Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File:                     ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier:          GrfUhvi6YZRQMntAt5DJO4fPRuUH9GSyt8EKntz8hVU=
Subject key identifier:   B0:36:4A:63:E1:DA:1C:AA:F8:15:CC:16:25:64:96:51:09:DF:E0:A4
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer:       /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial:       0199FCFD93C404199AB6163B363081D9E17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number:          0489
Signing time:             Sun 19 Oct 2025 15:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:40 +0000
Files and hashes:         1: XnOuIokBdMAkCep62IYd6iA-AP0.roa (hash: 46xujjI9s3TgttzYiibmkBsBEPkKuAgurV4IijrOPnY=)
                          2: c_-rMl7HFVaHx3u8k-mg-7MnS34.roa (hash: AGapCrdXwoHdePxIoXjlgd8fqP8GcovBdv+jOw51rkE=)
                          3: dhJ1RACMalns3KWMnrERrY8elus.roa (hash: KN4UOM7cl+3YJuxepZbXK+ohK3xSecFS5RbymOVHGoo=)
                          4: j7YPtJlyRyiLKf8qDfUwSCI2ft8.roa (hash: 1kQEVfqcK66MTq/rhjjN/li68lX8YmDLheaZniGcMLQ=)
                          5: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: fJJPZATQF6nEW+i38WeKKoBlN5ypcO0HOSA2Fdy04vI=)
                          6: tbYCEHCORQD2jU1FhjpVeyl7yzw.roa (hash: UJRgmyhwhn7tm70C5e/aIyFO87+Jd/xNlqZSp90NpM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:93:c4:04:19:9a:b6:16:3b:36:30:81:d9:e1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
        Validity
            Not Before: Oct 19 15:01:40 2025 GMT
            Not After : Oct 20 15:01:40 2025 GMT
        Subject: CN=b0364a63e1da1caaf815cc162564965109dfe0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:67:4d:dd:fd:96:13:8b:b5:06:31:8c:91:
                    1f:97:f3:8f:a4:7e:0c:c9:7d:12:15:53:6f:7d:1c:
                    bf:c0:d9:37:de:f7:51:21:7b:bc:e7:6a:47:f8:e1:
                    bd:fe:1d:7a:de:c0:a0:89:8d:f1:db:91:b5:d2:ff:
                    d9:67:5a:78:6d:50:7d:bd:a3:3b:da:56:5f:d1:15:
                    83:0d:4f:18:b5:d2:16:be:b4:32:ab:5c:ae:8f:a6:
                    03:5f:2f:12:fd:50:ba:ce:0f:7e:13:99:76:18:d5:
                    78:b9:55:b6:f0:d7:17:43:df:b8:61:9b:25:de:5f:
                    e4:50:4f:45:5a:b0:ef:25:99:bd:06:e7:4b:39:2b:
                    bc:9c:46:f7:c4:89:59:a8:8d:5b:0b:96:e7:d7:fe:
                    51:9c:ef:f5:3a:92:ab:7b:04:78:5b:aa:21:2b:88:
                    42:58:bc:b3:34:ae:ed:50:91:e9:35:97:9d:e5:fd:
                    7d:6a:5c:72:0d:d3:5e:13:00:8d:c8:91:f6:d3:b4:
                    a8:dc:cf:2c:91:c0:55:7e:ba:12:2e:31:84:7f:18:
                    56:78:62:a2:31:4c:c2:de:6d:b6:f5:a9:c6:0f:7b:
                    4b:ec:7c:c4:fa:86:f9:3f:11:2d:55:01:69:77:20:
                    bf:40:7c:7e:4e:e6:38:22:a7:5e:86:e6:b2:0d:78:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:4A:63:E1:DA:1C:AA:F8:15:CC:16:25:64:96:51:09:DF:E0:A4
            X509v3 Authority Key Identifier:
                keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:41:1e:9d:85:33:b2:98:b7:42:57:a4:c2:aa:ad:61:6c:9b:
         84:14:cb:51:a8:d9:37:73:08:b9:3b:8f:be:7c:66:03:1e:06:
         5a:f3:15:a1:3f:90:28:2a:dd:76:bf:5b:17:bc:90:61:e9:62:
         93:c2:06:01:35:7c:d1:6f:ea:91:49:3b:df:ff:2d:b3:f6:37:
         aa:29:17:6b:3f:2f:d7:4e:8d:a8:53:06:d7:65:8b:06:ee:77:
         9d:55:78:58:08:b0:46:25:82:c4:0d:99:56:00:f2:60:ad:4b:
         7e:bd:d0:60:45:7e:ce:78:d9:fe:1d:84:30:61:a1:c2:5f:8d:
         7f:1b:33:fb:d8:d0:4b:a8:27:95:71:27:92:40:81:e6:70:8a:
         60:4d:6f:06:bd:f7:a6:55:d9:af:2b:25:da:37:9b:0d:d2:62:
         5e:b3:64:3b:d0:73:ad:9c:e9:d6:f7:a6:3a:ae:07:60:d8:17:
         ec:44:72:e3:b8:45:5f:7a:6d:d0:c8:03:88:91:98:b3:f2:52:
         08:81:92:1f:36:b0:fe:b5:10:ef:35:91:72:92:ce:0a:ee:f0:
         54:3d:b4:7e:c1:59:e1:1a:e9:bf:d7:0e:a2:53:1d:e1:33:ec:
         9e:82:ad:85:13:4d:cb:1b:62:dc:82:4c:2f:52:3d:71:68:0c:
         15:a2:c5:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/ZPEBBmathY7NjCB2eF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWU3NmY5MjlkMjFiNTg2ZjQyZTMwZjdkOWIwMDM5OWIz
ZGNiZjAwHhcNMjUxMDE5MTUwMTQwWhcNMjUxMDIwMTUwMTQwWjAzMTEwLwYDVQQD
EyhiMDM2NGE2M2UxZGExY2FhZjgxNWNjMTYyNTY0OTY1MTA5ZGZlMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbBnTd39lhOLtQYxjJEfl/OPpH4M
yX0SFVNvfRy/wNk33vdRIXu852pH+OG9/h163sCgiY3x25G10v/ZZ1p4bVB9vaM7
2lZf0RWDDU8YtdIWvrQyq1yuj6YDXy8S/VC6zg9+E5l2GNV4uVW28NcXQ9+4YZsl
3l/kUE9FWrDvJZm9BudLOSu8nEb3xIlZqI1bC5bn1/5RnO/1OpKrewR4W6ohK4hC
WLyzNK7tUJHpNZed5f19alxyDdNeEwCNyJH207So3M8skcBVfroSLjGEfxhWeGKi
MUzC3m229anGD3tL7HzE+ob5PxEtVQFpdyC/QHx+TuY4IqdehuayDXiMyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA2SmPh2hyq+BXMFiVkllEJ3+CkMB8GA1UdIwQY
MBaAFJpedvkp0htYb0LjD32bADmbPcvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAt
YjRhYWEyM2ZkYWE5LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAtYjRhYWEyM2ZkYWE5
LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakEenYUz
spi3QlekwqqtYWybhBTLUajZN3MIuTuPvnxmAx4GWvMVoT+QKCrddr9bF7yQYeli
k8IGATV80W/qkUk73/8ts/Y3qikXaz8v106NqFMG12WLBu53nVV4WAiwRiWCxA2Z
VgDyYK1Lfr3QYEV+znjZ/h2EMGGhwl+Nfxsz+9jQS6gnlXEnkkCB5nCKYE1vBr33
plXZrysl2jebDdJiXrNkO9BzrZzp1vemOq4HYNgX7ERy47hFX3pt0MgDiJGYs/JS
CIGSHzaw/rUQ7zWRcpLOCu7wVD20fsFZ4Rrpv9cOolMd4TPsnoKthRNNyxti3IJM
L1I9cWgMFaLFAg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:43 2025 by rpki-client