Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File:                     mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier:          QXkC6QFRQBmpyBX9VduxonTdsiIam1fMides9ncT/qE=
Subject key identifier:   EE:BD:99:41:C1:59:DC:1B:A5:77:84:96:B1:AD:C8:BE:91:48:6E:F0
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer:       /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial:       019A548852C61495A9AF05FB707C3E3498D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number:          E0
Signing time:             Wed 05 Nov 2025 15:00:11 +0000
Manifest this update:     Wed 05 Nov 2025 15:00:11 +0000
Manifest next update:     Thu 06 Nov 2025 15:00:11 +0000
Files and hashes:         1: LNE0MuZMavkklT_2pqrHqhF84rY.roa (hash: ZYqhRbVzdQKSF9ZEirdkyB29pkjWB2pzYX8b2N86rj0=)
                          2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: RnkYHLIYY+bdUoec/ua4hBnf/v45oNGz3zC9z5bPumI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:88:52:c6:14:95:a9:af:05:fb:70:7c:3e:34:98:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
        Validity
            Not Before: Nov  5 15:00:11 2025 GMT
            Not After : Nov  6 15:00:11 2025 GMT
        Subject: CN=eebd9941c159dc1ba5778496b1adc8be91486ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:a7:a3:a5:48:f3:0d:76:73:54:3f:e2:de:
                    94:bf:f8:5a:c5:9d:3a:bf:d8:02:19:db:22:d6:f6:
                    0a:9a:10:29:c9:28:66:09:c1:a6:19:7d:3e:f0:7c:
                    b0:94:14:29:17:93:ee:e8:9b:02:8f:18:4a:87:05:
                    e4:22:42:82:77:b9:47:cc:10:88:32:32:54:d3:d0:
                    f0:c0:9d:5a:ed:0b:dc:43:37:6b:60:44:2d:41:29:
                    13:d8:14:82:15:d4:59:83:5a:6a:92:1d:c8:e0:2b:
                    14:9c:0f:b8:9f:33:a5:43:9c:d0:30:3c:87:c7:cf:
                    90:94:ca:1b:cb:df:c8:6d:72:e7:d9:51:73:28:7f:
                    7e:be:f5:16:93:2a:43:f5:1d:ce:1d:e2:56:65:51:
                    f1:54:fe:e2:ee:10:d4:64:35:87:55:13:7d:8b:e0:
                    ec:ee:5e:83:a3:79:4f:0d:a8:1c:fb:7c:aa:c9:3f:
                    9f:26:2f:54:8b:be:29:02:88:76:64:2f:f4:20:9e:
                    d9:ff:eb:66:2a:90:f4:c8:51:62:9e:eb:01:86:6e:
                    d2:91:c1:57:5f:0d:6c:10:1d:48:e3:bc:27:a7:56:
                    b4:47:69:bd:24:d0:be:8e:44:1f:36:67:c1:ef:e1:
                    71:a8:0c:02:b0:f2:50:fd:6b:57:e3:79:c7:a3:3b:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:99:41:C1:59:DC:1B:A5:77:84:96:B1:AD:C8:BE:91:48:6E:F0
            X509v3 Authority Key Identifier:
                keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:45:df:5d:36:10:0d:b9:26:b2:72:d8:cc:26:05:68:bc:0d:
         49:0b:28:c0:54:de:5a:ce:bb:b0:b9:3e:ad:35:8d:4d:d9:14:
         0e:28:2e:0a:35:23:b5:53:e0:b0:5d:88:6a:ec:45:ee:6c:73:
         0e:14:cf:16:9b:88:6a:f8:86:12:d7:b2:6f:e9:75:a9:9d:65:
         66:5f:5a:24:8a:ce:a2:c5:3b:cb:48:f1:36:8a:2b:e2:87:74:
         71:f6:33:43:a5:10:98:d9:d0:2b:83:4b:2f:01:1a:21:74:93:
         19:12:25:82:ac:c9:59:00:4f:ae:a6:b5:43:69:eb:77:ad:97:
         23:72:9f:42:4d:b4:c8:2f:f0:05:a1:98:cb:d3:5b:4e:1d:37:
         65:ab:43:d5:99:f7:50:de:b5:5a:67:b2:a1:27:c7:fe:a2:30:
         d3:f8:3d:47:c2:51:1f:c9:ad:5f:d9:9d:dd:82:53:0c:07:5c:
         5e:ea:75:7a:a9:11:64:91:56:e0:71:9c:58:d4:29:8e:ba:20:
         d0:c4:69:ee:3d:c6:40:e3:f5:59:48:50:82:10:32:09:b9:c8:
         74:7b:5c:01:c8:5d:8b:de:7d:a3:19:6a:0d:97:fe:2a:09:5f:
         95:df:e0:e1:0c:5e:17:86:04:49:52:8f:9e:80:74:ca:16:b5:
         93:f1:49:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUiFLGFJWprwX7cHw+NJjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYmNhMjNkMmUyYmFkMWZiNTc4OGRkYjVmNWE2ZmM3YWI2
MmNhMjAwHhcNMjUxMTA1MTUwMDExWhcNMjUxMTA2MTUwMDExWjAzMTEwLwYDVQQD
EyhlZWJkOTk0MWMxNTlkYzFiYTU3Nzg0OTZiMWFkYzhiZTkxNDg2ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSmno6VI8w12c1Q/4t6Uv/haxZ06
v9gCGdsi1vYKmhApyShmCcGmGX0+8HywlBQpF5Pu6JsCjxhKhwXkIkKCd7lHzBCI
MjJU09DwwJ1a7QvcQzdrYEQtQSkT2BSCFdRZg1pqkh3I4CsUnA+4nzOlQ5zQMDyH
x8+QlMoby9/IbXLn2VFzKH9+vvUWkypD9R3OHeJWZVHxVP7i7hDUZDWHVRN9i+Ds
7l6Do3lPDagc+3yqyT+fJi9Ui74pAoh2ZC/0IJ7Z/+tmKpD0yFFinusBhm7SkcFX
Xw1sEB1I47wnp1a0R2m9JNC+jkQfNmfB7+FxqAwCsPJQ/WtX43nHozvH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO69mUHBWdwbpXeElrGtyL6RSG7wMB8GA1UdIwQY
MBaAFJq8oj0uK60ftXiN219ab8erYsogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEt
YmEzOWU3YzJmNmExLzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNDAwOWYtODI3NS00NzE2LTk5NzEtYmEzOWU3YzJmNmEx
LzEvbXJ5aVBTNHJyUi0xZUkzYlgxcHZ4NnRpeWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEXfXTYQ
DbkmsnLYzCYFaLwNSQsowFTeWs67sLk+rTWNTdkUDiguCjUjtVPgsF2IauxF7mxz
DhTPFpuIaviGEteyb+l1qZ1lZl9aJIrOosU7y0jxNoor4od0cfYzQ6UQmNnQK4NL
LwEaIXSTGRIlgqzJWQBPrqa1Q2nrd62XI3KfQk20yC/wBaGYy9NbTh03ZatD1Zn3
UN61WmeyoSfH/qIw0/g9R8JRH8mtX9md3YJTDAdcXup1eqkRZJFW4HGcWNQpjrog
0MRp7j3GQOP1WUhQghAyCbnIdHtcAchdi959oxlqDZf+Kglfld/g4QxeF4YESVKP
noB0yha1k/FJeQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:41:51 2025 by rpki-client