Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
File:                     MDeJJY5gnz5VjXezv9CKzzUV-pI.mft (raw, json)
Hash identifier:          EXn9Wbg8zh2jUVlt1q5EUHmQtMF6V2O40JoAZx3Qk0Y=
Subject key identifier:   55:39:8A:79:04:97:08:7C:C5:A7:F9:8A:34:FB:19:7F:04:2A:50:EC
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Certificate issuer:       /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial:       0199FBEAFB315E4EA415720A5D517C07953E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
Manifest number:          10BC
Signing time:             Sun 19 Oct 2025 10:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:44 +0000
Files and hashes:         1: CxgP4WGmDc-j3ZUPD_Rcb4uV8ns.roa (hash: XodVBcVXpLoQd1C4J0bRPfMq7vIVpbrh7r32+gpZkVk=)
                          2: MDeJJY5gnz5VjXezv9CKzzUV-pI.crl (hash: njRdMaAQomr4owekwf8q2IdxpolZnC2ExsW0EYbLRCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:fb:31:5e:4e:a4:15:72:0a:5d:51:7c:07:95:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
        Validity
            Not Before: Oct 19 10:01:44 2025 GMT
            Not After : Oct 20 10:01:44 2025 GMT
        Subject: CN=55398a790497087cc5a7f98a34fb197f042a50ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:c3:8a:92:67:7b:46:72:3c:e7:c2:17:cb:
                    50:37:6c:0e:41:a3:33:4f:08:4c:64:7b:52:ea:6d:
                    46:51:3e:c1:db:a1:d3:98:f4:34:74:be:b0:22:14:
                    1f:b8:58:29:7f:e4:d9:2b:6a:6c:ca:d7:37:5e:2c:
                    4d:ae:63:7e:e4:b6:2d:0e:df:60:7c:cc:fc:9b:40:
                    34:27:56:c4:cf:8d:aa:df:53:97:4e:e5:0b:b5:23:
                    a3:bc:6a:07:49:43:09:1b:f5:8f:28:63:60:d1:4c:
                    ee:25:2a:aa:68:42:19:91:e6:ec:42:cf:cd:aa:7c:
                    a8:09:7d:2a:0e:40:28:db:df:41:03:b2:28:52:3d:
                    c3:99:54:9b:48:34:97:e4:b7:15:93:53:ff:19:14:
                    56:94:ff:3e:6a:36:71:3d:32:d1:94:b3:d8:d9:ac:
                    89:1e:8a:25:72:4e:cc:ae:df:59:7e:2d:c0:a1:3d:
                    4e:66:33:99:ec:c2:9e:6e:07:39:e2:cf:1b:80:a3:
                    62:b9:34:18:24:d8:f3:e4:cc:84:7d:98:45:9a:9f:
                    ab:cf:11:fc:c8:69:57:27:9c:24:87:13:6c:eb:7f:
                    73:41:5b:7b:6a:c7:95:b1:10:b2:46:17:77:d3:83:
                    26:3e:cb:78:d3:6d:78:d6:60:57:ec:5a:68:bf:a3:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:39:8A:79:04:97:08:7C:C5:A7:F9:8A:34:FB:19:7F:04:2A:50:EC
            X509v3 Authority Key Identifier:
                keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d6:9f:e9:19:f8:a1:73:a6:16:1e:b5:d4:93:51:f4:b3:6e:
         1e:c2:2f:31:6a:de:65:d2:d1:78:f9:5a:1d:1b:93:bf:66:2a:
         bc:21:88:8c:4e:59:e9:42:b4:57:f4:fa:f8:e5:55:bf:bc:bc:
         20:68:6d:65:b4:93:93:39:b6:3d:e0:42:14:63:56:77:58:26:
         6d:38:36:c2:a2:bc:3b:0d:d0:5b:bb:11:e4:b1:a3:d1:60:6c:
         2c:20:b3:ad:d8:3e:1d:06:99:53:86:9a:a0:af:88:df:22:aa:
         1c:b3:50:b1:7e:0a:d1:25:e1:28:04:41:9d:a2:3a:82:b8:20:
         16:cf:80:10:ca:b5:09:dc:26:97:9f:79:a3:49:82:b1:73:53:
         0b:1f:df:5a:02:1d:82:1f:69:2c:f3:7f:a4:be:88:a3:a6:d5:
         3c:58:87:c6:bb:a4:bc:8c:76:c6:05:a6:ee:54:86:b8:f9:fb:
         c2:b8:71:9f:8e:fc:a3:46:dd:10:ce:05:84:c0:c7:61:52:3c:
         7b:cd:8a:4d:48:58:12:12:2b:76:a5:0c:27:a3:c3:d8:ce:46:
         f2:88:dd:62:8b:27:ff:9f:11:17:45:42:63:97:64:b1:af:42:
         f4:6b:f2:31:f1:c0:2b:62:c0:4d:3b:99:70:bc:e6:68:41:39:
         b2:8b:5f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vsxXk6kFXIKXVF8B5U+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzc4OTI1OGU2MDlmM2U1NThkNzdiM2JmZDA4YWNmMzUx
NWZhOTIwHhcNMjUxMDE5MTAwMTQ0WhcNMjUxMDIwMTAwMTQ0WjAzMTEwLwYDVQQD
Eyg1NTM5OGE3OTA0OTcwODdjYzVhN2Y5OGEzNGZiMTk3ZjA0MmE1MGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytTDipJne0ZyPOfCF8tQN2wOQaMz
TwhMZHtS6m1GUT7B26HTmPQ0dL6wIhQfuFgpf+TZK2psytc3XixNrmN+5LYtDt9g
fMz8m0A0J1bEz42q31OXTuULtSOjvGoHSUMJG/WPKGNg0UzuJSqqaEIZkebsQs/N
qnyoCX0qDkAo299BA7IoUj3DmVSbSDSX5LcVk1P/GRRWlP8+ajZxPTLRlLPY2ayJ
Hoolck7Mrt9Zfi3AoT1OZjOZ7MKebgc54s8bgKNiuTQYJNjz5MyEfZhFmp+rzxH8
yGlXJ5wkhxNs639zQVt7aseVsRCyRhd304MmPst402141mBX7Fpov6PYfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFU5inkElwh8xaf5ijT7GX8EKlDsMB8GA1UdIwQY
MBaAFDA3iSWOYJ8+VY13s7/Qis81FfqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTct
NGYyMTlkYjc4NTA4LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTctNGYyMTlkYjc4NTA4
LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutaf6Rn4
oXOmFh611JNR9LNuHsIvMWreZdLRePlaHRuTv2YqvCGIjE5Z6UK0V/T6+OVVv7y8
IGhtZbSTkzm2PeBCFGNWd1gmbTg2wqK8Ow3QW7sR5LGj0WBsLCCzrdg+HQaZU4aa
oK+I3yKqHLNQsX4K0SXhKARBnaI6grggFs+AEMq1Cdwml595o0mCsXNTCx/fWgId
gh9pLPN/pL6Io6bVPFiHxrukvIx2xgWm7lSGuPn7wrhxn478o0bdEM4FhMDHYVI8
e82KTUhYEhIrdqUMJ6PD2M5G8ojdYosn/58RF0VCY5dksa9C9GvyMfHAK2LATTuZ
cLzmaEE5sotftQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:52 2025 by rpki-client