Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
File:                     XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json)
Hash identifier:          Qg/EqgqVdCCc2hM3f0m8ti9yhpLa4go/R9DSW6DtfW4=
Subject key identifier:   10:A0:62:DB:86:F7:CF:6C:C9:5C:9A:8D:4D:2D:2C:FC:8A:06:97:E9
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Certificate issuer:       /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial:       0199FBB36C94B352BC7C1204813EA92770DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
Manifest number:          0F59
Signing time:             Sun 19 Oct 2025 09:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:03 +0000
Files and hashes:         1: LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa (hash: kCYXazlMebMuzkkP9xGRP+Rl8qwP4Xflsdq3dLyq/Fw=)
                          2: LwM623k2kR7q91QrhiqdXUwBs7k.roa (hash: RKu1QnAXYUI9f91c+0fb1S3SkGsEsHeC3eprd1gKm7I=)
                          3: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (hash: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=)
                          4: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: Ya5jkQ/i2ZSD04T3PI3C8sKbprGkkWiFstendAZH8l8=)
                          5: tEgu1CSKDxjQmmWSWD6yXlDQ2m4.roa (hash: 7vrCydh5UH6MCekOIFdu3T2/WFzZdQB8gMeby/ttuZ0=)
                          6: zIPCunbKhz8cPIKe1giE3uIj7h8.roa (hash: 9WpdS/c5vPUs7vn29+uicrAavB5QqpuizqnOqwqgIr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:6c:94:b3:52:bc:7c:12:04:81:3e:a9:27:70:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
        Validity
            Not Before: Oct 19 09:01:03 2025 GMT
            Not After : Oct 20 09:01:03 2025 GMT
        Subject: CN=10a062db86f7cf6cc95c9a8d4d2d2cfc8a0697e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b4:c1:8b:58:f9:f0:57:3f:10:1b:a0:a9:17:
                    db:71:02:8e:cf:ff:82:0c:e4:10:26:64:55:70:1d:
                    b5:c9:0f:28:1e:bc:90:2d:14:54:77:a8:f4:8f:1a:
                    f7:1f:42:01:46:9a:27:0a:5e:28:e4:ed:5d:49:36:
                    e9:5e:ad:51:90:95:b5:04:3f:90:cc:26:bf:f1:86:
                    80:d4:aa:f1:48:b5:92:43:25:a4:f4:a3:1f:50:b9:
                    7d:95:d1:2e:a4:87:c9:58:46:af:eb:18:5a:d3:ef:
                    40:c1:7f:94:cb:53:9c:95:c4:de:c4:44:93:ae:ca:
                    c0:e2:78:b8:00:09:9e:c0:c3:44:ac:72:9c:dc:a3:
                    e4:8e:f3:34:b3:2b:b0:33:a3:a4:04:55:55:ee:6f:
                    08:0b:99:e9:ba:b0:07:06:6a:70:fd:4b:a2:c6:31:
                    30:16:e1:de:90:c1:f7:c2:f2:1e:f9:5d:79:43:2a:
                    7e:62:90:fa:e6:90:6e:9b:92:1d:78:c2:a0:f4:f4:
                    40:b0:39:e1:eb:c1:c9:b8:a4:83:0b:06:d3:78:a3:
                    1d:be:8e:dd:7d:b6:40:f1:32:1f:85:a1:66:51:29:
                    a8:6a:b4:62:00:39:ba:17:65:87:ea:b0:0c:b7:bc:
                    f2:5d:7b:b6:4b:6e:16:ba:52:42:5e:e9:93:00:0e:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A0:62:DB:86:F7:CF:6C:C9:5C:9A:8D:4D:2D:2C:FC:8A:06:97:E9
            X509v3 Authority Key Identifier:
                keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cd:b8:07:9a:c8:e7:de:6b:aa:6b:24:4f:43:14:97:ad:be:
         24:be:ff:da:48:01:6c:41:05:ba:a9:92:fc:0c:16:da:32:29:
         f8:d5:59:71:41:99:ec:8b:b7:0e:15:f1:de:54:5c:b8:4a:03:
         15:e8:b8:5b:10:27:85:e3:66:dc:a4:d9:4c:26:bc:67:b1:e1:
         0c:b8:92:64:3d:8e:49:00:50:b4:3a:ec:b4:d2:f0:fa:ac:b4:
         78:99:1e:bb:65:d8:f6:e1:76:ed:ae:c6:2c:6d:46:8e:69:e1:
         2e:23:e2:4e:b0:62:e8:6b:c7:ff:0c:54:57:b3:f5:bc:d4:99:
         0b:bb:75:26:91:1f:a1:81:a7:c1:a4:1a:f8:e4:19:22:5d:cb:
         53:de:a5:be:99:1e:3f:97:22:f4:94:d1:9e:06:03:c7:4f:03:
         9b:3e:55:8b:0f:f4:7f:dd:c1:2e:e7:33:96:0f:f5:d7:2d:78:
         1d:fb:ae:db:5d:3d:03:27:eb:53:1a:da:cb:83:d7:92:26:2b:
         95:e3:c3:e2:98:da:1c:ff:23:b3:8c:9a:8c:f9:32:29:e3:16:
         ef:24:21:ce:23:4f:cc:c0:af:dd:df:fe:ca:d3:a8:42:53:c6:
         c1:a3:f4:41:3b:60:2d:00:06:9a:1b:b2:f9:16:be:64:82:80:
         5d:28:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:19 2025 by rpki-client