Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
File:                     rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json)
Hash identifier:          yksZVq4YQnhXZ0IO+nzo7i4NQsJg8wDV0JovBml6ERg=
Subject key identifier:   61:60:5B:58:28:AF:2B:82:3F:A2:DD:40:A7:13:62:04:49:43:D9:79
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Certificate issuer:       /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial:       019A53AD157B265EDAC2CDE39460C076344E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
Manifest number:          07A6
Signing time:             Wed 05 Nov 2025 11:00:43 +0000
Manifest this update:     Wed 05 Nov 2025 11:00:43 +0000
Manifest next update:     Thu 06 Nov 2025 11:00:43 +0000
Files and hashes:         1: 9aHsA3_Ynggs276_sCFsSz4MycM.roa (hash: qPhn5WBiWKeIsNs1cjOrwQopHwGcYtGq0upChF7kDvI=)
                          2: B0641shvDQ9p2BIgOLZHHAVjZSw.roa (hash: bvzmPdErYhIKPNksHZ+/ri9guEtRIMbmfasCvweNx4w=)
                          3: XrEnfRZ_aS_v253DnFB44a25MQg.roa (hash: cz7gfFsvOBuR8Jx82WCxw05R+M3PHvihU0+XIidI9k8=)
                          4: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: U4rgwJCgVBw9qrGaM/1MDYYrcIuZAP/sPQfvQoVPXOM=)
                          5: sGNKOVYjDTSby3HV0d5UrQif03o.roa (hash: fEt1u0Pnd1OgLhD2ZLaC3l+U/rkH+wDu1pDtZ8ZNq+Q=)
                          6: xspPEiEQGiUUjQNMRrR4LTirJ8g.roa (hash: ij24ceO8VLn5TPnpgS1+UFG8iPy5YqTgJqLC4WCf/eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:ad:15:7b:26:5e:da:c2:cd:e3:94:60:c0:76:34:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
        Validity
            Not Before: Nov  5 11:00:43 2025 GMT
            Not After : Nov  6 11:00:43 2025 GMT
        Subject: CN=61605b5828af2b823fa2dd40a71362044943d979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:ac:63:81:94:1d:8b:73:5d:f8:58:1e:ca:
                    29:ec:57:c3:0d:4d:5f:3b:09:dc:cf:2d:e7:7c:35:
                    17:f1:ff:04:3e:1a:d2:a1:e4:c7:8d:84:d0:e4:f0:
                    7b:73:a7:67:4d:a4:88:92:06:f8:2c:5f:2e:aa:fc:
                    20:97:0b:f1:ee:d3:2a:54:45:d9:f2:98:71:84:e1:
                    b1:87:7a:83:f4:32:86:4d:9f:cb:6c:ef:1a:6d:ab:
                    ae:09:a2:ff:85:89:2a:da:df:8a:9c:bb:67:4f:48:
                    47:57:e5:56:7e:89:6c:18:f3:12:a5:a6:17:8b:64:
                    55:30:ce:fe:3b:d7:5b:04:6a:70:64:f1:cd:99:5d:
                    74:29:96:56:ea:92:76:bb:1a:55:c4:d4:96:3d:a1:
                    84:ef:22:35:2f:eb:d8:f2:19:51:c3:04:7d:42:56:
                    77:07:78:3e:18:bf:c5:92:13:ed:13:e6:68:99:ab:
                    6c:3e:3b:53:71:2b:c4:91:41:1c:5b:e6:87:c5:1f:
                    b4:41:23:e4:f1:01:99:81:5b:37:43:66:96:57:11:
                    1a:da:18:82:18:f0:ed:bc:3c:f7:95:9e:76:fd:65:
                    1a:ad:e2:34:67:1e:bb:fa:f0:ca:df:ff:3f:fb:d5:
                    52:4e:56:e2:67:1f:a6:bc:dd:b0:00:d1:53:02:15:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:5B:58:28:AF:2B:82:3F:A2:DD:40:A7:13:62:04:49:43:D9:79
            X509v3 Authority Key Identifier:
                keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:6d:b7:cf:b6:a9:b0:0a:fa:24:89:f7:75:93:f9:d0:30:
         c7:71:68:83:f0:68:4b:ae:04:f7:f7:af:cd:32:bc:7c:63:e7:
         11:6d:11:5f:fe:45:dd:55:eb:c0:ad:cd:18:eb:f9:ef:f9:7f:
         40:90:db:d8:9b:e5:58:a5:c4:b4:ef:9a:8a:d2:c3:7c:77:c6:
         d8:31:87:9e:70:04:8d:24:cd:37:cd:ee:35:8b:e7:ef:6a:7b:
         7e:cf:20:68:a8:67:b4:ff:c0:d8:a1:a8:ed:91:9e:f2:5a:08:
         a0:cd:af:95:dd:ef:99:e2:3d:f0:58:ea:60:a7:65:2e:14:29:
         72:bf:eb:ee:47:b3:76:7f:e5:84:f1:c1:fb:c9:ae:a4:84:a3:
         85:89:0f:ad:a5:14:7a:6d:39:6c:aa:a2:a0:99:b3:20:c7:e5:
         58:68:22:b5:3e:71:6b:29:bd:f8:d1:c5:7e:d1:53:fd:54:2c:
         b7:90:44:b4:9f:32:fd:1e:70:7f:37:ca:da:0a:d3:d1:8a:92:
         4b:d5:a8:25:46:51:8d:19:da:3e:3d:3c:51:64:04:7d:bb:8d:
         88:3f:ee:79:a0:62:01:58:f4:76:0e:78:f9:8e:63:c1:64:4a:
         a4:1c:72:e2:78:34:f8:31:98:0b:73:f8:a3:c8:e6:95:01:39:
         c5:71:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:49:53 2025 by rpki-client