Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File:                     cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier:          bpTg64CeyX3uAFMnUkHhnX97Gu/rLS/riuFFVVleiSc=
Subject key identifier:   9E:28:90:82:BA:E5:C6:F5:F4:CB:33:73:C6:9F:ED:AA:79:B0:31:AB
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer:       /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial:       0199FDD98228FC711ECFE13B7F751D11B702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number:          0FED
Signing time:             Sun 19 Oct 2025 19:01:54 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:54 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:54 +0000
Files and hashes:         1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=)
                          2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=)
                          3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=)
                          4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: yvRIWcqaBkFEjgWAB9dLrTxneag/JNQ9NvAj//vF0E8=)
                          5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=)
                          6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=)
                          7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:82:28:fc:71:1e:cf:e1:3b:7f:75:1d:11:b7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
        Validity
            Not Before: Oct 19 19:01:54 2025 GMT
            Not After : Oct 20 19:01:54 2025 GMT
        Subject: CN=9e289082bae5c6f5f4cb3373c69fedaa79b031ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:58:4c:22:9a:98:28:ea:4b:b5:e6:e1:e4:04:
                    bc:01:4a:83:4e:7c:f3:dd:d5:a6:c6:ee:11:09:8d:
                    e1:49:17:64:c1:d9:64:b7:7e:4e:99:0f:50:10:f0:
                    4c:15:8d:bc:d5:80:1f:fa:bd:4e:a2:e0:5b:7e:8d:
                    fc:ad:32:86:7b:9b:aa:8b:c9:35:1a:a4:81:67:ce:
                    41:86:b8:8d:b9:f7:4a:21:77:34:ff:d4:40:4c:07:
                    af:01:01:d6:f5:34:87:25:aa:70:1a:ec:f1:25:20:
                    4b:ba:71:c3:88:de:45:5f:ac:63:03:8a:c7:16:ff:
                    c5:41:5e:f8:a8:c7:ef:13:82:55:ba:1f:8f:6e:95:
                    e4:a3:d9:04:be:5b:10:b1:66:fb:76:e6:d3:cd:9d:
                    d4:0c:f1:8b:4c:d9:af:87:95:7a:73:d4:11:b4:4c:
                    f7:60:b2:bb:d3:b3:b2:90:59:86:0c:61:92:99:19:
                    68:24:ee:87:7e:0a:71:c9:b5:b7:85:fe:13:28:95:
                    33:7b:be:57:82:bb:fd:71:4c:94:a3:e6:10:91:0f:
                    53:c4:71:81:b8:1a:be:bd:79:fd:bd:bc:66:b1:f2:
                    0e:4d:e2:55:f9:03:19:85:86:39:b6:cc:2f:95:73:
                    5a:50:10:1f:07:fc:fc:bf:1c:1e:c8:2e:0f:a4:91:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:28:90:82:BA:E5:C6:F5:F4:CB:33:73:C6:9F:ED:AA:79:B0:31:AB
            X509v3 Authority Key Identifier:
                keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ec:93:c7:7b:ad:82:3e:a4:0b:6b:19:a5:6d:68:79:81:c4:
         ab:42:45:3d:32:c4:b5:15:fb:ce:31:a5:ff:3f:bc:00:f6:27:
         ce:ae:11:cd:12:08:2e:7b:cb:a5:70:f6:ec:40:4f:87:a7:31:
         77:cb:4b:4f:6e:36:88:f0:29:ab:29:aa:c2:68:b2:05:c8:56:
         49:82:be:77:49:4a:3c:69:53:69:c9:1c:55:fc:a7:fa:c6:78:
         97:81:81:dd:42:75:c7:6e:c8:6f:66:1b:c2:ce:2c:c5:4c:b8:
         ff:e8:9b:8e:d4:60:ae:fa:27:1f:e2:1f:f0:55:ef:e3:32:e1:
         4e:04:f4:48:36:c3:e9:00:bd:7a:78:1b:c1:33:00:95:e8:3b:
         ce:03:c1:66:97:f0:bb:74:ac:9e:68:50:2e:4e:4e:63:7f:4f:
         01:a0:d9:73:69:db:e0:5c:5c:97:5c:49:b1:c1:be:c5:56:62:
         ee:f8:75:62:5d:d4:e6:08:a3:6c:a7:c0:6b:7a:08:40:0b:82:
         81:98:fe:8b:cc:a3:0f:2f:e4:b2:40:72:0f:87:e2:9f:d6:a9:
         e4:27:ff:b3:3e:54:a5:bf:9d:57:f7:2c:49:4e:93:8b:5c:7e:
         60:6c:ba:95:5d:c4:8f:05:cf:51:e3:89:5b:b5:7c:4a:fa:54:
         2a:21:d2:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92YIo/HEez+E7f3UdEbcCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj
MTMxZjUwHhcNMjUxMDE5MTkwMTU0WhcNMjUxMDIwMTkwMTU0WjAzMTEwLwYDVQQD
Eyg5ZTI4OTA4MmJhZTVjNmY1ZjRjYjMzNzNjNjlmZWRhYTc5YjAzMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lhMIpqYKOpLtebh5AS8AUqDTnzz
3dWmxu4RCY3hSRdkwdlkt35OmQ9QEPBMFY281YAf+r1OouBbfo38rTKGe5uqi8k1
GqSBZ85BhriNufdKIXc0/9RATAevAQHW9TSHJapwGuzxJSBLunHDiN5FX6xjA4rH
Fv/FQV74qMfvE4JVuh+PbpXko9kEvlsQsWb7dubTzZ3UDPGLTNmvh5V6c9QRtEz3
YLK707OykFmGDGGSmRloJO6HfgpxybW3hf4TKJUze75Xgrv9cUyUo+YQkQ9TxHGB
uBq+vXn9vbxmsfIOTeJV+QMZhYY5tswvlXNaUBAfB/z8vxweyC4PpJFHQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4okIK65cb19Mszc8af7ap5sDGrMB8GA1UdIwQY
MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt
NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5
LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOyTx3ut
gj6kC2sZpW1oeYHEq0JFPTLEtRX7zjGl/z+8APYnzq4RzRIILnvLpXD27EBPh6cx
d8tLT242iPApqymqwmiyBchWSYK+d0lKPGlTackcVfyn+sZ4l4GB3UJ1x27Ib2Yb
ws4sxUy4/+ibjtRgrvonH+If8FXv4zLhTgT0SDbD6QC9engbwTMAleg7zgPBZpfw
u3SsnmhQLk5OY39PAaDZc2nb4Fxcl1xJscG+xVZi7vh1Yl3U5gijbKfAa3oIQAuC
gZj+i8yjDy/kskByD4fin9ap5Cf/sz5Upb+dV/csSU6Ti1x+YGy6lV3EjwXPUeOJ
W7V8SvpUKiHSgg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:53 2025 by rpki-client