Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File:                     fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier:          EKRINnU7HOk9gDoNybNmVzx47tVruLgHALDtIxTLTjo=
Subject key identifier:   7D:98:37:10:D5:F3:7D:C0:EA:D6:38:71:F2:B7:52:6E:00:D4:76:0A
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer:       /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial:       0199FAD7B05D155EE719F540B775391BA746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number:          05A9
Signing time:             Sun 19 Oct 2025 05:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:03 +0000
Files and hashes:         1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: 2BVuHQCDrW2Wx6dgy4clFr48AzitwOXTxXKBtBh9/a8=)
                          2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=)
                          3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=)
                          4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:b0:5d:15:5e:e7:19:f5:40:b7:75:39:1b:a7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
        Validity
            Not Before: Oct 19 05:01:03 2025 GMT
            Not After : Oct 20 05:01:03 2025 GMT
        Subject: CN=7d983710d5f37dc0ead63871f2b7526e00d4760a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:94:be:63:79:29:6a:e9:e9:d0:17:7b:aa:
                    f9:65:14:fd:47:df:eb:72:1f:f2:6f:15:47:bd:77:
                    58:6c:a6:b5:ec:3b:42:48:af:fa:a4:79:0f:c2:cd:
                    ef:e3:7e:0a:d6:1a:70:c6:4c:b6:3e:aa:7f:16:19:
                    10:1a:44:ea:86:77:a3:7c:ac:42:51:73:3b:53:f7:
                    a4:80:cf:0e:7e:60:5c:b3:79:93:ce:27:cd:54:08:
                    55:9d:48:4c:e2:45:cc:2a:56:93:3c:76:96:cc:b6:
                    02:3a:31:2b:13:03:b6:94:88:0b:74:6f:46:80:75:
                    13:2f:62:30:c5:b0:4f:56:dc:8b:fd:25:60:05:c1:
                    7a:4d:12:9c:78:b7:97:58:9e:6e:df:52:63:09:6a:
                    f7:9b:d0:6e:94:c0:19:97:e9:4d:f6:96:5a:60:9b:
                    d1:93:00:5d:84:cd:e2:40:14:4e:c7:22:2e:96:7c:
                    f6:e0:7d:1f:83:b7:5a:93:ed:3a:97:f3:11:5c:c5:
                    70:9c:a2:27:a9:4f:c3:37:50:47:5f:8a:89:4f:e9:
                    8b:ab:76:17:1c:f4:97:65:b6:fd:b5:92:04:3e:07:
                    51:8b:81:a2:e4:85:c7:ad:73:76:5e:8d:e1:04:7a:
                    e6:90:5d:6d:e4:0c:0b:5e:8d:8a:5e:cb:83:97:d7:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:37:10:D5:F3:7D:C0:EA:D6:38:71:F2:B7:52:6E:00:D4:76:0A
            X509v3 Authority Key Identifier:
                keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:93:94:71:9f:72:c0:c7:42:c2:66:aa:71:b7:ca:e3:e2:35:
         a4:ab:b6:bf:94:f0:e9:96:7a:54:86:e0:4d:cf:a3:af:74:02:
         0d:83:0d:36:ec:f0:66:f4:76:fc:9a:de:68:32:3d:7a:c9:23:
         a6:ad:29:66:d8:9b:c5:b5:45:29:9d:66:98:3f:da:6c:4e:d5:
         09:40:01:1d:9d:f8:8e:8e:09:46:74:88:15:d6:a7:4d:3f:1c:
         53:a7:2d:58:8a:13:3a:99:5d:9b:b7:ef:82:57:fe:5e:15:47:
         f7:87:27:a1:d5:4e:37:22:d9:a0:08:33:7b:47:23:7b:4a:c9:
         14:7d:5b:30:b4:51:a2:fb:54:11:c6:01:40:e7:b8:e3:a8:49:
         70:5a:64:6f:e1:a7:9b:80:c4:a0:90:1e:8d:d6:fb:12:fb:4e:
         65:fb:ab:78:1a:e2:83:51:2f:96:81:cc:03:30:7e:f1:2b:cb:
         97:f3:80:26:c8:ba:23:b2:52:12:54:4a:ff:33:0c:e4:fd:df:
         3d:99:04:82:71:9c:d1:ef:d9:bb:b7:f9:ed:dd:71:1c:59:83:
         f0:cb:f6:3d:e1:0e:12:f2:cb:7e:5b:80:09:bd:46:7d:61:d7:
         d3:1e:be:1c:97:8b:79:14:5a:6a:cc:f3:bb:b9:1b:52:d8:ec:
         69:0a:2c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn617BdFV7nGfVAt3U5G6dGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk
NWRiMzQwHhcNMjUxMDE5MDUwMTAzWhcNMjUxMDIwMDUwMTAzWjAzMTEwLwYDVQQD
Eyg3ZDk4MzcxMGQ1ZjM3ZGMwZWFkNjM4NzFmMmI3NTI2ZTAwZDQ3NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub6UvmN5KWrp6dAXe6r5ZRT9R9/r
ch/ybxVHvXdYbKa17DtCSK/6pHkPws3v434K1hpwxky2Pqp/FhkQGkTqhnejfKxC
UXM7U/ekgM8OfmBcs3mTzifNVAhVnUhM4kXMKlaTPHaWzLYCOjErEwO2lIgLdG9G
gHUTL2IwxbBPVtyL/SVgBcF6TRKceLeXWJ5u31JjCWr3m9BulMAZl+lN9pZaYJvR
kwBdhM3iQBROxyIulnz24H0fg7dak+06l/MRXMVwnKInqU/DN1BHX4qJT+mLq3YX
HPSXZbb9tZIEPgdRi4Gi5IXHrXN2Xo3hBHrmkF1t5AwLXo2KXsuDl9cd/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2YNxDV833A6tY4cfK3Um4A1HYKMB8GA1UdIwQY
MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt
ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi
LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5OUcZ9y
wMdCwmaqcbfK4+I1pKu2v5Tw6ZZ6VIbgTc+jr3QCDYMNNuzwZvR2/JreaDI9eskj
pq0pZtibxbVFKZ1mmD/abE7VCUABHZ34jo4JRnSIFdanTT8cU6ctWIoTOpldm7fv
glf+XhVH94cnodVONyLZoAgze0cje0rJFH1bMLRRovtUEcYBQOe446hJcFpkb+Gn
m4DEoJAejdb7EvtOZfureBrig1EvloHMAzB+8SvLl/OAJsi6I7JSElRK/zMM5P3f
PZkEgnGc0e/Zu7f57d1xHFmD8Mv2PeEOEvLLfluACb1GfWHX0x6+HJeLeRRaaszz
u7kbUtjsaQos6A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:20 2025 by rpki-client