Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File:                     jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier:          4f33KDoROucenXqH01cggR6Z46mSD/IDuPtQc4eQNMI=
Subject key identifier:   6E:D0:97:60:3D:77:00:CD:2F:66:53:C5:24:65:AF:4B:8C:AA:2A:6D
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer:       /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial:       0199FB45E51095061CE673C3DC9BE3225EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number:          1421
Signing time:             Sun 19 Oct 2025 07:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:25 +0000
Files and hashes:         1: CGfUbuDeRkllwMZF7DTrKk3yLcE.roa (hash: l5jsvO9CwwUl92v3ODW6ImGh3DZFw7mx9nyyajWFi54=)
                          2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: CxglfCUNF+ltIMeMBHhoLyLPZLIycSPzcPH5tifrJZY=)
                          3: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:e5:10:95:06:1c:e6:73:c3:dc:9b:e3:22:5e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
        Validity
            Not Before: Oct 19 07:01:25 2025 GMT
            Not After : Oct 20 07:01:25 2025 GMT
        Subject: CN=6ed097603d7700cd2f6653c52465af4b8caa2a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:51:87:30:4d:2a:bd:64:a8:77:ad:7f:eb:56:
                    10:b6:a7:cf:2d:61:d9:f3:49:e0:2d:d2:a7:4c:c5:
                    a8:6c:b4:e3:c5:7e:cc:3b:fb:17:cd:ef:84:41:aa:
                    8f:d5:3d:74:c1:37:fd:24:6f:2d:21:9d:b1:c7:1d:
                    c0:61:2f:e7:36:03:93:fd:4e:c8:46:e0:db:75:60:
                    49:44:a7:0b:ee:eb:06:19:52:07:a5:09:2d:c0:42:
                    55:49:7d:af:16:b0:b8:7f:1f:d5:a6:52:ee:b9:f1:
                    5e:af:2c:41:71:11:9c:73:4d:ab:6e:38:41:6b:53:
                    16:40:a8:e6:bb:cb:2f:b0:0a:77:86:8b:93:08:0a:
                    e7:a3:84:70:8e:5b:d2:47:f6:e4:3b:ae:e9:d3:5f:
                    8e:da:0d:ed:5a:26:b2:11:36:c1:fa:86:66:39:fc:
                    2f:a1:a6:75:31:72:b6:2d:96:4c:c8:a8:31:49:ce:
                    3e:9b:58:4a:fe:74:5c:05:e4:ba:6b:24:f6:e3:5a:
                    2f:94:8b:66:b4:91:e4:6e:a5:40:1d:13:ce:fb:b2:
                    ea:1b:5d:83:67:f5:ed:8d:70:18:84:ec:fe:ef:a6:
                    67:b2:26:92:e6:71:a4:67:17:12:55:90:e0:0b:fd:
                    e7:1f:65:54:ac:7d:61:64:66:e9:83:bd:ba:22:3c:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D0:97:60:3D:77:00:CD:2F:66:53:C5:24:65:AF:4B:8C:AA:2A:6D
            X509v3 Authority Key Identifier:
                keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:53:80:98:59:e8:8a:67:64:4d:73:8b:7f:a1:61:c4:85:62:
         0d:71:b4:cf:7e:95:22:fa:5f:68:1d:a6:49:c0:7e:68:df:9d:
         e3:47:c8:32:23:26:69:6f:39:fa:9c:12:2d:d3:c4:fc:5d:c3:
         5a:e2:1e:64:0b:29:14:d1:fe:3b:fd:fa:b4:c8:b2:6a:ab:50:
         34:e3:64:d6:78:36:fb:57:ee:2b:11:f9:85:67:dc:9b:70:fe:
         f6:e4:31:cd:3a:28:22:72:78:23:fc:15:27:f2:bb:48:1b:8a:
         5a:49:93:cb:f5:16:76:f1:5b:bf:c8:f3:e2:a9:9c:50:ec:10:
         3e:35:50:2f:b0:25:9b:ed:75:f2:cf:c9:c4:aa:dc:92:1d:59:
         1b:40:57:f4:00:de:e5:c0:4d:d1:20:f2:33:5f:f6:86:50:43:
         ec:ee:58:7f:64:8e:a4:0e:18:55:10:0e:27:db:10:41:bc:bf:
         2f:3d:fe:d3:62:e8:1b:94:bb:e0:97:ca:1d:80:a2:72:e8:1e:
         a4:06:02:99:66:d4:6b:8b:fd:b5:4d:34:eb:e8:33:11:37:d7:
         44:7c:d4:4a:40:46:83:21:a5:72:63:37:a3:4b:18:0d:3f:24:
         98:5c:24:cb:fd:f6:af:cf:5f:75:33:8c:05:91:7d:e0:6d:c3:
         6d:ed:69:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7ReUQlQYc5nPD3JvjIl7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2
M2MwYTkwHhcNMjUxMDE5MDcwMTI1WhcNMjUxMDIwMDcwMTI1WjAzMTEwLwYDVQQD
Eyg2ZWQwOTc2MDNkNzcwMGNkMmY2NjUzYzUyNDY1YWY0YjhjYWEyYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VGHME0qvWSod61/61YQtqfPLWHZ
80ngLdKnTMWobLTjxX7MO/sXze+EQaqP1T10wTf9JG8tIZ2xxx3AYS/nNgOT/U7I
RuDbdWBJRKcL7usGGVIHpQktwEJVSX2vFrC4fx/VplLuufFeryxBcRGcc02rbjhB
a1MWQKjmu8svsAp3houTCArno4RwjlvSR/bkO67p01+O2g3tWiayETbB+oZmOfwv
oaZ1MXK2LZZMyKgxSc4+m1hK/nRcBeS6ayT241ovlItmtJHkbqVAHRPO+7LqG12D
Z/XtjXAYhOz+76ZnsiaS5nGkZxcSVZDgC/3nH2VUrH1hZGbpg726IjzRewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7Ql2A9dwDNL2ZTxSRlr0uMqiptMB8GA1UdIwQY
MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt
OGFjYmZlYTJlY2ZhLzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh
LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1OAmFno
imdkTXOLf6FhxIViDXG0z36VIvpfaB2mScB+aN+d40fIMiMmaW85+pwSLdPE/F3D
WuIeZAspFNH+O/36tMiyaqtQNONk1ng2+1fuKxH5hWfcm3D+9uQxzTooInJ4I/wV
J/K7SBuKWkmTy/UWdvFbv8jz4qmcUOwQPjVQL7Alm+118s/JxKrckh1ZG0BX9ADe
5cBN0SDyM1/2hlBD7O5Yf2SOpA4YVRAOJ9sQQby/Lz3+02LoG5S74JfKHYCicuge
pAYCmWbUa4v9tU006+gzETfXRHzUSkBGgyGlcmM3o0sYDT8kmFwky/32r89fdTOM
BZF94G3Dbe1plQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:27 2025 by rpki-client