Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File:                     Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier:          7/1A6JZYm6vJ2T9gs5qAZGnq61wDNHF1mjg7HIigaoc=
Subject key identifier:   71:92:40:83:AB:2A:30:B1:E9:1B:31:B2:A9:B6:7D:2A:A8:F3:38:BA
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer:       /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial:       0199FF231B372EBCAC82AE3345A1304DD3DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number:          1578
Signing time:             Mon 20 Oct 2025 01:01:54 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:54 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:54 +0000
Files and hashes:         1: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (hash: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=)
                          2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: dZ4qkqFfLdvfybfaA9zFZeyuoiYpuxWEBWXBIgJQ+HE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:23:1b:37:2e:bc:ac:82:ae:33:45:a1:30:4d:d3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
        Validity
            Not Before: Oct 20 01:01:54 2025 GMT
            Not After : Oct 21 01:01:54 2025 GMT
        Subject: CN=71924083ab2a30b1e91b31b2a9b67d2aa8f338ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:17:df:79:2b:e3:14:3e:56:5c:15:ff:5e:
                    16:9a:53:f7:d1:43:93:bc:4d:f2:eb:30:69:4e:c3:
                    76:18:97:0f:d0:e9:4f:32:15:c5:a9:4b:bc:9e:fd:
                    cf:34:aa:52:12:a8:44:c7:1e:be:84:5e:66:8f:7a:
                    8c:bd:64:26:f2:84:8b:d2:a1:f1:ce:7f:77:10:58:
                    60:a7:99:9b:7c:d7:02:0a:b9:3d:ca:32:dd:c0:c7:
                    e3:8e:3a:90:ec:41:6a:24:85:2f:72:19:44:75:ec:
                    a8:94:a5:fe:48:42:2c:02:77:18:88:54:5f:69:d7:
                    78:13:b1:44:d6:18:a3:54:5b:fa:0e:cc:05:5c:27:
                    7a:9a:79:71:7b:94:10:fb:21:37:51:a3:b9:c7:6e:
                    05:6c:b0:40:fc:d0:81:ff:50:6d:18:da:fb:23:2b:
                    a1:be:99:d6:85:80:27:8a:8e:6a:56:43:42:21:46:
                    6e:1e:d3:86:d6:61:a8:4e:70:0c:46:44:65:61:b5:
                    ef:d2:94:b0:50:ff:99:cc:d7:e4:19:54:4a:fb:34:
                    85:7d:21:e8:be:c5:7e:2f:b1:ff:f1:7b:7b:5d:7c:
                    4c:14:65:94:7d:73:bc:3c:84:0e:3d:dd:a9:90:62:
                    ec:d4:cb:11:4c:19:fe:54:7a:73:83:60:43:a1:f4:
                    f5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:92:40:83:AB:2A:30:B1:E9:1B:31:B2:A9:B6:7D:2A:A8:F3:38:BA
            X509v3 Authority Key Identifier:
                keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b2:c8:2d:3a:b3:5b:bb:45:f7:35:4e:88:95:f5:6c:66:ab:
         3a:1d:71:72:3d:07:f8:ff:6d:e1:a3:07:68:e7:da:9c:32:c8:
         a9:b1:96:99:a0:44:64:a3:42:f7:a0:8f:8f:62:39:3a:d7:98:
         e2:b1:7c:45:ec:76:77:2e:17:e3:27:51:9f:a9:55:b7:16:bb:
         37:16:02:7b:aa:e0:b0:14:ba:2d:e5:5e:04:2c:e4:b7:a2:72:
         a9:35:c6:55:3d:2a:0d:aa:50:27:6d:a1:22:dd:34:2d:63:b8:
         5a:41:2e:bf:c3:76:b4:f9:9f:29:59:27:8f:8d:9c:a3:90:b4:
         45:27:c1:0c:2e:a7:69:03:6d:56:0c:09:23:70:71:32:56:10:
         d7:b0:f7:a8:62:7e:f6:ef:98:42:f9:1f:10:ba:f5:82:56:c7:
         4c:6d:78:f3:eb:52:ea:89:e0:d7:e2:f7:51:e3:fe:77:c4:76:
         09:e7:50:84:40:14:31:90:a8:a6:25:13:db:66:24:fc:87:69:
         39:8c:36:45:b6:70:04:e9:78:f2:26:03:b6:6f:53:ba:ca:15:
         dc:3a:c2:d8:12:02:87:70:6d:27:fa:03:a3:49:ec:af:8d:a3:
         5d:89:40:59:96:22:b7:20:ff:97:71:ed:82:14:d0:88:66:6d:
         75:95:9a:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Ixs3Lrysgq4zRaEwTdPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWZmZmY1MDMzYTc5MDFhM2U5ZjI3NWY2ZGM2ZThlYTBm
OTNiOGEwHhcNMjUxMDIwMDEwMTU0WhcNMjUxMDIxMDEwMTU0WjAzMTEwLwYDVQQD
Eyg3MTkyNDA4M2FiMmEzMGIxZTkxYjMxYjJhOWI2N2QyYWE4ZjMzOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+EX33kr4xQ+VlwV/14WmlP30UOT
vE3y6zBpTsN2GJcP0OlPMhXFqUu8nv3PNKpSEqhExx6+hF5mj3qMvWQm8oSL0qHx
zn93EFhgp5mbfNcCCrk9yjLdwMfjjjqQ7EFqJIUvchlEdeyolKX+SEIsAncYiFRf
add4E7FE1hijVFv6DswFXCd6mnlxe5QQ+yE3UaO5x24FbLBA/NCB/1BtGNr7Iyuh
vpnWhYAnio5qVkNCIUZuHtOG1mGoTnAMRkRlYbXv0pSwUP+ZzNfkGVRK+zSFfSHo
vsV+L7H/8Xt7XXxMFGWUfXO8PIQOPd2pkGLs1MsRTBn+VHpzg2BDofT1zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGSQIOrKjCx6Rsxsqm2fSqo8zi6MB8GA1UdIwQY
MBaAFDIf//UDOnkBo+nydfbcbo6g+TuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZjRkMWEtZTRiNi00OWM2LWE1MGQt
ZDFlMzBhNWNhYzg4LzEvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wZjRkMWEtZTRiNi00OWM2LWE1MGQtZDFlMzBhNWNhYzg4
LzEvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7LILTqz
W7tF9zVOiJX1bGarOh1xcj0H+P9t4aMHaOfanDLIqbGWmaBEZKNC96CPj2I5OteY
4rF8Rex2dy4X4ydRn6lVtxa7NxYCe6rgsBS6LeVeBCzkt6JyqTXGVT0qDapQJ22h
It00LWO4WkEuv8N2tPmfKVknj42co5C0RSfBDC6naQNtVgwJI3BxMlYQ17D3qGJ+
9u+YQvkfELr1glbHTG148+tS6ong1+L3UeP+d8R2CedQhEAUMZCopiUT22Yk/Idp
OYw2RbZwBOl48iYDtm9TusoV3DrC2BICh3BtJ/oDo0nsr42jXYlAWZYityD/l3Ht
ghTQiGZtdZWadw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:17 2025 by rpki-client