Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
File:                     xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json)
Hash identifier:          fqU57M/osifUm7QG0aAxi7f/9Og/niT/j+jEcxv/6yc=
Subject key identifier:   25:C7:BD:CB:D2:74:9E:3B:42:99:DA:E5:55:32:AC:9C:98:3E:5F:68
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       0199FE7DDFFFE3BA593F60733DC5E950BCEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
Manifest number:          0D78
Signing time:             Sun 19 Oct 2025 22:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:26 +0000
Files and hashes:         1: 1C6P3GNOT9xCFcwCmWzySJRmx5A.roa (hash: s0f2U+jT20UZ968tvSAQBzHf4LLoAyTWw5fawKSyypo=)
                          2: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=)
                          3: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=)
                          4: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=)
                          5: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=)
                          6: NlsrM9j9VUiM42jtu0FZB88d1z8.roa (hash: 6PC/+zU3u3k/HKNCn3GHAiUb1zNn0DzxWjzqB9gdYy8=)
                          7: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=)
                          8: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=)
                          9: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=)
                          10: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=)
                          11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=)
                          12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=)
                          13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=)
                          14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=)
                          15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: jVwm6GI5hvt5fG1QeaGVq2W9pVbVG5wp7ZP2fPOrJ6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:df:ff:e3:ba:59:3f:60:73:3d:c5:e9:50:bc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Oct 19 22:01:26 2025 GMT
            Not After : Oct 20 22:01:26 2025 GMT
        Subject: CN=25c7bdcbd2749e3b4299dae55532ac9c983e5f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:21:80:70:57:17:01:05:76:a0:3d:64:22:
                    83:cd:0e:d3:6f:56:dd:66:b3:fb:23:81:8d:f3:92:
                    76:e1:03:97:4b:b3:89:68:8f:d3:75:53:10:f5:64:
                    b5:70:03:e9:4b:4f:83:89:d5:b5:bb:18:47:dc:c7:
                    b7:af:a9:1c:3d:fe:91:f3:4c:e7:de:0f:79:81:09:
                    c4:6a:79:53:75:b9:3d:97:a3:bc:08:09:ff:8c:e3:
                    7e:0a:10:d0:77:81:95:92:c6:2e:31:14:a7:12:cd:
                    0f:d2:18:79:d5:63:55:c7:ef:bc:ad:36:c5:89:ec:
                    99:ad:68:98:cc:33:a0:7b:8d:e8:be:66:31:29:e4:
                    d1:d4:8d:98:66:af:d9:e8:1c:e2:2c:cd:46:c8:c0:
                    83:6c:a3:fa:48:11:56:6d:11:c4:72:3d:39:ef:0e:
                    ad:fc:20:bf:7b:d1:1a:0c:70:bb:c8:9f:b0:9c:1d:
                    17:6c:2e:ae:c3:45:fd:60:ae:7f:07:e3:55:7d:e2:
                    cd:04:9e:bf:b8:f7:8e:37:5b:8c:14:cb:32:67:a0:
                    af:8c:43:56:04:ee:b3:c0:18:07:fe:54:eb:ba:91:
                    06:f3:63:1a:6c:20:ea:c4:08:20:c9:0c:56:68:de:
                    5d:c6:c1:45:4a:44:c0:db:de:69:80:69:ef:5f:fd:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C7:BD:CB:D2:74:9E:3B:42:99:DA:E5:55:32:AC:9C:98:3E:5F:68
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:c3:17:22:11:64:c9:47:44:c0:03:99:e9:30:4e:c9:49:
         1d:d7:37:45:ef:e2:dd:39:db:bc:06:07:cc:a1:78:a8:e3:86:
         2c:c8:48:a6:ef:bc:10:4a:64:dd:4f:f3:6f:92:e1:53:32:da:
         1d:2d:77:ab:c4:80:02:37:49:38:c1:da:ad:bf:70:ab:31:34:
         b3:e3:93:bd:2f:68:db:a7:8d:c0:78:b6:13:23:3b:c9:7a:77:
         86:4c:df:2a:07:0f:66:73:8e:95:fa:1c:60:ed:43:f5:98:a8:
         71:96:65:cd:c8:bd:ad:a2:76:26:70:90:2d:e9:e4:eb:08:55:
         f1:b6:40:21:20:de:71:3a:6e:61:81:bb:5a:a6:65:b4:9b:26:
         c2:ce:e0:ee:f6:55:93:80:de:be:55:c4:42:69:df:0f:47:b3:
         72:bc:4c:c1:77:da:03:96:79:61:ab:d5:e2:92:54:0e:59:31:
         23:d1:5f:a1:54:a1:c7:ea:b2:56:98:7e:a0:ce:44:50:a5:c6:
         a7:8a:3f:36:83:61:1d:1c:26:10:21:16:58:4d:6e:7f:82:6b:
         9c:28:2c:62:ff:58:4c:62:42:b2:82:cf:fe:24:7f:c0:00:aa:
         9a:ab:2d:19:87:a6:47:23:48:d5:7d:5b:6e:2f:a1:c1:6d:45:
         5a:41:35:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:10 2025 by rpki-client