Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File:                     r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier:          LtLBAEEFgvGAuo1n7c5UXbF/rv+6TE0IbIjU9IYgM34=
Subject key identifier:   F0:8A:8F:09:E4:3A:AA:B6:DB:A9:E9:3C:A4:72:FC:E1:4C:C1:8F:FC
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer:       /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial:       0199FDD907376A1603FB4548842113E16DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number:          0EDB
Signing time:             Sun 19 Oct 2025 19:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:22 +0000
Files and hashes:         1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
                          2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
                          3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
                          4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: nh8/TM4U0Jo5ae64SXWEMYoJiorufJ1brFxkhFqSk18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:07:37:6a:16:03:fb:45:48:84:21:13:e1:6d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af935603e52e831537716d458b360192f99a3689
        Validity
            Not Before: Oct 19 19:01:22 2025 GMT
            Not After : Oct 20 19:01:22 2025 GMT
        Subject: CN=f08a8f09e43aaab6dba9e93ca472fce14cc18ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:ed:ce:c9:60:5f:03:ad:ad:73:57:fd:1a:
                    54:e3:8b:c7:93:40:0d:83:9a:b2:f9:45:19:65:d3:
                    ed:b4:2a:db:5b:ea:39:05:3f:d7:cf:e3:dd:6f:99:
                    15:82:56:7e:03:00:41:b0:fd:cd:8f:a7:81:bc:a7:
                    18:b1:eb:77:81:25:b5:19:b2:d6:40:2e:59:a4:62:
                    0e:1b:72:68:0e:7a:4e:c9:f9:5c:5b:8e:f8:ff:b1:
                    ce:bf:a0:5e:26:d5:4e:19:3b:fb:37:a3:34:fe:47:
                    9f:ea:ce:55:7d:25:c3:4f:8c:0f:ab:a1:04:f5:07:
                    e2:b0:9b:2f:ac:6e:17:ec:82:f6:02:e4:bc:8b:97:
                    fe:e7:8c:a2:ba:ca:0b:4b:af:bb:c6:72:7f:32:82:
                    e8:7f:66:59:6b:b5:42:64:a3:e8:fa:af:9e:28:45:
                    cd:0e:1a:72:e0:00:ab:80:38:99:6b:a1:61:96:81:
                    65:e2:3e:9b:b4:2f:0d:65:a0:9e:32:01:50:f1:66:
                    d1:ef:eb:bb:1f:08:c5:85:16:94:31:e0:3c:c1:7b:
                    68:30:3a:f6:0f:41:d2:90:4c:13:d5:28:fd:d7:ab:
                    a2:a8:82:58:b4:7b:b9:5a:5b:89:7d:1f:4a:49:35:
                    bf:36:cf:97:2f:11:d8:63:60:f6:3b:43:45:f5:41:
                    b1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8A:8F:09:E4:3A:AA:B6:DB:A9:E9:3C:A4:72:FC:E1:4C:C1:8F:FC
            X509v3 Authority Key Identifier:
                keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ba:f2:f8:6c:93:c8:4d:4f:f0:0d:32:89:ca:94:c6:c2:72:
         7b:0e:ca:7a:fa:53:c2:41:8f:c7:64:bb:cc:b3:8f:fb:5c:84:
         5e:d9:c5:d9:9a:06:70:61:9b:a5:4c:15:00:5c:87:83:06:4c:
         48:b1:cd:78:4b:a7:f3:8d:f6:a9:c6:9f:db:d6:7b:1a:91:3c:
         22:04:9e:77:93:b9:30:27:85:78:91:da:b8:ac:d4:71:8b:e2:
         34:65:34:ca:f3:aa:0d:e9:05:01:53:44:1e:e2:06:8a:3e:8d:
         2d:b7:e9:2d:94:4c:fc:86:e5:ad:6a:4b:a2:4e:b7:1c:49:fa:
         00:b4:27:f0:de:63:ac:14:f9:bd:8c:1b:b8:14:0d:b0:03:fb:
         65:66:08:48:7c:c7:b7:5d:60:1e:fa:16:16:29:93:42:eb:2f:
         28:bd:e8:f1:af:80:1c:36:e9:ea:19:eb:04:f4:b5:66:d4:2a:
         60:02:38:a4:81:6a:cd:87:56:1b:12:d4:8b:7f:bd:29:69:fd:
         03:e7:5d:d0:c7:1f:05:4a:42:43:b0:70:38:d2:9b:73:47:f8:
         dd:2a:34:27:d5:16:9c:5a:f1:dc:e7:8e:b0:53:2b:e6:f2:41:
         3d:b1:48:48:07:86:58:84:5d:82:53:88:a9:3d:39:40:02:a4:
         2e:5e:5f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Qc3ahYD+0VIhCET4W3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM1NjAzZTUyZTgzMTUzNzcxNmQ0NThiMzYwMTkyZjk5
YTM2ODkwHhcNMjUxMDE5MTkwMTIyWhcNMjUxMDIwMTkwMTIyWjAzMTEwLwYDVQQD
EyhmMDhhOGYwOWU0M2FhYWI2ZGJhOWU5M2NhNDcyZmNlMTRjYzE4ZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lbtzslgXwOtrXNX/RpU44vHk0AN
g5qy+UUZZdPttCrbW+o5BT/Xz+Pdb5kVglZ+AwBBsP3Nj6eBvKcYset3gSW1GbLW
QC5ZpGIOG3JoDnpOyflcW474/7HOv6BeJtVOGTv7N6M0/kef6s5VfSXDT4wPq6EE
9QfisJsvrG4X7IL2AuS8i5f+54yiusoLS6+7xnJ/MoLof2ZZa7VCZKPo+q+eKEXN
Dhpy4ACrgDiZa6FhloFl4j6btC8NZaCeMgFQ8WbR7+u7HwjFhRaUMeA8wXtoMDr2
D0HSkEwT1Sj916uiqIJYtHu5WluJfR9KSTW/Ns+XLxHYY2D2O0NF9UGxaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCKjwnkOqq226npPKRy/OFMwY/8MB8GA1UdIwQY
MBaAFK+TVgPlLoMVN3FtRYs2AZL5mjaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYt
MGEwZDA1ZWQwYzZiLzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zMDAxYWQtZGU5MC00MzYwLTgxMWYtMGEwZDA1ZWQwYzZi
LzEvcjVOV0EtVXVneFUzY1cxRml6WUJrdm1hTm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLry+GyT
yE1P8A0yicqUxsJyew7KevpTwkGPx2S7zLOP+1yEXtnF2ZoGcGGbpUwVAFyHgwZM
SLHNeEun8432qcaf29Z7GpE8IgSed5O5MCeFeJHauKzUcYviNGU0yvOqDekFAVNE
HuIGij6NLbfpLZRM/IblrWpLok63HEn6ALQn8N5jrBT5vYwbuBQNsAP7ZWYISHzH
t11gHvoWFimTQusvKL3o8a+AHDbp6hnrBPS1ZtQqYAI4pIFqzYdWGxLUi3+9KWn9
A+dd0McfBUpCQ7BwONKbc0f43So0J9UWnFrx3OeOsFMr5vJBPbFISAeGWIRdglOI
qT05QAKkLl5fYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:23 2025 by rpki-client