Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          fzD578c9LQFrtmpXKyu9Wt+3l0lnRYCNs0e2RRqPqsM=
Subject key identifier:   E5:FC:98:60:5E:CB:BB:03:D4:94:E2:04:25:CA:00:E5:6E:32:09:0A
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       019A4D3CB8BB05AFD36294E820B0B578C74D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          170C
Signing time:             Tue 04 Nov 2025 05:00:16 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:16 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:16 +0000
Files and hashes:         1: 0mHHxrKDuXooxqRJqM3AcObFutU.roa (hash: 0sIJmx7yyuOdBXcmte6YeWeL6TZg8JAjxBTze6wfptI=)
                          2: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: USFSCSkRhR+DcSUWnBbx3Bq2KRffnZz7NvuLm888Lws=)
                          3: 7CJziOdAfq9jwl7KYFdQlPSS2HM.roa (hash: oYgf2+8vVMNQWr/UIAh3TmOHiKE3yvmzUsWvpHQBY4E=)
                          4: AA2twhj3JjqNeEtfXh_nvFIhwUI.roa (hash: 7pwyUMMRmENXJp1YdVN9DBuKjXp76GQ7r0RF+5Zw+oI=)
                          5: NKe-wrE2WicgBb0c0Ud-bVOtGPw.roa (hash: gADDqpEfldBNZqdg/FkPxqfMdnRA+6kZ643uxJ4620k=)
                          6: dV3eLvyh7dkJSKTfdErtuw7Jadc.roa (hash: NpVV1N+SDAUUoPHhUF4/SnqeySzcrRHlw0l3druFyDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3c:b8:bb:05:af:d3:62:94:e8:20:b0:b5:78:c7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Nov  4 05:00:16 2025 GMT
            Not After : Nov  5 05:00:16 2025 GMT
        Subject: CN=e5fc98605ecbbb03d494e20425ca00e56e32090a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:fc:ea:1c:56:d5:01:7d:1a:3d:03:59:ee:
                    98:fa:64:4c:79:3f:f2:2f:a4:94:08:48:e0:50:43:
                    64:bf:5a:03:71:68:f1:e2:a7:7f:ed:7a:64:82:a1:
                    1a:c8:23:a2:0d:b6:41:4a:3b:4a:77:c1:f5:da:75:
                    6f:87:2a:1b:65:7f:e4:54:a7:d1:71:e6:8d:94:d5:
                    b8:b3:f9:8f:2d:3e:d0:7e:22:5a:05:3f:dd:be:2c:
                    40:66:7c:40:15:6a:51:28:f5:21:7f:04:be:97:39:
                    33:1f:68:47:9b:41:91:77:92:50:74:43:c7:3e:c5:
                    e0:68:08:a2:dc:2c:ca:44:1b:6c:ce:a6:2c:b5:fc:
                    8d:09:83:79:82:f1:9e:ef:c4:42:a1:57:eb:f9:2f:
                    bf:d6:19:12:91:d4:ac:e0:c9:a4:dc:86:12:33:63:
                    1a:bc:d5:b0:fb:22:d4:11:d4:ef:00:11:78:7d:57:
                    d1:7c:4b:ef:11:74:88:f0:fe:9f:e2:59:a1:48:b8:
                    d4:1f:64:c0:f2:11:2d:e2:67:73:4c:c0:53:6b:2a:
                    b7:22:21:c1:6b:86:64:c8:ea:18:f1:e9:45:fd:2b:
                    53:46:03:1b:6f:c6:a2:00:c4:a1:4c:35:82:6d:47:
                    8b:b5:05:b2:e8:63:28:73:2e:82:16:da:40:15:86:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FC:98:60:5E:CB:BB:03:D4:94:E2:04:25:CA:00:E5:6E:32:09:0A
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a7:38:e0:9d:61:49:e7:12:5b:ac:52:c1:67:d7:5a:be:03:
         c1:b3:1b:7e:3e:fb:91:15:66:4b:93:a4:43:9e:72:aa:42:00:
         cb:1e:51:b5:d9:cc:50:72:4e:5d:aa:6a:6e:b6:59:89:2a:9b:
         12:74:54:40:4e:e1:14:e3:f9:dd:db:7f:2a:01:30:ab:4f:7e:
         0c:12:60:31:c8:d2:06:cc:43:b1:c3:25:9c:45:bb:8d:c7:70:
         82:b5:e8:51:d0:36:43:18:62:27:25:32:9b:8f:1f:a2:c3:9e:
         47:e8:70:4b:dc:35:3a:76:3b:46:0f:7b:59:bf:32:df:fc:9d:
         cf:4f:c7:ce:8f:e2:43:42:46:d2:32:de:3f:c6:9c:44:f9:71:
         b3:bb:09:e4:c8:b3:d8:cb:8f:ad:b8:9b:82:30:68:11:13:59:
         eb:de:f3:22:70:bf:0f:c4:84:f2:8d:d1:96:44:c8:32:af:fa:
         e3:42:38:b5:b1:60:0a:f2:be:f0:0a:3d:82:e6:99:27:e2:e0:
         19:04:01:08:27:50:29:2b:c5:23:8c:bb:f2:b0:7a:20:19:66:
         33:6e:c8:d2:72:f6:e5:e2:04:11:bd:a3:1f:7a:d5:bb:ad:5b:
         bd:98:6b:b6:77:99:65:6f:85:2c:dc:47:f8:f5:06:86:20:3f:
         b1:23:ab:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPLi7Ba/TYpToILC1eMdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzJiMGVlMTg3OTI4NDA5MDY1ZDE5ZWU5YzA4NThlOGMx
N2VhMTMwHhcNMjUxMTA0MDUwMDE2WhcNMjUxMTA1MDUwMDE2WjAzMTEwLwYDVQQD
EyhlNWZjOTg2MDVlY2JiYjAzZDQ5NGUyMDQyNWNhMDBlNTZlMzIwOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/f86hxW1QF9Gj0DWe6Y+mRMeT/y
L6SUCEjgUENkv1oDcWjx4qd/7XpkgqEayCOiDbZBSjtKd8H12nVvhyobZX/kVKfR
ceaNlNW4s/mPLT7QfiJaBT/dvixAZnxAFWpRKPUhfwS+lzkzH2hHm0GRd5JQdEPH
PsXgaAii3CzKRBtszqYstfyNCYN5gvGe78RCoVfr+S+/1hkSkdSs4Mmk3IYSM2Ma
vNWw+yLUEdTvABF4fVfRfEvvEXSI8P6f4lmhSLjUH2TA8hEt4mdzTMBTayq3IiHB
a4ZkyOoY8elF/StTRgMbb8aiAMShTDWCbUeLtQWy6GMocy6CFtpAFYZSKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOX8mGBey7sD1JTiBCXKAOVuMgkKMB8GA1UdIwQY
MBaAFNLCsO4YeShAkGXRnunAhY6MF+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2Et
YzhlODYzYzFhOGQxLzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hYmFjMTQtNmVhYi00OTg1LTg2N2EtYzhlODYzYzFhOGQx
LzEvMHNLdzdoaDVLRUNRWmRHZTZjQ0Zqb3dYNmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqc44J1h
SecSW6xSwWfXWr4DwbMbfj77kRVmS5OkQ55yqkIAyx5RtdnMUHJOXapqbrZZiSqb
EnRUQE7hFOP53dt/KgEwq09+DBJgMcjSBsxDscMlnEW7jcdwgrXoUdA2QxhiJyUy
m48fosOeR+hwS9w1OnY7Rg97Wb8y3/ydz0/Hzo/iQ0JG0jLeP8acRPlxs7sJ5Miz
2MuPrbibgjBoERNZ697zInC/D8SE8o3RlkTIMq/640I4tbFgCvK+8Ao9guaZJ+Lg
GQQBCCdQKSvFI4y78rB6IBlmM27I0nL25eIEEb2jH3rVu61bvZhrtneZZW+FLNxH
+PUGhiA/sSOr3g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:53 2025 by rpki-client