjmxmTBtgJqXapmAc5XN3zRxXGifzhAv4mkhmO2aVnt8f3DM7JeL
1I6NVC0U4Z7phJk7uJ02UwozOsZrhBlGJztExfGFDEQdrwjIePYo2w7IbwA3GCit
k0yWmshExFtzM0p8iBxW5C+KzAPKJkbuQLXf2T86NVQ954vjtbzUcI2R444HJKET
u78gwe3kMvY2B+UztiDNexRXalFo+NaIuxPfcH/pXohs/YX6VZ6H8M+GeXAQPspS
0X2wQZVrGbZfqawHLG3ic0BVpvTeXXuKNcaXlrbEh1ZYeVVOd0Ow4nbgaXD4kHu/
+F2IrjjNsOd/8Q==
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:16 2025 by rpki-client