Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File:                     x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier:          p3XNINrTS2f5Bp6+qPRBteVzBfmsfivujU+zqWd4uU0=
Subject key identifier:   3A:FC:FB:54:7B:24:24:7E:73:C1:C9:86:BF:0B:BE:8C:E5:81:E4:BA
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer:       /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial:       0199FBEBEE9690D7F1F16CBB9C3AB0D8BAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number:          132A
Signing time:             Sun 19 Oct 2025 10:02:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:47 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:47 +0000
Files and hashes:         1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
                          2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
                          3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: Fnsv9HG7uVdwZPM2STZJ+BguOz45eDDec6bz4JlsptY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:ee:96:90:d7:f1:f1:6c:bb:9c:3a:b0:d8:ba:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
        Validity
            Not Before: Oct 19 10:02:47 2025 GMT
            Not After : Oct 20 10:02:47 2025 GMT
        Subject: CN=3afcfb547b24247e73c1c986bf0bbe8ce581e4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cb:04:4e:ee:8e:d7:9b:de:61:00:3f:9a:95:
                    8e:cf:38:17:d1:b7:6c:54:5c:49:65:f1:6b:52:8d:
                    ae:5c:37:41:56:da:a6:d8:98:ed:04:df:c2:c0:72:
                    5e:9a:b1:95:74:08:1d:e6:29:d8:1a:d7:ff:05:ba:
                    05:dc:b2:44:b0:d4:e9:35:4e:09:bb:73:e2:f3:88:
                    c6:ff:a3:e6:8f:e3:ec:42:09:32:3c:23:cf:e3:a3:
                    b9:f5:f0:7d:da:68:e7:bc:40:7f:2d:85:ba:ad:b8:
                    02:e4:5e:f5:29:ad:38:fe:12:1c:52:8c:d1:b8:af:
                    71:b7:11:43:61:55:9e:47:1e:2a:ae:80:9f:f2:6a:
                    53:df:e0:f5:fa:8b:24:20:1b:4e:9c:7b:dc:25:f7:
                    12:6c:c1:fc:0d:a6:4b:08:a5:03:0a:11:8c:50:b9:
                    4c:6d:66:09:35:45:75:6f:af:5e:65:1a:f9:af:e1:
                    51:1f:0e:ad:ba:e5:bf:78:4e:a9:e2:91:81:f6:ff:
                    52:1f:e2:2e:1c:11:40:77:e9:a2:b0:cc:8b:b5:48:
                    6f:bd:e5:b3:02:59:c8:ec:8b:28:43:3e:45:5b:73:
                    01:12:29:e3:f8:4c:d1:38:30:71:31:e3:ea:cb:c5:
                    f1:18:85:a0:3a:ef:88:1f:44:89:3d:43:dc:c3:76:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FC:FB:54:7B:24:24:7E:73:C1:C9:86:BF:0B:BE:8C:E5:81:E4:BA
            X509v3 Authority Key Identifier:
                keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:14:10:ac:2a:ad:78:28:50:ec:48:42:96:ee:af:8d:7c:ea:
         a2:de:25:f5:4a:2f:1a:2a:09:5a:de:96:19:6b:47:ad:cc:fb:
         02:44:eb:ce:80:db:29:ef:bb:3c:60:ff:63:7e:d8:dd:e1:7c:
         4e:43:14:ab:49:f0:9c:49:b5:3e:83:cc:46:12:4d:29:99:de:
         93:65:7a:6b:0f:8d:d9:61:b5:bb:b4:db:07:29:f2:d4:0f:cc:
         06:47:b3:87:72:47:9d:4f:39:60:3f:a7:c0:fc:04:48:bb:fb:
         f8:fd:8d:45:b6:a0:f0:c7:4e:91:28:b5:9d:17:3a:d2:e0:46:
         93:8e:bb:5e:47:b4:c9:b3:2e:50:96:d3:b3:e3:1c:48:15:7d:
         0b:5d:63:5a:9e:96:cd:07:34:d2:c7:b9:c1:5e:3f:7f:9b:c5:
         1b:69:a6:03:44:c3:ef:a0:27:50:f3:87:db:67:bd:8b:9b:c3:
         a3:f5:d5:61:1a:f9:74:b2:96:88:da:c3:33:a0:72:f0:7e:07:
         9c:b3:85:9c:fd:e0:09:a9:16:99:90:34:e3:ad:37:5f:d7:c6:
         9b:d1:76:e0:f7:2f:93:88:80:1d:83:da:e7:d3:d0:da:9c:4a:
         6a:dc:24:b0:26:3d:7b:b9:31:83:76:f6:d4:76:54:70:fb:08:
         0a:55:18:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76+6WkNfx8Wy7nDqw2LrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGI1NmNkYTJlN2RkYjAyMzE2OGM1ZDc3ZWM5N2Q5YTAw
NmJhZWQwHhcNMjUxMDE5MTAwMjQ3WhcNMjUxMDIwMTAwMjQ3WjAzMTEwLwYDVQQD
EygzYWZjZmI1NDdiMjQyNDdlNzNjMWM5ODZiZjBiYmU4Y2U1ODFlNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48sETu6O15veYQA/mpWOzzgX0bds
VFxJZfFrUo2uXDdBVtqm2JjtBN/CwHJemrGVdAgd5inYGtf/BboF3LJEsNTpNU4J
u3Pi84jG/6Pmj+PsQgkyPCPP46O59fB92mjnvEB/LYW6rbgC5F71Ka04/hIcUozR
uK9xtxFDYVWeRx4qroCf8mpT3+D1+oskIBtOnHvcJfcSbMH8DaZLCKUDChGMULlM
bWYJNUV1b69eZRr5r+FRHw6tuuW/eE6p4pGB9v9SH+IuHBFAd+misMyLtUhvveWz
AlnI7IsoQz5FW3MBEinj+EzRODBxMePqy8XxGIWgOu+IH0SJPUPcw3boXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr8+1R7JCR+c8HJhr8LvozlgeS6MB8GA1UdIwQY
MBaAFMfbVs2i592wIxaMXXfsl9mgBrrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTIt
ODJlYjZmZDExZGQ1LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTItODJlYjZmZDExZGQ1
LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhQQrCqt
eChQ7EhClu6vjXzqot4l9UovGioJWt6WGWtHrcz7AkTrzoDbKe+7PGD/Y37Y3eF8
TkMUq0nwnEm1PoPMRhJNKZnek2V6aw+N2WG1u7TbByny1A/MBkezh3JHnU85YD+n
wPwESLv7+P2NRbag8MdOkSi1nRc60uBGk467Xke0ybMuUJbTs+McSBV9C11jWp6W
zQc00se5wV4/f5vFG2mmA0TD76AnUPOH22e9i5vDo/XVYRr5dLKWiNrDM6By8H4H
nLOFnP3gCakWmZA04603X9fGm9F24Pcvk4iAHYPa59PQ2pxKatwksCY9e7kxg3b2
1HZUcPsIClUY+g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:07 2025 by rpki-client