Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
File:                     x-nHqlNLEwC_ck__DwwbBRnVBbs.mft (raw, json)
Hash identifier:          LmmHrtM2Y9VXAnc83OZj3WPHHSh7RExWA3qjcxk0U6I=
Subject key identifier:   10:E6:85:DB:B4:EF:7F:2D:47:E8:B5:70:08:8C:54:3A:9E:25:D0:CA
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Certificate issuer:       /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial:       0199FD34439CDE8BDB1A819A3F91A20B4548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
Manifest number:          0FAF
Signing time:             Sun 19 Oct 2025 16:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:24 +0000
Files and hashes:         1: R1q5L0zSprSAMUcFtGlF7mc7J1s.roa (hash: UB22RcCCLLp3yH1mo89+o+fdr51fmFuQRSq5JlKphYY=)
                          2: WaUyoH7ArWppJQRKLhGMYkgHut0.roa (hash: 8DW7q1K5wRRXnMeS2PwcrC66JmhaaTvLKjvouwdrBiw=)
                          3: vYPLmVZ63lzXpMA3lFBdPO3gT0g.roa (hash: NafLcW9ler7jv8ZnfOLoMEHPRe+4IL3+O4WsYS0XH1Y=)
                          4: x-nHqlNLEwC_ck__DwwbBRnVBbs.crl (hash: /B2UQwmSv41CcG+vahjmISLRD6jqro2JiruS5mydhro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:43:9c:de:8b:db:1a:81:9a:3f:91:a2:0b:45:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
        Validity
            Not Before: Oct 19 16:01:24 2025 GMT
            Not After : Oct 20 16:01:24 2025 GMT
        Subject: CN=10e685dbb4ef7f2d47e8b570088c543a9e25d0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:20:5d:73:f6:96:06:a5:43:34:86:0b:33:
                    02:0e:a7:8f:87:79:09:8e:08:db:eb:d2:cb:d6:66:
                    d0:0a:a9:f7:23:f3:e6:46:58:16:35:b6:b2:55:c0:
                    c5:e7:b4:fc:ee:29:c6:d4:82:de:93:6a:d2:7e:24:
                    9f:2a:c0:db:6b:da:04:9c:99:08:cc:56:76:d4:c6:
                    2b:88:23:b2:02:a9:7d:f8:84:3e:da:98:4a:df:24:
                    4c:27:bc:86:db:78:7b:2b:ce:41:01:17:b1:7c:26:
                    1b:d5:69:27:16:bf:26:91:53:14:ee:ff:38:a9:63:
                    1f:9b:23:ea:a8:14:f4:a2:51:f8:fa:ce:55:72:5b:
                    be:fe:25:18:a5:54:b8:8e:bd:43:5e:ea:60:72:c3:
                    cd:68:21:3c:ae:46:be:88:b2:0e:23:09:0f:07:71:
                    dd:a2:17:e9:de:aa:e4:b4:ec:a6:ba:93:62:b9:eb:
                    ea:2b:cd:97:54:a6:a2:92:55:42:a7:9e:39:d9:73:
                    1a:78:fb:55:c1:37:73:8f:a5:bd:dd:3b:6c:57:d9:
                    8a:da:f8:84:a8:b4:21:ba:be:7f:a3:0b:05:0d:75:
                    bb:7d:d3:9a:6b:d4:5e:a5:04:8b:1d:55:90:a2:0a:
                    cf:02:2d:b8:ba:54:b9:4e:de:46:71:ff:d7:2a:52:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E6:85:DB:B4:EF:7F:2D:47:E8:B5:70:08:8C:54:3A:9E:25:D0:CA
            X509v3 Authority Key Identifier:
                keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7d:9c:f6:7b:c7:12:cb:7d:6f:92:90:b7:de:0a:e9:e9:04:
         70:cf:33:7d:66:72:00:c0:97:80:3e:8d:e1:8d:d7:65:ab:b9:
         e1:3e:3d:28:b2:a8:a5:7b:f7:35:e3:e0:6a:61:b2:41:29:53:
         a1:fa:d1:3c:31:1b:fc:44:14:36:bb:39:f2:d5:78:b2:e3:48:
         9f:5e:f9:d5:b1:7d:d4:af:94:5c:00:aa:70:dc:37:b0:40:08:
         c1:af:b8:9e:71:16:62:29:0b:63:98:29:90:d5:74:26:b1:d7:
         2b:5c:54:93:88:1a:fc:3a:8d:e5:0e:d0:3d:02:39:ae:1b:b0:
         90:00:dd:dc:08:6c:84:2a:16:18:e4:4a:32:31:a4:80:5c:a9:
         38:b0:72:b4:b3:fd:d1:8c:53:e7:0c:90:d5:59:64:96:8a:63:
         34:95:9a:48:a6:2c:8c:32:0c:f5:e3:25:79:8d:81:60:62:a6:
         b1:02:b7:bd:24:53:64:01:f6:c3:73:9f:57:97:21:ca:4f:c8:
         d4:ac:e1:4f:4c:84:69:64:77:be:43:a5:15:a1:63:7c:78:e5:
         c2:67:7f:ef:36:fd:67:a0:85:bf:82:82:4c:5c:fe:09:46:2f:
         61:ce:2e:b1:ad:51:28:eb:34:3d:2d:7d:6e:14:52:8e:fa:b8:
         57:29:f2:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NEOc3ovbGoGaP5GiC0VIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZTljN2FhNTM0YjEzMDBiZjcyNGZmZjBmMGMxYjA1MTlk
NTA1YmIwHhcNMjUxMDE5MTYwMTI0WhcNMjUxMDIwMTYwMTI0WjAzMTEwLwYDVQQD
EygxMGU2ODVkYmI0ZWY3ZjJkNDdlOGI1NzAwODhjNTQzYTllMjVkMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukggXXP2lgalQzSGCzMCDqePh3kJ
jgjb69LL1mbQCqn3I/PmRlgWNbayVcDF57T87inG1ILek2rSfiSfKsDba9oEnJkI
zFZ21MYriCOyAql9+IQ+2phK3yRMJ7yG23h7K85BARexfCYb1WknFr8mkVMU7v84
qWMfmyPqqBT0olH4+s5Vclu+/iUYpVS4jr1DXupgcsPNaCE8rka+iLIOIwkPB3Hd
ohfp3qrktOymupNiuevqK82XVKaiklVCp5452XMaePtVwTdzj6W93TtsV9mK2viE
qLQhur5/owsFDXW7fdOaa9RepQSLHVWQogrPAi24ulS5Tt5Gcf/XKlLwAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDmhdu0738tR+i1cAiMVDqeJdDKMB8GA1UdIwQY
MBaAFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQt
Y2U1MDA4MjdmZjdmLzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81MGFiZWYtMzc0Yy00ZWE2LWI3ZDQtY2U1MDA4MjdmZjdm
LzEveC1uSHFsTkxFd0NfY2tfX0R3d2JCUm5WQmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn2c9nvH
Est9b5KQt94K6ekEcM8zfWZyAMCXgD6N4Y3XZau54T49KLKopXv3NePgamGyQSlT
ofrRPDEb/EQUNrs58tV4suNIn1751bF91K+UXACqcNw3sEAIwa+4nnEWYikLY5gp
kNV0JrHXK1xUk4ga/DqN5Q7QPQI5rhuwkADd3AhshCoWGORKMjGkgFypOLBytLP9
0YxT5wyQ1VlklopjNJWaSKYsjDIM9eMleY2BYGKmsQK3vSRTZAH2w3OfV5chyk/I
1KzhT0yEaWR3vkOlFaFjfHjlwmd/7zb9Z6CFv4KCTFz+CUYvYc4usa1RKOs0PS19
bhRSjvq4VynyeA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:09 2025 by rpki-client