Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          nfX+heT7m1rd1ALC37eoNGj0DLJkTI8WQYe/IeFsaQg=
Subject key identifier:   DD:2C:14:2B:88:CC:C1:02:A5:B9:B6:8B:32:78:8C:E7:54:CC:92:EF
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       019A50E33652F8C1BB9171943B386D0C3484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          171F
Signing time:             Tue 04 Nov 2025 22:00:59 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:59 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:59 +0000
Files and hashes:         1: C_ziNaXKn4VDpbrAEu9weVF52JA.roa (hash: uW9Tu1YIQ5nRvRVJvhMOdJvsptWQiAhpmFSnfRGl4eY=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: NgfADWX+ndHsIZ2ro7o3Y0M7Jj3nMqiPfS00+1d5g8o=)
                          3: X0VOPwSHvzkDEaI9vdnqoeKICu4.roa (hash: QYZRUmSjoVGFNA4mKmXvECcmo9Gvd4pgJxevI7UENLo=)
                          4: h8Rooww-YtXgZdj5PaYT_SFfSvw.roa (hash: u6xVJHYA1uzH6xbwrO/RW/GLLxj+VO2zqxgk0PQuKro=)
                          5: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:36:52:f8:c1:bb:91:71:94:3b:38:6d:0c:34:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Nov  4 22:00:59 2025 GMT
            Not After : Nov  5 22:00:59 2025 GMT
        Subject: CN=dd2c142b88ccc102a5b9b68b32788ce754cc92ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:0e:47:31:88:eb:39:9e:65:90:dd:4b:ab:
                    a6:80:e6:5e:85:f8:55:e8:67:b6:73:c6:72:e3:df:
                    65:0a:ad:92:95:7f:68:e1:f8:c9:d5:71:c0:66:b8:
                    7d:02:7a:d9:bc:fa:c4:07:a3:0c:a5:c9:73:f4:fb:
                    23:8d:5a:e8:44:6e:ee:14:e8:99:7c:47:4d:71:18:
                    ec:06:eb:e4:23:33:6f:f7:0f:8e:a2:91:d5:2f:02:
                    b8:90:d6:62:42:26:90:90:6e:25:8e:04:5a:77:90:
                    f3:04:4a:29:51:c6:bc:92:89:69:e9:28:49:01:95:
                    1f:f8:f9:58:d8:b0:3e:e1:52:d5:83:48:d4:cc:d1:
                    c0:93:d8:d6:f8:55:4a:88:e2:4d:03:16:64:c3:f9:
                    19:49:63:4e:cb:38:45:c5:8e:1d:b5:3f:74:71:7a:
                    0d:0a:5b:7d:28:58:e0:8a:c9:a4:69:8e:9f:31:16:
                    be:a6:97:d5:46:df:71:78:29:84:dd:e5:3b:f0:16:
                    81:7d:09:0f:7b:24:c9:b7:d1:dc:09:76:7f:d5:ce:
                    f4:df:c9:5a:b2:18:06:d0:dc:51:da:43:3a:2a:a2:
                    34:ac:6a:94:e8:5c:76:c9:f0:83:ae:b0:da:27:64:
                    7e:2b:bf:29:0f:ff:09:ef:96:f9:df:7b:fa:17:a0:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2C:14:2B:88:CC:C1:02:A5:B9:B6:8B:32:78:8C:E7:54:CC:92:EF
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1b:1a:81:57:f3:c6:fb:48:4a:c8:cd:48:13:a3:55:f3:be:
         f1:bc:f8:d3:10:8f:9a:36:84:14:da:21:a2:8d:42:5a:6d:97:
         b0:aa:29:95:03:51:cb:af:76:b2:f8:c9:72:03:30:39:ab:1d:
         84:25:bf:73:4b:7f:60:c1:e3:23:e4:91:4b:af:70:09:5d:32:
         bc:ca:90:93:0d:7a:16:aa:e2:58:57:8d:86:c0:2a:bc:ef:c3:
         75:ba:ec:0d:06:68:87:c4:42:34:33:dd:86:42:aa:6e:e2:9f:
         bd:87:60:6b:0f:d1:24:25:1e:ff:e3:2d:22:9e:f9:b6:fa:32:
         f3:90:7a:1a:01:24:22:d5:10:68:f1:5a:e9:85:1b:a5:97:ab:
         c6:58:7e:2b:aa:5c:01:68:4b:02:32:15:fd:c8:fd:dd:41:e6:
         14:8a:f2:18:51:26:10:dd:df:a9:ac:ce:87:55:6d:d3:d8:3d:
         18:69:00:78:10:56:83:a5:7b:5c:c4:49:3f:45:ad:51:29:d0:
         a6:49:7b:79:dc:6a:9a:fd:b7:8f:76:e7:41:f4:29:01:41:d6:
         aa:45:11:2c:91:06:23:08:c4:5d:01:4e:e6:f7:d6:d7:74:ad:
         d4:3d:6b:b9:aa:ee:e4:3a:2f:f8:dc:ed:9a:b2:9a:22:1d:04:
         ce:88:3f:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4zZS+MG7kXGUOzhtDDSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2
YWEzMmUwHhcNMjUxMTA0MjIwMDU5WhcNMjUxMTA1MjIwMDU5WjAzMTEwLwYDVQQD
EyhkZDJjMTQyYjg4Y2NjMTAyYTViOWI2OGIzMjc4OGNlNzU0Y2M5MmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnwORzGI6zmeZZDdS6umgOZehfhV
6Ge2c8Zy499lCq2SlX9o4fjJ1XHAZrh9AnrZvPrEB6MMpclz9PsjjVroRG7uFOiZ
fEdNcRjsBuvkIzNv9w+OopHVLwK4kNZiQiaQkG4ljgRad5DzBEopUca8kolp6ShJ
AZUf+PlY2LA+4VLVg0jUzNHAk9jW+FVKiOJNAxZkw/kZSWNOyzhFxY4dtT90cXoN
Clt9KFjgismkaY6fMRa+ppfVRt9xeCmE3eU78BaBfQkPeyTJt9HcCXZ/1c7038la
shgG0NxR2kM6KqI0rGqU6Fx2yfCDrrDaJ2R+K78pD/8J75b533v6F6DVRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0sFCuIzMECpbm2izJ4jOdUzJLvMB8GA1UdIwQY
MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt
YjBiYWQxOGYwMmQwLzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw
LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRsagVfz
xvtISsjNSBOjVfO+8bz40xCPmjaEFNohoo1CWm2XsKoplQNRy692svjJcgMwOasd
hCW/c0t/YMHjI+SRS69wCV0yvMqQkw16FqriWFeNhsAqvO/DdbrsDQZoh8RCNDPd
hkKqbuKfvYdgaw/RJCUe/+MtIp75tvoy85B6GgEkItUQaPFa6YUbpZerxlh+K6pc
AWhLAjIV/cj93UHmFIryGFEmEN3fqazOh1Vt09g9GGkAeBBWg6V7XMRJP0WtUSnQ
pkl7edxqmv23j3bnQfQpAUHWqkURLJEGIwjEXQFO5vfW13St1D1ruaru5Dov+Nzt
mrKaIh0Ezog/hQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:56:02 2025 by rpki-client