Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File:                     5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier:          XQAxgi2IkcWfqvQxgRp5B5nUB9TGhrCgcIs8omAEGc0=
Subject key identifier:   FD:B1:AC:89:12:56:74:6B:C4:88:77:29:58:49:18:D2:77:D5:8F:95
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       0199FB7C971287EC7F0BF435CE03485654D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number:          138F
Signing time:             Sun 19 Oct 2025 08:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:10 +0000
Files and hashes:         1: 1-gxOhCZj8nS37sWsUDKlmcK-Rw8.roa (hash: /+5YDb/LdEiV9iy+qGtaTiI/QdW15m+uapnwWEACL9w=)
                          2: 4Pfo6dr7-737k8tyVTjGVmWtq04.roa (hash: q2tjhHYa3ywzq75oRuuLup6rX2uYWNVGvc0AQBtWN4U=)
                          3: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: Mtd2WZtoPmYGcRElDq/R/gzr8MZHvqr25Ct9pkahwck=)
                          4: JBj8FsplA-MBUc0zqf4_NLYuJ-Q.roa (hash: ecVjlw+CLQrBEbrHY/WkvclcM5Zgixit06zD/ClEBGI=)
                          5: RBkgRrAO-SK1QpFRlG9h6FY_zag.roa (hash: gj4I6KlHXB/OrHZEuGeKV9cL34seV3UUQBVMpD0Ut6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:97:12:87:ec:7f:0b:f4:35:ce:03:48:56:54:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Oct 19 08:01:10 2025 GMT
            Not After : Oct 20 08:01:10 2025 GMT
        Subject: CN=fdb1ac891256746bc4887729584918d277d58f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:4d:97:5e:3c:90:07:62:05:72:97:62:e3:
                    79:c8:03:69:ed:01:21:da:14:0a:12:e7:5f:bb:24:
                    9a:30:23:20:ec:f1:37:8a:bd:1e:da:f9:95:59:d8:
                    e9:53:21:94:e3:1b:e0:4c:60:be:34:1d:e2:10:3a:
                    a5:17:db:d6:1f:39:72:7f:2b:55:91:d2:de:66:66:
                    90:ae:b8:30:6b:72:31:9c:8c:b7:48:2e:a0:fa:76:
                    1b:bc:b3:7e:c0:7f:7f:3c:22:e4:dd:7c:c8:88:7d:
                    91:15:87:2c:51:6d:6e:05:2d:17:1b:ef:2f:42:ed:
                    a8:9c:39:8b:e9:34:cc:e1:a1:cb:cf:69:97:13:94:
                    88:35:7c:9a:80:47:ee:93:3f:f0:e9:27:4f:fd:f6:
                    66:23:f0:8f:71:03:71:6b:91:d1:1d:7a:14:ac:94:
                    70:ca:ee:0c:ca:09:df:14:0a:ec:80:11:75:28:0e:
                    5e:eb:1f:39:22:4f:c8:e1:f1:77:e3:bd:fa:4a:22:
                    2f:1e:75:c3:00:07:97:6c:41:6a:cb:54:59:c3:7f:
                    04:4d:a4:6d:c1:f4:c3:38:27:b1:2e:83:72:45:26:
                    61:34:d9:77:49:bf:76:91:67:c5:ed:96:24:e7:be:
                    0a:c0:be:c3:6b:ee:4b:4a:ee:31:50:1c:81:43:77:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B1:AC:89:12:56:74:6B:C4:88:77:29:58:49:18:D2:77:D5:8F:95
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:40:aa:68:a3:dd:e6:73:69:ba:0c:58:62:78:7d:3d:37:
         f9:3e:db:18:92:ec:0a:e3:24:d7:f2:eb:a8:a5:35:9f:c1:ea:
         dd:3f:85:8b:cf:4d:70:96:b8:a8:67:b7:db:b4:d6:6c:9a:3d:
         a2:3d:df:ba:25:f1:c7:20:a9:87:7b:6a:78:d1:95:e2:05:27:
         3f:79:c2:bf:c0:5e:6e:d7:d3:0b:e8:bb:a3:d3:c5:05:c5:15:
         3c:db:9d:28:10:f4:3b:3c:be:a7:7c:28:2a:da:ed:82:56:a4:
         17:d2:a0:c3:a9:5f:b1:a9:66:e4:4a:b6:43:f8:3d:81:68:92:
         5d:1c:d7:d5:0f:5d:5b:bf:86:87:a8:2b:63:af:2d:77:96:64:
         c5:43:02:2d:46:2b:fd:83:5b:e5:2b:f1:c5:49:74:ac:da:fe:
         ac:a1:ea:58:e3:c3:35:15:7d:d0:05:ce:c2:e5:74:af:9b:d6:
         53:48:b3:3b:1c:34:2b:cf:47:6c:34:29:53:33:26:b5:56:02:
         b2:16:65:6b:5e:28:13:fb:80:a4:db:6c:b5:d6:08:09:66:f7:
         da:fb:42:fd:83:1c:70:f2:96:25:1a:74:94:7b:e6:9d:08:77:
         30:f0:06:44:9c:22:79:fd:b3:f7:5b:cc:96:f9:3b:0a:d1:38:
         9e:46:48:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJcSh+x/C/Q1zgNIVlTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw
YTFhNjYwHhcNMjUxMDE5MDgwMTEwWhcNMjUxMDIwMDgwMTEwWjAzMTEwLwYDVQQD
EyhmZGIxYWM4OTEyNTY3NDZiYzQ4ODc3Mjk1ODQ5MThkMjc3ZDU4Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN9Nl148kAdiBXKXYuN5yANp7QEh
2hQKEudfuySaMCMg7PE3ir0e2vmVWdjpUyGU4xvgTGC+NB3iEDqlF9vWHzlyfytV
kdLeZmaQrrgwa3IxnIy3SC6g+nYbvLN+wH9/PCLk3XzIiH2RFYcsUW1uBS0XG+8v
Qu2onDmL6TTM4aHLz2mXE5SINXyagEfukz/w6SdP/fZmI/CPcQNxa5HRHXoUrJRw
yu4MygnfFArsgBF1KA5e6x85Ik/I4fF34736SiIvHnXDAAeXbEFqy1RZw38ETaRt
wfTDOCexLoNyRSZhNNl3Sb92kWfF7ZYk574KwL7Da+5LSu4xUByBQ3cyDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2xrIkSVnRrxIh3KVhJGNJ31Y+VMB8GA1UdIwQY
MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct
ZGU5YjJmOGY3ZTI5LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5
LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/BAqmij
3eZzaboMWGJ4fT03+T7bGJLsCuMk1/LrqKU1n8Hq3T+Fi89NcJa4qGe327TWbJo9
oj3fuiXxxyCph3tqeNGV4gUnP3nCv8BebtfTC+i7o9PFBcUVPNudKBD0Ozy+p3wo
KtrtglakF9Kgw6lfsalm5Eq2Q/g9gWiSXRzX1Q9dW7+Gh6grY68td5ZkxUMCLUYr
/YNb5SvxxUl0rNr+rKHqWOPDNRV90AXOwuV0r5vWU0izOxw0K89HbDQpUzMmtVYC
shZla14oE/uApNtstdYICWb32vtC/YMccPKWJRp0lHvmnQh3MPAGRJwief2z91vM
lvk7CtE4nkZIGA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:27 2025 by rpki-client