Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          RrDxkrAsVQp67Jb76kUSkDLJEXGdig8dMf0XYNG4rWY=
Subject key identifier:   6F:E2:5D:AA:9B:7B:D4:C1:87:F3:1C:50:0D:DE:67:9C:5E:C2:E9:2F
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       0199FCFD88E3388743F65E1BD441172DFB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          0CD9
Signing time:             Sun 19 Oct 2025 15:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:38 +0000
Files and hashes:         1: 2ez8zuMs85e8CXlTRW23szM974M.roa (hash: nEbfOX8jy17dtiQ2QC4585/p7vP/7oJdRyNgTQoPp+0=)
                          2: 55jh7ZUXwY_9NSAWp4_RLJkLobk.roa (hash: q93ZDaiBje1HE/Gb640AQrHdK3FIANVFUxJnhDp/M4A=)
                          3: AUDMpjmCaKaksbx4oZ86HO931ng.roa (hash: GZOJzUdAkTOPDEQqYNkLxv9JD+varoxKqavWfC1fFBk=)
                          4: FamIa9uVUsnSTLirzZic8UQVhs8.roa (hash: VPd/bG5XgZdRuDgLlun3vA0o7NYvRU74hM05UOQs9Vk=)
                          5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: /nZVdL1gKTPJGwbfoNeFK5fuGyL0dCezQRCexCJyCdA=)
                          6: wJH2YhXqksjsanF0KbJBwlYiZcc.roa (hash: n/0BTqFTsqTUVEvotziQ7CPQtrqIst9qVSVCHNt1hJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:88:e3:38:87:43:f6:5e:1b:d4:41:17:2d:fb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: Oct 19 15:01:38 2025 GMT
            Not After : Oct 20 15:01:38 2025 GMT
        Subject: CN=6fe25daa9b7bd4c187f31c500dde679c5ec2e92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:73:0d:82:28:10:b1:ed:45:7a:4b:d6:06:
                    71:d7:b3:59:20:9b:04:25:08:49:93:bc:e5:c1:f4:
                    58:47:79:67:8d:73:34:75:de:d0:4f:03:06:10:83:
                    f4:79:3a:ba:9f:ab:45:6c:d5:77:ee:fb:3d:e9:f9:
                    ca:3e:9a:e3:6c:db:ed:af:5a:8d:62:7f:7b:2a:22:
                    e9:34:b9:7a:52:99:2f:c9:33:62:2e:44:2b:98:d3:
                    e4:f0:29:2f:f6:7c:71:56:ec:82:90:97:8f:4c:27:
                    89:5e:b8:d5:9f:fa:7f:91:a1:ca:35:86:dc:4e:cb:
                    45:57:6e:3b:f5:20:c1:84:bf:40:7a:20:3e:4f:3f:
                    fa:c4:24:25:3b:55:00:3c:73:ae:69:6c:f1:e0:b4:
                    92:a1:5f:24:be:89:ac:15:c8:72:01:93:70:e2:7d:
                    77:fd:d0:3d:0e:ae:df:59:7f:9a:d4:24:f3:3c:08:
                    48:8e:d8:63:4a:c8:11:62:6a:5b:0f:60:51:0e:8e:
                    18:72:8d:34:f0:36:ac:b2:95:c9:24:75:bf:fa:84:
                    f6:04:73:53:aa:49:5a:b6:3b:8a:8c:8a:49:62:de:
                    82:dd:9e:5e:55:82:9e:9e:8c:c4:62:48:a3:7f:33:
                    fd:8d:5a:a3:8e:b2:8d:20:09:b9:ab:ba:ce:58:76:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:5D:AA:9B:7B:D4:C1:87:F3:1C:50:0D:DE:67:9C:5E:C2:E9:2F
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f8:e6:0b:86:64:0b:17:88:b0:e5:c5:97:91:5e:17:73:8d:
         8e:63:6e:05:21:46:db:8c:8d:4d:dc:10:49:13:ce:cb:77:11:
         1d:8d:10:da:bc:85:19:ae:01:f8:83:9e:a7:16:ba:44:9f:00:
         f2:83:4e:47:ef:c4:10:13:87:be:93:09:54:96:06:35:95:5b:
         aa:84:00:cc:f5:90:30:74:ce:d3:22:a8:9a:06:8e:19:a0:b4:
         6e:53:ac:13:05:f1:7a:e2:b7:99:9f:b0:ba:6a:9e:69:ee:d9:
         b0:77:c0:4d:ec:1b:25:65:ca:04:88:b8:bb:7c:46:02:b9:d6:
         ed:41:4d:c7:b9:e5:98:cb:5f:85:8a:bb:59:a5:42:ec:65:f4:
         7b:65:af:c3:ef:ee:26:f3:06:be:6a:a0:48:fc:39:3b:f8:88:
         6a:ce:0a:ad:0c:a1:01:02:a0:38:b1:5b:0a:a7:4d:01:90:76:
         75:46:86:da:78:3f:5f:0b:a5:d0:31:54:d7:6c:88:9f:c2:a7:
         b1:ac:a3:bc:fd:6c:7c:11:46:8f:b8:a3:3d:37:1a:47:c9:35:
         20:ab:90:56:77:5a:f1:b0:f8:bd:c3:f6:9e:49:7d:1b:f9:e6:
         01:82:ff:97:e0:8a:5f:8a:c3:cf:0f:58:61:5e:e5:4f:89:a6:
         14:f2:f6:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/YjjOIdD9l4b1EEXLftLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2
ODZlYmMwHhcNMjUxMDE5MTUwMTM4WhcNMjUxMDIwMTUwMTM4WjAzMTEwLwYDVQQD
Eyg2ZmUyNWRhYTliN2JkNGMxODdmMzFjNTAwZGRlNjc5YzVlYzJlOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunxzDYIoELHtRXpL1gZx17NZIJsE
JQhJk7zlwfRYR3lnjXM0dd7QTwMGEIP0eTq6n6tFbNV37vs96fnKPprjbNvtr1qN
Yn97KiLpNLl6UpkvyTNiLkQrmNPk8Ckv9nxxVuyCkJePTCeJXrjVn/p/kaHKNYbc
TstFV2479SDBhL9AeiA+Tz/6xCQlO1UAPHOuaWzx4LSSoV8kvomsFchyAZNw4n13
/dA9Dq7fWX+a1CTzPAhIjthjSsgRYmpbD2BRDo4Yco008DasspXJJHW/+oT2BHNT
qklatjuKjIpJYt6C3Z5eVYKenozEYkijfzP9jVqjjrKNIAm5q7rOWHYVswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/iXaqbe9TBh/McUA3eZ5xewukvMB8GA1UdIwQY
MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt
OWIyODJjNjQzMjU2LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2
LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfjmC4Zk
CxeIsOXFl5FeF3ONjmNuBSFG24yNTdwQSRPOy3cRHY0Q2ryFGa4B+IOepxa6RJ8A
8oNOR+/EEBOHvpMJVJYGNZVbqoQAzPWQMHTO0yKomgaOGaC0blOsEwXxeuK3mZ+w
umqeae7ZsHfATewbJWXKBIi4u3xGArnW7UFNx7nlmMtfhYq7WaVC7GX0e2Wvw+/u
JvMGvmqgSPw5O/iIas4KrQyhAQKgOLFbCqdNAZB2dUaG2ng/Xwul0DFU12yIn8Kn
sayjvP1sfBFGj7ijPTcaR8k1IKuQVnda8bD4vcP2nkl9G/nmAYL/l+CKX4rDzw9Y
YV7lT4mmFPL2RQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:30 2025 by rpki-client