Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File:                     XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier:          1brIdvaSlXD4LszmhvDn7ADonvUrgYpOEuqSC1VoLls=
Subject key identifier:   D9:FD:F2:F9:0F:1D:54:B3:73:82:84:1F:DB:D4:12:DC:4D:75:03:54
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer:       /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial:       0199FFC8408A505F11B7B0AB387F0EB244BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number:          170E
Signing time:             Mon 20 Oct 2025 04:02:17 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:17 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:17 +0000
Files and hashes:         1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
                          2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
                          3: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (hash: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=)
                          4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=)
                          5: PimO5b5KbIpbyY6X7dBeo4nzGfo.roa (hash: XRrn0aWk97wVb/B9B+cfXVdA4L+ijYSy1XLqIddxODg=)
                          6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: HBaA8uvM0hk/reG7VWJIHC5wea8KmSlUhjYxYRNfmz8=)
                          7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
                          8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:40:8a:50:5f:11:b7:b0:ab:38:7f:0e:b2:44:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
        Validity
            Not Before: Oct 20 04:02:17 2025 GMT
            Not After : Oct 21 04:02:17 2025 GMT
        Subject: CN=d9fdf2f90f1d54b37382841fdbd412dc4d750354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:be:0b:3b:b1:fc:dd:47:a6:58:84:fb:86:
                    44:01:9b:4e:e7:e4:46:49:a1:10:2b:51:c4:5f:69:
                    18:d8:34:c1:16:1f:cc:db:78:93:2b:54:f3:5a:9b:
                    d0:e5:6d:1d:85:dc:99:4e:ba:55:d5:dd:6e:5c:97:
                    09:76:ef:12:43:cd:6b:13:e9:29:2e:f0:7d:ca:67:
                    11:31:9c:ba:ed:e1:ac:17:70:31:0f:13:c0:0f:d3:
                    f7:e0:c1:c7:50:4e:ec:7a:95:3a:2a:79:e1:c8:e9:
                    67:42:b3:ab:fb:a1:54:b2:42:50:a6:5a:4c:6f:b7:
                    c0:76:73:5d:e4:93:5a:5a:34:54:1d:44:62:ce:a8:
                    7e:1b:6d:7c:aa:11:e6:0a:b5:8e:c2:5d:98:4a:e8:
                    e8:1d:9b:5d:33:60:49:25:05:85:d7:81:23:07:1f:
                    31:f7:9e:b0:2f:a9:7f:d0:d8:8d:89:5c:06:ca:3d:
                    f2:bd:34:2a:00:2d:ed:fe:6b:20:fc:48:d0:c2:d7:
                    fa:eb:6c:ff:d4:27:5d:e5:82:b0:65:3e:b6:40:12:
                    0f:60:5e:b1:f1:4c:59:c4:92:f0:db:f3:09:2d:c2:
                    d4:ef:5c:46:c5:73:e8:4b:41:49:aa:1f:ec:99:2b:
                    b5:a5:89:ba:77:c8:ed:f1:9e:c0:11:d4:b2:8d:93:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FD:F2:F9:0F:1D:54:B3:73:82:84:1F:DB:D4:12:DC:4D:75:03:54
            X509v3 Authority Key Identifier:
                keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:2e:48:58:a3:b4:37:e2:21:70:29:bf:00:ee:49:af:b4:01:
         b1:f4:29:ea:88:15:e1:e1:4e:21:22:9c:ff:ea:b0:b7:fc:da:
         45:3a:2a:73:ca:15:38:ac:60:25:60:c6:53:bb:b7:d2:6e:43:
         a0:f8:2f:22:93:60:f6:0b:cb:89:9a:ef:3e:2c:8e:52:3d:93:
         a0:83:02:6b:19:f0:fb:c5:1c:94:dc:97:d8:f5:70:a4:96:52:
         19:f5:f1:76:ef:40:2e:d7:43:33:12:19:4e:5d:86:56:43:58:
         14:a4:d0:8d:1c:18:d5:d0:28:e3:9b:ed:ff:aa:28:98:9e:ca:
         69:b6:e2:67:2d:9c:51:01:1a:b1:ae:cf:50:5a:6f:49:2c:b6:
         8c:00:8e:cc:1c:96:9c:30:4b:6c:61:99:2c:c1:22:64:c4:aa:
         36:ef:d9:1c:b8:89:b2:84:87:ea:93:13:cf:9e:0b:b0:be:44:
         92:00:6f:33:c6:62:a3:f9:5d:87:4a:43:3d:3d:bf:12:90:83:
         04:2b:8d:45:55:cb:ff:7c:56:40:96:ce:ad:75:a6:fe:3e:22:
         db:a2:8b:55:b7:60:fc:fd:bb:c5:f6:86:9d:a2:84:1b:ce:07:
         94:b2:e6:88:a8:d9:a2:c0:f3:be:86:8a:0f:72:67:53:00:25:
         01:cc:a7:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yECKUF8Rt7CrOH8OskS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm
OTM2OTUwHhcNMjUxMDIwMDQwMjE3WhcNMjUxMDIxMDQwMjE3WjAzMTEwLwYDVQQD
EyhkOWZkZjJmOTBmMWQ1NGIzNzM4Mjg0MWZkYmQ0MTJkYzRkNzUwMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLe+Czux/N1HpliE+4ZEAZtO5+RG
SaEQK1HEX2kY2DTBFh/M23iTK1TzWpvQ5W0dhdyZTrpV1d1uXJcJdu8SQ81rE+kp
LvB9ymcRMZy67eGsF3AxDxPAD9P34MHHUE7sepU6KnnhyOlnQrOr+6FUskJQplpM
b7fAdnNd5JNaWjRUHURizqh+G218qhHmCrWOwl2YSujoHZtdM2BJJQWF14EjBx8x
956wL6l/0NiNiVwGyj3yvTQqAC3t/msg/EjQwtf662z/1Cdd5YKwZT62QBIPYF6x
8UxZxJLw2/MJLcLU71xGxXPoS0FJqh/smSu1pYm6d8jt8Z7AEdSyjZPVXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNn98vkPHVSzc4KEH9vUEtxNdQNUMB8GA1UdIwQY
MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt
NjBjZjlhYjFiMTNlLzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl
LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAry5IWKO0
N+IhcCm/AO5Jr7QBsfQp6ogV4eFOISKc/+qwt/zaRToqc8oVOKxgJWDGU7u30m5D
oPgvIpNg9gvLiZrvPiyOUj2ToIMCaxnw+8UclNyX2PVwpJZSGfXxdu9ALtdDMxIZ
Tl2GVkNYFKTQjRwY1dAo45vt/6oomJ7KabbiZy2cUQEasa7PUFpvSSy2jACOzByW
nDBLbGGZLMEiZMSqNu/ZHLiJsoSH6pMTz54LsL5EkgBvM8Zio/ldh0pDPT2/EpCD
BCuNRVXL/3xWQJbOrXWm/j4i26KLVbdg/P27xfaGnaKEG84HlLLmiKjZosDzvoaK
D3JnUwAlAcynEQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:14:48 2025 by rpki-client