Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
File:                     72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json)
Hash identifier:          RZWYzDkezurC8wTSh/SFQZqxJsG86K1i8g7OZZCUMHw=
Subject key identifier:   32:33:42:36:24:F0:D0:41:53:84:97:3C:F6:2E:1C:76:D9:3D:A4:03
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Certificate issuer:       /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial:       019A51F566603FBC2926B67ADDDCCD51420E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
Manifest number:          1279
Signing time:             Wed 05 Nov 2025 03:00:28 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:28 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:28 +0000
Files and hashes:         1: 4mzcp9MGPOcBj8vWEpghNUUZwrg.roa (hash: FMPgZ78dma8cFYdFXzHOT5nVPlXdvUP/dSywWfkO/HA=)
                          2: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: jI4v1sxJ3gQKI1FHWpmv98tcKVzEdphesmmHJi3FLd8=)
                          3: YraDuYuMIlkEmdPd43lQxmtLVG0.roa (hash: vscD5TcTDxAgQFa013w668xvOsNW4c0gyN2OgXv6DfA=)
                          4: d-hrh1vUeLOY7U3kjW0I7g-GU8w.roa (hash: Y/cX56/Qn9APSgO+9XrU6NbdQMlq0ISTF7taZqp4egQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:66:60:3f:bc:29:26:b6:7a:dd:dc:cd:51:42:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
        Validity
            Not Before: Nov  5 03:00:28 2025 GMT
            Not After : Nov  6 03:00:28 2025 GMT
        Subject: CN=3233423624f0d0415384973cf62e1c76d93da403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:84:98:d1:7a:b2:b9:34:00:30:5f:9b:9c:
                    38:72:42:5a:cb:5c:8b:ae:a9:12:bc:1f:18:b0:a4:
                    68:1c:a8:91:d4:23:70:4f:5b:5a:28:66:86:5d:53:
                    da:44:51:07:de:d8:f7:a4:4a:f3:37:69:14:22:93:
                    0a:22:3c:9d:3b:bc:9e:cb:b5:97:33:77:a6:e7:f7:
                    33:7f:1e:b6:7b:bd:b7:cd:d6:4a:09:4b:a5:a4:2e:
                    dd:1a:68:91:3e:c4:87:91:8e:05:0f:8d:d6:93:79:
                    0d:52:55:09:21:8c:28:f0:ae:36:d9:fa:ff:ec:9f:
                    6b:aa:19:2e:32:c7:d5:a9:96:0f:e6:a1:02:8c:14:
                    4f:ad:83:5a:f8:d2:36:7a:c1:b6:1e:3c:98:bb:e3:
                    bc:eb:a0:cf:08:64:82:19:65:4f:7e:e6:0d:a8:ee:
                    70:7b:ad:13:db:a9:06:f7:8f:1c:13:9f:13:14:3c:
                    e1:5b:72:09:d6:53:01:1f:7f:11:2a:c4:b2:58:b8:
                    ad:3c:71:2c:82:32:0d:a1:c5:f8:9d:51:bc:6c:28:
                    0f:b0:ba:51:6b:f5:19:8a:c7:31:0b:24:9e:bb:42:
                    a4:8c:12:f7:d7:86:24:65:d2:51:b7:47:3c:e1:0f:
                    de:fb:82:d1:d9:36:44:69:33:25:c8:57:a3:56:63:
                    5d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:33:42:36:24:F0:D0:41:53:84:97:3C:F6:2E:1C:76:D9:3D:A4:03
            X509v3 Authority Key Identifier:
                keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c1:e7:49:64:f7:1b:2c:b3:3d:2c:d6:22:27:ec:a0:d6:13:
         17:a8:41:c3:cc:d3:67:52:8e:c6:93:6c:ce:98:30:78:5f:30:
         59:c0:68:b1:b3:43:00:e7:31:1b:54:90:91:23:77:e0:56:21:
         27:d9:57:d7:4b:e1:14:98:7b:fb:4f:ce:95:19:c8:74:dc:a7:
         9c:85:19:85:6f:75:a1:9e:97:12:f2:16:9c:1d:4b:80:44:b0:
         d6:83:8e:1e:68:1a:c4:56:f9:c2:72:c3:1e:9d:86:f2:58:c1:
         ab:b3:d8:e7:d5:fc:45:2e:2a:cd:ac:6a:5f:73:1c:48:c9:4f:
         03:31:d1:5a:28:b1:31:bb:cc:6e:64:22:a4:24:5b:01:18:22:
         ac:70:9e:dc:54:1f:db:b7:7f:6e:4e:99:ad:9d:46:e2:7d:eb:
         44:0e:03:88:aa:81:b8:04:7c:ba:51:7c:e8:bb:24:52:bb:e6:
         87:ad:5a:45:03:41:52:7a:5e:61:55:49:d3:15:d7:a0:0c:cb:
         18:13:97:1a:b3:97:c6:01:9c:3a:80:92:02:64:7e:8f:47:3a:
         46:6c:76:a0:87:01:03:28:13:8d:b4:55:80:92:54:42:da:33:
         6e:3e:a8:61:f2:35:3b:10:0b:da:25:e5:24:a8:50:81:e9:79:
         c8:ba:df:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9WZgP7wpJrZ63dzNUUIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNjc4NDY5NTc0YWNjMDNkNzgyZTYzMjgxZmY0NGZhYWFi
M2Y4NDcwHhcNMjUxMTA1MDMwMDI4WhcNMjUxMTA2MDMwMDI4WjAzMTEwLwYDVQQD
EygzMjMzNDIzNjI0ZjBkMDQxNTM4NDk3M2NmNjJlMWM3NmQ5M2RhNDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAaEmNF6srk0ADBfm5w4ckJay1yL
rqkSvB8YsKRoHKiR1CNwT1taKGaGXVPaRFEH3tj3pErzN2kUIpMKIjydO7yey7WX
M3em5/czfx62e723zdZKCUulpC7dGmiRPsSHkY4FD43Wk3kNUlUJIYwo8K422fr/
7J9rqhkuMsfVqZYP5qECjBRPrYNa+NI2esG2HjyYu+O866DPCGSCGWVPfuYNqO5w
e60T26kG948cE58TFDzhW3IJ1lMBH38RKsSyWLitPHEsgjINocX4nVG8bCgPsLpR
a/UZiscxCySeu0KkjBL314YkZdJRt0c84Q/e+4LR2TZEaTMlyFejVmNd3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIzQjYk8NBBU4SXPPYuHHbZPaQDMB8GA1UdIwQY
MBaAFO9nhGlXSswD14LmMoH/RPqqs/hHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEt
ZGMwNTllNjliMWQwLzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iNDY3M2ItMjEwYi00ZTVhLTg3NmEtZGMwNTllNjliMWQw
LzEvNzJlRWFWZEt6QVBYZ3VZeWdmOUUtcXF6LUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMHnSWT3
GyyzPSzWIifsoNYTF6hBw8zTZ1KOxpNszpgweF8wWcBosbNDAOcxG1SQkSN34FYh
J9lX10vhFJh7+0/OlRnIdNynnIUZhW91oZ6XEvIWnB1LgESw1oOOHmgaxFb5wnLD
Hp2G8ljBq7PY59X8RS4qzaxqX3McSMlPAzHRWiixMbvMbmQipCRbARgirHCe3FQf
27d/bk6ZrZ1G4n3rRA4DiKqBuAR8ulF86LskUrvmh61aRQNBUnpeYVVJ0xXXoAzL
GBOXGrOXxgGcOoCSAmR+j0c6Rmx2oIcBAygTjbRVgJJUQtozbj6oYfI1OxAL2iXl
JKhQgel5yLrfZA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:24:10 2025 by rpki-client